Privacy notice
How Learn AI uses your information
Last updated: 18 October 2026
Who we are
Learn AI is a set of free courses run by Alex Varnals, a sole trader trading as Learn AI (part of Horizon Authority). We decide how your information is used, which makes us the “controller” under UK data protection law.
Contact us about anything in this notice at privacy@horizonauthority.io.
The short version
- You can take any course without giving us anything. Your progress stays in your own browser.
- If you give us your email, we use it to send you course emails and your toolkit. Emails about Horizon Authority only if you tick the separate box.
- We never store your IP address in our database. We keep a scrambled version (a keyed hash) to stop abuse. Our host's short-lived technical logs may include it (see “How long we keep it”).
- If you ask for AI feedback on a practice answer, that answer is sent to Anthropic to be checked. We don't keep it.
- We count anonymous totals (for example, how many times Day 3 of a course was finished today), with nothing that identifies you. We also use Cloudflare Web Analytics to count page views. It sets no cookies and doesn't follow you to other sites. No advertising and no tracking cookies. We don't sell or share your information for marketing.
What we collect, why, and our lawful basis
| What | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Your email address, the date you signed up, which form you used, and the exact wording you were shown | To send you course emails and your toolkit, and to show what you agreed to | Consent (Article 6(1)(a)). You can withdraw it at any time. |
| Your choice in the separate “emails about Horizon Authority” box (unticked unless you tick it) | To send you occasional emails about Horizon Authority, only if you ticked it | Consent (Article 6(1)(a)) and the Privacy and Electronic Communications Regulations (PECR) |
| A keyed hash of your IP address (not the address itself), stored with your sign-up and in short-lived rate-limit counters | To limit how often the sign-up form, AI feedback and the course counter can be used from one place, which stops abuse and keeps costs under control | Legitimate interests (Article 6(1)(f)): keeping a free service available and safe |
| The text of a practice answer, only when you press “Get AI feedback” | To check your answer against that day's list and suggest one improvement | Legitimate interests (Article 6(1)(f)): giving you the feedback you asked for |
| Anonymous daily totals: for each date, which course, which day of it, and how many times a lesson was started or completed, a prompt was copied, the Horizon Authority link was clicked, or a course was finished | To see which lessons help and where people stop, so we can improve the courses | Not personal information: only the totals are kept, with no IP address, hash, ID, browser details or time of day. Separately, your IP address is turned into a keyed hash to limit abuse (see the hashed IP row above), and that hash is deleted after about two days. |
| Page views, measured by Cloudflare Web Analytics: the page you opened, the site that sent you there (the referrer), your country, your browser, operating system and type of device, and how quickly the page loaded | To see how many people visit, how they find us and whether pages load quickly, so we can improve the site | Legitimate interests (Article 6(1)(f)): understanding how the site is used. We see only totals, not individual visits. You can object at any time (see “Cookies and local storage”). |
| Your course progress, practice answers and saved prompts | So you can pick up where you left off | Kept only in your browser's local storage. It is never sent to us, except a practice answer you choose to send for AI feedback and the anonymous totals above. |
Please don't put sensitive personal details (health, finances, other people's information) in a practice answer you send for AI feedback. The course works just as well with made-up details.
The wording shown on the email form today (version 2026-10-17.2) is: “We'll use your email to send you Learn AI course emails and your toolkit. You can unsubscribe or delete your details at any time.” and, for the optional box, “Also send me occasional emails about Horizon Authority. Optional, and you can stop them at any time.”
How long we keep it
- Email sign-ups: until you unsubscribe or ask us to delete them. If we haven't been in touch with you for 24 months (you haven't signed up again or confirmed, and we haven't emailed you), we delete your sign-up.
- After you unsubscribe: we keep your email address, the date you unsubscribed and the record of what you agreed to, so we don't email you again by mistake. We delete this record after 24 months. Use the delete option, or email us, to remove it straight away.
- Rate-limit counters (hashed IP): deleted automatically after about two days.
- Anonymous course totals: kept, because they contain nothing about you.
- AI feedback text: we don't store it. Anthropic processes it to write your feedback and deletes it within 30 days. If Anthropic's automated safety checks flag a request as breaking its usage rules, it may keep that request for up to two years. Anthropic does not use it to train its AI models.
- Technical logs: our host, Cloudflare, keeps short-lived request logs so we can find faults and spot abuse. These logs can include your IP address and basic details of your browser and the page you asked for. They do not include your email address or anything you type. They are deleted automatically after 7 days at most.
- Backups: our database keeps automatic backups for up to 30 days. If you delete your details, they disappear from the live list straight away and from the backups within 30 days.
- Email delivery records: Resend, which sends our emails, keeps a record of each email for 30 days.
- Progress in your browser: stays until you clear your browser's site data. We can't see or delete it.
Who processes it for us
- Cloudflare, Inc. (United States) hosts the site and the database that holds email sign-ups, rate-limit counters and the anonymous course totals, and keeps short-lived technical logs. It also runs Cloudflare Web Analytics, which measures page views for us (see “Cookies and local storage”). The database is held in Cloudflare's EU jurisdiction, which means it runs and stores its data only within the European Union. The rest of the site, including the code that reads and writes the database, can still run in Cloudflare data centres anywhere in the world, so your information may pass through them on its way.
- Anthropic (Anthropic Ireland, Limited, part of Anthropic, PBC in the United States) runs the AI model that checks practice answers, only when you ask for AI feedback.
- Resend (Plus Five Five, Inc., United States) sends our emails: the confirmation email and your toolkit. It receives your email address and the email we send you, and keeps delivery records (for example, whether an email was delivered or bounced) for 30 days. We have switched off open and click tracking, so we can't see whether you open our emails or click their links.
Some of these companies, or their own suppliers, are in the United States, so your information may be processed outside the UK. Cloudflare and Resend are certified under the UK Extension to the EU-US Data Privacy Framework (the “UK-US data bridge”), which UK law recognises as giving adequate protection. They also sign the UK Addendum to the EU Standard Contractual Clauses as a fallback. Anthropic protects UK data with the UK Addendum to the EU Standard Contractual Clauses in its data processing terms. You can ask us for more detail at privacy@horizonauthority.io.
Cookies and local storage
We don't use cookies for advertising or analytics. Each course saves your progress, and whether you've already been asked for your email, in your browser's local storage. That is needed for the courses you asked to use, and it never leaves your device.
To count page views, each page loads a small script from Cloudflare (static.cloudflareinsights.com). It reads how long the page took to load and sends a page-view record back to this site, with the details listed in the table above. Cloudflare says Web Analytics doesn't use cookies or local storage and doesn't “fingerprint” people by their IP address, browser details or anything else, and that it doesn't track individual visitors across websites. Like any request to this site, the page view passes through Cloudflare, so the technical logs above apply to it too.
If you'd rather not be counted, block static.cloudflareinsights.com with your browser's tracker or content blocker. The courses work exactly the same without it.
Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct it;
- ask us to delete it;
- object to, or ask us to restrict, how we use it;
- ask for your information in a portable format;
- withdraw your consent at any time, without affecting anything we did before you withdrew it.
Email privacy@horizonauthority.io to use any of these rights. We will reply within one month.
How to unsubscribe or delete your details
- Every email we send will include a link to unsubscribe or delete your details in one click.
- Or email privacy@horizonauthority.io from the address you signed up with, and we'll delete it.
- To remove your course progress, clear this site's data in your browser.
Complaints
If you're unhappy with how we've handled your information, please tell us first at privacy@horizonauthority.io. We will acknowledge your complaint within 30 days and tell you what we've done about it. You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint, or call 0303 123 1113.
Children
Learn AI is for adults aged 18 and over. Please don't use the AI feedback or give us your email address if you are under 18. If you think someone under 18 has given us their details, email privacy@horizonauthority.io and we will delete them.
Changes to this notice
If we change how we use your information, we'll update this page and its date. If the change is significant, we'll tell you by email first.