Zaplearn Privacy Policy

Revised and effective as of 18th June, 2026

Zaplearn is a mobile learning platform that allows enterprises to create, upload, and share training content with their employees through the Zaplearn mobile app.

Your privacy matters to Us, and We want to be transparent regarding how We use the information You share. Please take the time to get to know Our practices outlined herein.

This Privacy Policy explains:

What information We collect and why We collect it.
How We use that information.
Your data and privacy rights.

Overview

This Privacy Policy (“Policy”) for GrowthSquad Pty Ltd, doing business as Zaplearn (“Zaplearn,” “We,” “Us,” or “Our”) hereby notifies You, whether personally or on behalf of an entity (“You”), when, how, and why We might collect, store, use, and/or share (collectively, “Process”) Your information when You:

Visit Our website at www.zaplearn.io, www.zaplearn.com.au , or any other website(s) of Ours that link to this Policy;
Use or visit the Zaplearn mobile application, or any other application programming interfaces (“APIs”), bots, frameworks, development environments, templates, documentation, or configurations (collectively, the “Services”) that We develop, manage, operate, or otherwise make available;
Engage with Us in other related ways, including any sales, marketing, online communications, or events.

Your Choice

By providing personal information to Us in the course of Your use of Our Services, You consent to Us collecting, holding, using, and disclosing Your personal information in accordance with this Privacy Policy.

1. Purpose for Collecting Information

We collect and process Your information to provide, improve, and administer Our Services, communicate with You, for security and fraud prevention, and to comply with applicable laws. We may also process Your information for additional purposes with Your consent.

2. Information You Share

When You visit, use, or navigate Our Services, You may provide Us with Your information, depending on how You interact with Us and the choices You make.

THE SCOPE OF INFORMATION YOU SHARE DEPENDS ON YOUR RELATIONSHIP WITH ZAPLEARN: WHETHER YOU ARE AN ENTERPRISE CUSTOMER, OR A USER ACTING AS AN LMS MANAGER, COURSE CREATOR, OR LEARNER ON BEHALF OF YOUR EMPLOYER.

Enterprise Customers

Zaplearn is sold to businesses (“Enterprise Customers”) who deploy the Services to their own employees. When an organization subscribes to Zaplearn, the authorized representative who sets up the account shares company name, billing contact name, billing email, billing address, and payment information.

Users (LMS Managers, Course Creators, and Learners)

Unlike many consumer apps, every person who uses the Zaplearn mobile app — whether as an LMS Manager, Course Creator, or Learner — has an individual account. Accounts are created in one of two ways:

Directly, when You sign up with Your name, work email, and role information; or
On Your behalf, when Your employer (the Enterprise Customer) provisions or invites Your account, including via Google Firebase Authentication, which may pre-populate Your name, work email, employee ID, and department.

IMPORTANT: Because Zaplearn is deployed by Your employer, it is generally Your employer — not Zaplearn — that determines which employees receive accounts and what employment-related information (such as department, job title, or manager) is shared with Us. IT IS THE RESPONSIBILITY OF THE ENTERPRISE CUSTOMER TO ENSURE IT HAS THE LEGAL RIGHT TO SHARE SUCH EMPLOYEE INFORMATION WITH ZAPLEARN.

LMS Managers administer their organization’s Zaplearn workspace. This includes managing user accounts and permissions, viewing organization-wide reporting on course completion, quiz, and poll results, and configuring organization settings.

Course Creators build training content within Zaplearn. This includes uploading text, images, and video (video content is stored and streamed via Vimeo), and using built-in AI tools to help generate content, including Claude by Anthropic (for text and course generation), HeyGen (for AI avatar and video generation), and ElevenLabs (for AI voice and audio generation). Zaplearn does not access or review the substance of training content built by Course Creators. IT IS THE RESPONSIBILITY OF COURSE CREATORS AND THE ENTERPRISE CUSTOMER TO ENSURE THEY ARE LEGALLY ALLOWED TO UPLOAD ANY PERSONAL, CORPORATE, OR RESTRICTED INFORMATION INTO ZAPLEARN, INCLUDING WHEN USING THIRD-PARTY AI TOOLS TO GENERATE CONTENT.

Learners complete training materials assigned to them, including forms, quizzes, and polls. Learners’ answers to forms and quizzes, and reactions to polls (which may be anonymous if chosen by a Course Creator), are made available to the LMS Managers and/or Course Creators within their organization.

3. Other Types of Information You Share

Communications with Us: When You inquire about Our Services, subscribe to Our updates, register for Our newsletter, or otherwise communicate with Us, We may collect personal information such as Your email address or phone number.

Feedback Surveys: We may invite You to give feedback on Our Services. If You choose to give Us feedback, You may be asked to provide certain information, which may include personal information.

Events and Webinars: We may host webinars, online events, and other virtual gatherings where We collect personal information from individuals who interact with or express an interest in Zaplearn and the Services.

Business Development and Strategic Partnerships: We may collect personal information from individuals and third parties to assess and pursue potential business opportunities.

Job Applications: We may post job openings and opportunities at Zaplearn on Our website. If You submit Your application, CV, or cover letter to Us in regard to a work opportunity, We will collect and process the information contained therein to assess Your fit for a role at Zaplearn.

4. Information We Collect

In addition to the information You share as outlined above, when You use the Zaplearn mobile app, We may automatically collect additional information, including device identifiers, mobile operating system and app version, crash and diagnostic logs, push notification tokens, and IP address.

We work with the following third-party service providers, which may collect or process information on Our behalf for the purposes described below:

Provider: Purpose

Google Firebase : User authentication, and account sign-in

Vimeo : Storage and streaming of video content uploaded by Course Creators

Anthropic (Claude) : AI-assisted generation of training content for Course Creators

HeyGen : AI-generated avatar and video content for Course Creators

ElevenLabs : AI-generated voice and audio content for Course Creators

When a Course Creator uses Claude, HeyGen, or ElevenLabs to help generate training content, the text, images, audio, or video inputs provided are sent to that vendor’s systems to produce the requested output. Course Creators and Enterprise Customers should avoid including Learner personal information in prompts or inputs to these AI tools unless necessary for the training content being created, since this information may be processed by the underlying AI provider as part of generating that content.

Each provider’s own privacy practices govern its processing of information on Our behalf, and links to their privacy policies are available at their respective websites.

5. What We Do with the Information We Collect

We may use the information We collect, including Your personal information, for the following purposes:

To provide internal and service-related maintenance, protection, improvements, and personalization to Our Services, and to develop new features.
To keep LMS Managers and Course Creators informed of actions on forms, quizzes, poll replies, and course completion status within their organization. LMS Managers may also be able to view this information, or suspend or terminate a User’s account access.
To communicate with Enterprise Customers and Users to provide information We think may be useful or relevant, including billing, account management, administrative matters, customer support, and updates on Learner activity.
To access or retain information stored as part of Your account in order to satisfy applicable law, regulation, legal process, or enforceable governmental request.
To monitor and analyze trends, usage, and activities in connection with Our Services. Zaplearn will never access Your course content and has strict security policies in place to ensure the privacy of all course content.
To improve Your user experience and the overall quality of Our Services.
To investigate and prevent fraudulent activity, unauthorized access to or use of Our Services, and other illegal or unusual activities.
To help resolve any issues with Our Services, We may keep a record of customer service-related requests.
To enforce Our Privacy Policy and Terms of Service.

Important Note: Zaplearn does not control and is not responsible for how Enterprise Customers, LMS Managers, or Course Creators process personal information about Learners within their organization. LEARNERS SHOULD BE ADVISED THAT INFORMATION PROVIDED IN THE COURSE OF THEIR USE OF THE SERVICES MAY BECOME AVAILABLE TO THEIR EMPLOYER, INCLUDING LMS MANAGERS AND COURSE CREATORS WITHIN THAT ORGANIZATION. ZAPLEARN DOES NOT MAKE ANY REPRESENTATIONS REGARDING, AND IS NOT RESPONSIBLE FOR, AN EMPLOYER’S USE OF SUCH INFORMATION.

6. Retention of Your Information

We will only keep Your personal information for as long as it is necessary for the purposes set out in this Policy, unless a longer retention period is required or permitted by law. When We have no ongoing legitimate business need to process Your personal information, We will either delete or anonymize it or, if this is not possible, securely store it and isolate it from further processing until deletion is possible.

You, or Your Enterprise Customer’s LMS Manager, can request that We stop processing or delete Your personal information by emailing [INSERT SUPPORT EMAIL]. However, We may be required to keep some of Your information for certain periods of time to comply with legal regulations or to enforce Our agreements.

7. How We Share Your Information

We may need, from time to time, to share Your information in specific situations and with specific third parties as necessary to provide and improve Our Services. We never share any sensitive personal information or personally identifiable data with other parties for marketing purposes. YOUR COURSE CONTENT, UPLOADED MATERIALS, AND INFORMATION REGARDING LEARNERS IS NEVER SOLD TO THIRD PARTIES.

We will never sell Your information and will only share information with third parties in cases for which one of the following circumstances apply:

With third-party service providers: We share Your information with service providers that support Our Services, including Google Firebase (authentication), Vimeo (video hosting), Anthropic, HeyGen, and ElevenLabs (AI-assisted content generation features Course Creators may choose to use), as well as providers supporting internet infrastructure, data management, cybersecurity, payment processing, and customer support. In each case, We have a written contract with such service providers which limits their use of Your information and requires commercially reasonable data security practices.

Legal obligations: We may share Your information if required by law, regulation, or as part of any judicial, regulatory, or legal process.

Business transitions: In the event of a merger or acquisition or the contemplation thereof, We may share Your personal information with new or potential new owners and their advisors, under appropriate confidentiality obligations.

External links and applications: Our Services, or training courses created within Our Services, may contain links to other websites or applications which are not controlled, managed, or supervised by Us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Aggregation of information: We may from time to time share information in aggregated and anonymized form with Our business partners, service providers, and investors to show general trends about the use of Our Services. In all such cases, individual Users shall not be identified or identifiable.

8. Data Security

We have implemented measures to secure the information We collect and store about You, and We strive to protect Your personal data from unauthorized access, alteration, disclosure, or destruction. Our technical and organizational security measures are intended to be appropriate and commercially reasonable to protect the information We Process.

However, despite Our safeguards and best efforts to secure Your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat Our security protocols and improperly collect, access, steal, or modify Your information. In cases where an unauthorized third party improperly accesses Your information, We will make commercially reasonable efforts to promptly inform You and remedy the breach as soon as practicable, consistent with Our obligations under applicable law.

9. Your Privacy Rights

Depending on where You are located, You may have certain rights under applicable data protection laws, including:

The right to be informed about how Your personal data is collected and used;
The right to access and obtain a copy of Your personal information;
The right to request correction or erasure of Your personal information;
The right to grievance redressal; and
Where applicable, the right to nominate another individual to exercise Your rights on Your behalf in the event of death or incapacity.

If You are located in India, these rights are provided under India’s Digital Personal Data Protection Act, 2023 and its accompanying Rules.
If You are located in Saudi Arabia, these rights are provided under the Personal Data Protection Law (PDPL), regulated by the Saudi Data and Artificial Intelligence Authority (SDAIA).
If You are located in the United Arab Emirates or elsewhere in the Middle East, similar rights may apply under the applicable federal or local data protection law.
If You are located in Australia, these rights are provided under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), enforced by the Office of the Australian Information Commissioner (OAIC). This includes the right to access and correct Your personal information, the right to make a complaint to Us and, if unresolved, to lodge a complaint with the OAIC, and a statutory right to bring a claim for serious invasions of privacy.

If We use any automated decision-making (including AI-generated assessment or scoring features) that could reasonably be expected to significantly affect Your rights or interests, We will provide additional information about this consistent with Our obligations under applicable law, including the Privacy Act 1988 (Cth).

You can exercise these rights, or ask questions about Your privacy rights, by emailing Us at [INSERT SUPPORT EMAIL]. If Your account was created on Your behalf by Your employer, We may direct certain requests to Your organization’s LMS Manager, since Your employer often controls the underlying employment data.

Account Information

We strive to maintain the accuracy of Your information and rely on You, or Your organization’s LMS Manager, to help Us keep Your data up-to-date. If You would like to review or change the information in Your account, or terminate Your account, You can contact Us using the information provided in this Policy, or contact Your organization’s LMS Manager.

Upon a request to terminate an account, We will deactivate or delete the relevant account and information from Our active databases, except where We are required to retain certain information to comply with applicable legal requirements or to enforce Our agreements.

10. Location of Data Storage and International Transfers

Zaplearn’s core application infrastructure and primary databases are hosted on servers located in India.

Please note that certain features of the Services rely on third-party service providers — including Google Firebase, Vimeo, Anthropic, HeyGen, and ElevenLabs — whose own infrastructure may be located outside India, including in the United States or other countries. When Your information is processed using these features, it may be transferred to, and processed in, those other countries. We require these providers to maintain commercially reasonable data protection and security safeguards, and We rely on legally permitted transfer mechanisms where required under applicable law, including India’s Digital Personal Data Protection Act, 2023, Saudi Arabia’s PDPL, or other applicable data protection laws, to protect Your information in connection with such transfers.

If You are located in Australia, this means Your personal information will be disclosed overseas, including to Our infrastructure in India and to the third-party service providers listed above. Before doing so, We take reasonable steps, consistent with Australian Privacy Principle (APP) 8, to ensure that Your information continues to be protected in a manner consistent with the APPs.

11. Children’s Privacy

Zaplearn’s Services are designed for use by employees of Our Enterprise Customers and are not directed to, marketed to, or intended for use by minors. We do not knowingly collect personal information from individuals under the age of 18. If You believe a minor has been given access to the Services in violation of this Policy, please contact Us at [INSERT SUPPORT EMAIL] so We can investigate and take appropriate action.

12. Changes to This Privacy Policy

We may update this Policy from time to time. The updated version will be indicated by an updated “Revised” date at the beginning of the Policy, and the updated version will be effective as soon as it is accessible. If We make material changes to this Policy, We may notify You either by prominently posting a notice of such changes or by directly sending You an electronic communication. You understand and agree that You will be deemed to have accepted the updated Privacy Policy if You continue to use the Services after the new Privacy Policy takes effect.

13. Contact Us

If You would like to review or change the information in Your account, terminate Your account, have any questions, or want to contact Us about Our processing of Your personal information, please contact us using our contact form.

Zaplearn t/a GrowthSquat Pty Ltd