Last Updated: October 2026
Welcome to Hudaflow Academy. We operate as an officially registered corporate educational institution in the United States. This Privacy and Data Protection Policy specifies precisely how we collect, store, isolate, protect, and process user financial and personal information. Your trust and data security represent our highest institutional red line.
1. Information We Collect
To deliver a premium, customized 1-on-1 pedagogical environment, we collect specific structural data metrics including:
Personal Identity Metrics: Full name, verified email address, age, geographic time-zone coordinates, and country of residence.
Educational Parameters: Tailored roadmap milestones, diagnostic level evaluation scores, and structural progress notes generated by academic counselors.
Technical Footprints: Device type, IP address, user behavior patterns inside the student portal dashboard, and operational logs.
2. Financial & Banking Data Isolation
We enforce an uncompromised structural barrier regarding your private banking information to prevent unauthorized exploitation or breaches:
Zero Bank Data Storage: Hudaflow Academy completely refuses to store, log, or hold any financial data parameters—such as credit card numbers, bank routing credentials, or CVV codes—on our institutional servers. All monetary checkouts are processed instantly via top-tier, globally encrypted payment gateway systems.
Enterprise Encryption: All live billing transactions are fully encapsulated using Advanced Encryption Standard (AES-256) and Secure Sockets Layer (SSL/TLS) protocols, matching the rigorous regulatory standards utilized by global tier-1 financial platforms.
COPPA & GDPR Regulatory Compliance Statement
Hudaflow Academy is meticulously engineered to maintain full alignment with the Children’s Online Privacy Protection Act (COPPA) in the United States and the General Data Protection Regulation (GDPR) in Europe. We strictly prohibit the collection of personal metrics from children under the age of 13 without verified, explicit prior parental consent via our unified parent dashboard profiles.
3. How We Use Your Data
Your gathered information is strictly utilized to optimize operational workflows and enhance the sanctity of the learning journey. We use data to:
Generate and continually calibrate your adaptive learning dashboard milestones.
Maintain real-time operational communication regarding lesson re-schedulings or dashboard changes.
Send structured weekly and monthly progress analytical reports to parents and adult learners.
Enforce strict internal quality control and ensure maximum educational efficiency.
4. Data Sharing and Absolute Non-Disclosure
Hudaflow Academy maintains an iron-clad commitment to privacy. We do not sell, trade, rent, lease, or distribute student personal information, contact parameters, or educational logs to any third-party corporate entities, external networks, or marketing conglomerates. Your data stays entirely encapsulated inside our proprietary secure infrastructure.
Our website uses Google Analytics and Google Ads. Google receives website visitor data through the cookies described in Section 7 (Cookies and Similar Technologies) and processes it as our service provider and under its own privacy terms.
5. Strict Pedagogical Isolation (Human-First Policy)
To preserve the sacred spiritual and educational boundary between tutors and students, all operational teachers are entirely isolated from the financial and registration layers of the platform. Instructors cannot see bank details, billing logs, or account transaction records. This strict data segregation guarantees that the 1-on-1 virtual space is entirely dedicated to compassionate spiritual guidance and academic progress.
6. Your Rights and Data Erasure
As a global consumer, you retain unconditional control over your information. At any point during or post your subscription timeline, you hold the legal right to request complete data visibility or total erasure. Upon initiating a deletion request from your user dashboard profile, all historical logs, identity parameters, and progress analytics will be permanently destroyed from our databases within 30 business days, subject only to mandatory corporate tax compliance logs.
7. Cookies and Similar Technologies
This section explains the cookies and on-device storage used on hudaflow.com, what each one does, and how you can change your choice at any time.
7.1 Your choice
7.2 Analytics: Google Analytics
We use Google Analytics to understand how visitors use the site, for example which pages are visited and how people arrive.
| Name | Purpose | Duration |
|---|---|---|
_ga | Tells visits from the same browser apart | 2 years |
_ga_<ID> | Keeps the state of the current visit | 2 years |
7.3 Advertising measurement: Google Ads
We use Google Ads to measure whether our ads lead to visits and assessment requests.
| Name | Purpose | Duration |
|---|---|---|
_gcl_au | Links an ad click to a later visit or request | 90 days |
_gcl_ls (browser storage) | Same purpose, kept in browser storage | 90 days |
We use Google Consent Mode. Until you accept, Google tags run in a restricted mode that sets no cookies on your device. Before you accept, Google tags may still send limited signals without cookies, such as that a page was viewed and your consent status, so that Google can estimate totals.
7.4 How you found us: WooCommerce source tracking
Our store system records where a visit came from, such as a search engine, a social network or a campaign link, so that a later request can be linked to its source.
| Name | Purpose | Duration |
|---|---|---|
sbjs_* (e.g. sbjs_current, sbjs_first, sbjs_session, sbjs_udata) | Source, campaign and entry page of the visit | Up to the end of the visit (about 30 minutes) |
7.5 First visit kept on your device
When cookies are allowed, our own script keeps a record of your first visit on your device. Without your consent, nothing is kept on your device: only the current visit’s campaign details and landing page are added to the booking link you click. This record holds the campaign, the page you landed on and the website that sent you, never that site’s full address. It is attached to links that lead to our academy booking pages, so we can tell which channel brought you.
| Name | Purpose | Duration |
|---|---|---|
hf_attribution_first (browser storage) | First visit: source, campaign, landing page, date | Up to 365 days |
hf_attribution_visit (session storage) | The current visit | Until you close the tab |
If you decline or withdraw consent, both are deleted.
7.6 Visitor counting without cookies: Umami
We also count page views with Umami, a privacy-friendly tool hosted on our own server. Umami sets no cookies and stores nothing on your device, so it runs for all visitors.
7.7 Strictly necessary storage
These items are needed for the site to remember your settings. They are not used for tracking.
| Name | Purpose | Duration |
|---|---|---|
hf_consent (browser storage) | Remembers your cookie choice | 12 months |
wp_consent_* | Passes your choice to the site’s plugins | 12 months |
hfx_lang, hfw_lang (browser storage) | Remembers the language you selected on a page | Until you clear it |
WordPress and our store also set cookies needed for signing in and for the shopping cart (for example wordpress_logged_in_*, wp_woocommerce_session_* and woocommerce_cart_hash). They are set only when you use these features.
7.8 Changing your choice
You can change your choice at any time. Click Cookie settings at the bottom of any page, or use the small button in the bottom corner on pages without a footer, then choose Accept or Decline. When you decline, we delete our source-tracking records and the Google and WooCommerce cookies listed above from your browser. You can also delete cookies at any time from your browser settings.
7.9 Third parties
Google acts as our service provider for Google Analytics and Google Ads. Data collected through these cookies is processed by Google under its own privacy terms: https://policies.google.com/privacy. Google may process this data outside your country, including in the United States.
8. Policy Modifications
We reserve the right to modify this regulatory document to maintain absolute alignment with changing international data laws. Any changes will be instantly updated on this page with a revised “Last Updated” timestamp. Continued engagement with our services post-modification represents a formal acknowledgment of our current security terms.
9. Contact Our Data Compliance Officer
If you have any direct legal inquiries, auditing requests, or security concerns regarding our data management frameworks, please connect directly with our compliance terminal:
Compliance Mail: legal@hudaflow.com