Privacy Notice

Last updated: August 2026

1. Who we are

UnbankedU is operated by Maximus Holdings. For the personal data described here, Maximus Holdings acts as the data controller — we decide what data is collected and why.

2. What we collect and why

• Account data (name, email address, login credentials): to create and secure your account and give you access to the programs you purchased. Legal basis: performance of our contract with you.
• Profile data (display name, photo, headline, location, experience level, goals, focus layer, links, about text): to personalize your member profile and the Learning Center. Legal basis: performance of our contract and your consent for optional fields.
• Learning data (progress, completed lessons, orientation completion, assessment answers): to track your progress and tailor guidance. Legal basis: performance of our contract.
• Support and communication data (messages you send us, newsletter preferences): to answer you and send updates you asked for. Legal basis: contract, legitimate interests, or consent for marketing.
• Usage and device data (pages viewed, clicks, referral source, approximate location, IP address, browser and device identifiers): to keep the site secure, prevent fraud, and improve the product. Legal basis: legitimate interests.
• S.O.S. Guide conversations: to generate responses and improve the assistant. Legal basis: performance of our contract.

We never ask for and never want your seed phrase, private keys, or wallet credentials. Do not send them to us. Payment card details are collected and processed by our payment provider, not by us.

3. Who we share data with

• Service providers and subprocessors that host our infrastructure, database, authentication, email delivery, analytics, and AI features.
• Paddle, our Merchant of Record, for sale of our programs, payments, subscription and order management, tax compliance, invoicing, and billing support.
• Professional advisers such as legal and accounting, where necessary.
• Authorities or regulators where we are required to disclose by law.

We do not sell your personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

5. How long we keep data

We keep account, purchase, and learning records for as long as your account is active and afterwards only as long as needed for legal, tax, accounting, and dispute-resolution purposes. Usage data is kept for a shorter period. When data is no longer needed we delete or anonymize it.

6. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent at any time. If you are in the UK or EEA you may also complain to your supervisory authority. We aim to respond within one month. To exercise any right, contact us through the Contact page.

7. Security

We apply appropriate technical and organizational measures, including encryption in transit, access controls, row-level database security so members can only read their own records, and private storage for uploaded profile images.

8. Cookies and similar technologies

We use essential cookies and local browser storage to keep you signed in and remember your progress, plus limited analytics storage to understand how the site is used. You can clear or block these in your browser settings; essential storage is required for the Learning Center to function.

9. Changes

We may update this notice. Material changes will be posted here with a new "last updated" date.