Privacy Policy
Last updated 11 August 2026
How Monexus International Academy collects, uses and protects your information when you browse the catalog, create an account, and take courses.
1. Who we are
Monexus International Academy operates this online learning platform. This policy explains what we do with your personal information. If you have questions about it, contact us at support@monexus.com.
Needs legal review: Insert the full registered company name, registration number and registered address, and confirm the contact address is monitored. Some jurisdictions require naming a data controller or an EU/UK representative.
2. Information we collect
We collect only what the platform needs in order to work:
- Account information — your name, email address and password. Passwords are handled by Google Firebase Authentication and are never visible to us.
- Profile details you choose to add — such as country, phone number, age and the language you speak.
- Learning activity — which courses you are enrolled in, which lessons you have completed, where you left off, and how long you spend on a lesson.
- Quiz and survey answers — including any free-text answers you write.
- Support messages — anything you send through the in-app report or coach-request forms.
- Payment information — handled entirely by Stripe. We receive confirmation of payment, the subscription status and a customer reference. We never see or store your full card number.
- Technical information — browser and device details, and error records generated automatically when something goes wrong.
You can browse the course catalog without an account. We only ask you to register when you want to enroll in or purchase a course.
3. How we use your information
We use your information to:
- Create and maintain your account and give you access to the courses you own.
- Save your progress so you can pick up where you left off.
- Take payment, manage subscriptions and apply discounts.
- Score quizzes and pass survey responses to course staff.
- Respond to support requests you send us.
- Send service messages about your account, purchases or password.
- Diagnose faults, keep the service secure, and improve our courses.
We do not sell your personal information, and we do not use your learning activity for advertising.
Needs legal review: Confirm this remains accurate if marketing, analytics or advertising tools are added later. Also confirm whether marketing email is sent and whether opt-in consent is required in your markets.
Where the law requires a legal basis for processing, we rely on performing our contract with you (providing the courses), your consent (optional profile details and any marketing), and our legitimate interests (security, fault diagnosis and improving the service).
Needs legal review: Confirm which regime applies to your learners outside Mexico — GDPR, UK GDPR or another — and adjust the legal bases and any required consent wording accordingly.
5. How long we keep it
We keep your account information and learning records for as long as your account is open. When an account is deleted, we remove your profile, enrollments, progress and quiz and survey answers.
Some records are kept in anonymized form — activity logs, audit records and error reports have your identifying details replaced so they can no longer be traced to you. Payment records held by Stripe are retained for accounting and tax purposes.
Needs legal review: Set concrete retention periods for each category, and confirm the statutory retention period for invoices and tax records in your jurisdiction.
6. Your rights
Depending on where you live, you may have the right to request a copy of your data, correct it, delete it, object to how we use it, restrict our use of it, or withdraw consent you have given.
You can edit your profile at any time from your account page. To have your account and its data deleted, contact us at support@monexus.com and we will action it.
You may also have the right to complain to your local data protection authority.
Needs legal review: Name the competent supervisory authority for your main market and confirm the statutory deadline you must meet when responding to these requests.
7. Children
This platform is intended for adults. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will remove it.
Needs legal review: Set the minimum age for each market and decide whether minors may enroll with verified parental consent. If courses are aimed at children, this section and the whole policy need rewriting for that audience.
9. Security
Access to student data is restricted to authorized staff, sign-in is handled by Google Firebase Authentication, and card details never reach our systems. No online service can be completely secure, but we take reasonable steps to protect your information.
10. Changes to this policy
We may update this policy as the platform changes. The date at the top of this page shows when it was last revised, and we will tell you about significant changes.
Needs legal review: Confirm whether advance notice or fresh consent is required for material changes in your jurisdiction.
11. Contact us
Questions about this policy or your data can be sent to support@monexus.com.
Legal review checklist
Everything a lawyer needs to confirm before this page is final. Both the English and Spanish versions need separate sign-off — they follow different legal frameworks.
- 1.1. Who we are — Insert the full registered company name, registration number and registered address, and confirm the contact address is monitored. Some jurisdictions require naming a data controller or an EU/UK representative.
- 2.3. How we use your information — Confirm this remains accurate if marketing, analytics or advertising tools are added later. Also confirm whether marketing email is sent and whether opt-in consent is required in your markets.
- 3.3. How we use your information — Confirm which regime applies to your learners outside Mexico — GDPR, UK GDPR or another — and adjust the legal bases and any required consent wording accordingly.
- 4.4. Who we share it with — Confirm the full list of processors is current, that data-processing agreements are in place with each, and that a lawful international transfer mechanism (such as standard contractual clauses) is documented.
- 5.5. How long we keep it — Set concrete retention periods for each category, and confirm the statutory retention period for invoices and tax records in your jurisdiction.
- 6.6. Your rights — Name the competent supervisory authority for your main market and confirm the statutory deadline you must meet when responding to these requests.
- 7.7. Children — Set the minimum age for each market and decide whether minors may enroll with verified parental consent. If courses are aimed at children, this section and the whole policy need rewriting for that audience.
- 8.8. Cookies and similar technologies — If analytics or marketing cookies are ever added, a cookie banner with prior consent is likely to be required, and this section must list each cookie and its purpose.
- 9.10. Changes to this policy — Confirm whether advance notice or fresh consent is required for material changes in your jurisdiction.
The Spanish version is written for Mexican law and is not a translation of this page. Have a lawyer qualified in each jurisdiction review its own version.