Privacy Policy

Last updated: October 13, 2026

1. Who We Are

Limino is a course-delivery platform for therapists and coaches (“Limino”, “we”, “us”). We are the data controller for therapist account data and the data processor for client data held inside therapist courses.

2. What Data We Collect

Therapists (admin users)

Google OAuth profile: name, email address, profile picture URL (used to create and identify your account).
Course content: programs, lessons, media files you upload.
Billing data: managed by Stripe; we store only Stripe customer and subscription IDs.

Clients (students)

Google OAuth profile: email used to identify enrolment.
Course progress: which lessons are completed, task responses, poll answers, AI conversation history within a course.
Telegram identity: Telegram user ID and username, for bot-delivered courses.

All visitors

Cookies and local storage: session cookie (necessary), cookie consent record, and minimal error diagnostics necessary to operate the service. Analytics, performance tracking, masked session replay and live chat require your consent.
IP address and user agent: logged with consent events for GDPR audit trail; not used for profiling.

3. Legal Basis

Contract performance (Art. 6(1)(b)): account creation, course delivery, billing.
Legitimate interest (Art. 6(1)(f)): security logging, fraud prevention, platform stability.
Consent (Art. 6(1)(a)): analytics cookies (Sentry session replay, Tawk.to live chat). You can withdraw consent at any time via the cookie banner.

4. How We Use Data

We use your data only to operate the platform: authenticating you, delivering courses, processing payments, capturing minimal error diagnostics, and providing optional analytics, performance tracking, masked replay and live support with your consent. We do not sell data or use it for behavioural advertising.

5. Data Sharing and Sub-Processors

We share data with the sub-processors listed on our Sub-Processors page. Each sub-processor is contracted under GDPR-compliant Data Processing Agreements.

6. Data Retention

Therapist accounts: retained while your account is active; deleted within 30 days of a verified account deletion request.
Client data: retained as long as the associated therapist account is active, then deleted with the course.
Consent records: retained for 3 years for GDPR compliance evidence.

7. Account and Data Deletion

You may delete your therapist account from Settings → Account. Deleting your therapist account will delete any courses you authored and the associated client data in those courses.

Clients may request deletion of their progress data by contacting us at privacy@limino.app.

8. Your Rights (EEA / UK)

You have the right to access, rectify, erase, restrict processing, object, and port your data. To exercise these rights, email privacy@limino.app. We respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

9. Cookies

We use the following cookies:

next-auth.session-token (necessary): authentication session. Session-scoped.
consent_v2 (necessary): your cookie consent record, stored as a first-party cookie and in browser local storage. 1 year.
Sentry session replay (analytics, opt-in): records anonymised page interactions to help us diagnose errors.
Tawk.to live chat (analytics, opt-in): provides live support chat.

You can change your cookie preferences at any time by clicking the “Cookie preferences” link in the footer.

10. Contact

Questions about this policy: privacy@limino.app