Privacy Policy

1. Who we are

UCFYX is an online platform for learning networking and cybersecurity. It covers CCNA-level networking through an interactive command-line simulator, hands-on labs, a subnetting trainer, troubleshooting scenarios, and exam practice, and it covers cybersecurity through a 12-course Cybersecurity Academy with 120 learning modules and 120 hands-on cyber labs. This policy explains what information we collect when you use UCFYX, why we collect it, and the choices you have.

2. Information you provide

When you create and use an account, we store:

• Account details: your email address and a username, which are required to create an account.
• Password: if you register with a password, we never store it in readable form. We store only a salted, computationally-hardened hash that cannot be reversed back into your password.
• Profile details you choose to add: first name, last name, a short bio, and an avatar image. These are optional and you control them from your profile.
• Google sign-in (optional): if you choose to sign in with Google, Google sends us your Google account identifier, email address, name, and profile picture URL. We do not receive your Google password. You can read more in Google's own privacy policy.

3. Information created as you learn

As you use the learning features, the platform records your activity so it can show your progress and recommend what to study next. This includes networking lab attempts and results, exam scores, troubleshooting sessions, subnetting drill results, Cybersecurity Academy module completion, cyber lab progress, and derived statistics such as mastery levels and streaks. This learning data is tied to your account.

4. Information collected automatically

To keep accounts secure, we record a small amount of technical information: the time of your last sign-in, when your email was verified, and when your password was last changed. Our servers also keep operational logs that may include your IP address and basic request information, which we use to operate the service, prevent abuse, and enforce rate limits. We do not use third-party advertising or behavioural tracking.

5. How we use your information

• To create and secure your account, including email verification, password reset, and protecting against abuse such as brute-force attempts.
• To provide the learning experience: running labs and exams, saving your results, and generating progress and recommendations.
• To communicate with you about your account, such as verification and password-reset emails.
• To operate, maintain, and improve the reliability and security of the platform.

6. How your information is stored and shared

Your data is stored in our own database and on our own servers. Avatar images you upload are stored on our server, not handed to a third party.

We do not sell your personal information. We share information only with the limited service providers needed to run the platform — specifically, an email delivery provider to send verification and password-reset messages, and Google's identity service if you choose Google sign-in. We may also disclose information where required by law.

7. Email

We send transactional emails that are part of the service: a verification email when you register or request one, and a password-reset email when you ask to reset your password. These contain time-limited, single-use links. We do not send marketing email.

8. Data retention

We keep your account information and learning history for as long as your account exists. Verification and password-reset tokens are short-lived and expire automatically. When you delete your account, your account and its associated learning records are removed from our active database; routine backups are rotated on a regular schedule.

9. Your choices and rights

• Access and update: you can view and edit your profile details at any time from your profile and settings pages.
• Change credentials: you can change your email or password, and sign out of all devices, from account settings.
• Delete your account: you can permanently delete your account and its learning history from account settings.
• Depending on where you live, you may have additional rights over your personal data; contact us to exercise them.

10. Children

UCFYX is intended for users who are old enough to consent to an online account under the laws of their country. It is not directed at young children, and we do not knowingly collect personal information from them.

11. Changes to this policy

We may update this policy as the platform evolves. When we make material changes, we will update the effective date above and, where appropriate, notify you. If we ever introduce new data practices — such as analytics — we will update this policy to describe them accurately before they take effect.

12. Contact

If you have questions about this policy or your data, contact us at support@ucfyx.com.