Privacy Policy

Last updated: 2026-05-31

Hexon Ltd (“Hexon”, “we”, “us”, “our”) is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights under UK and EU data protection law.

1. Who we are

Hexon Ltd is a company registered in England and Wales. We are the data controller for personal data collected through our platform at hexon.me and our Android application.

For data protection enquiries, contact us at privacy@hexon.me.

2. Data we collect

We collect data in the following ways:

  • Account data: name, email address, username, and profile information you provide when you register.
  • Usage data: pages visited, content watched, sessions attended, streak and progression data, and session recordings (where you have consented to analytics cookies).
  • Payment data: billing information processed securely by Stripe. We do not store card numbers.
  • Device and log data: IP address, browser type, device identifiers, and crash reports.
  • Communications: messages you send to us via support channels, including bug reports submitted through our Report a Bug form. Bug reports may include session context (current URL, recent events, session replay, browser info) where you have given explicit consent.

3. How we use your data

  • To provide, maintain, and improve the Hexon platform.
  • To process payments and manage subscriptions.
  • To personalise your experience and content recommendations.
  • To send service notifications and, where you have consented, marketing emails.
  • To detect fraud, enforce our Terms of Service, and comply with legal obligations.
  • To conduct analytics that help us understand how our service is used.

4. Legal basis for processing

We process your data on the following legal bases: contract performance (to provide the service you signed up for), legitimate interests (platform security, fraud prevention, product improvement), your consent (optional analytics, marketing emails), and legal obligation.

5. Cookies and analytics

We use cookies and similar technologies, and we use two analytics services — PostHog (cookie-based, EU-hosted) and Vercel Web Analytics (cookieless, aggregate only). Neither analytics service is activated until you give consent via our cookie banner. Where you consent, PostHog may record your session (session replay) to help us understand and improve the product. Session recordings are retained for 90 days. Please see our Cookie Policy for full details. You can withdraw consent at any time via the cookie banner.

6. Third-party services

We share data with trusted partners to operate our platform, including:

  • Stripe — payment processing
  • Supabase — authentication and database
  • Mux — video hosting and delivery
  • Cloudflare — content delivery and security
  • Resend — transactional email
  • PostHog — product analytics (EU-hosted)
  • Vercel — hosting and cookieless web analytics

We do not sell your personal data to third parties.

7. Data retention

We retain your account data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations. PostHog analytics data — including events, session recordings, and support tickets — is retained for 90 days. Transactional email records (Resend) are retained for 30 days.

8. International transfers

Some of our third-party processors operate outside the UK or EU. Where transfers occur, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

9. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request erasure (“right to be forgotten”).
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time (where processing is consent-based).

To exercise any of these rights, contact privacy@hexon.me. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Changes to this policy

We may update this policy from time to time. When we make material changes, we will notify you by email or via an in-app notice. The date at the top of this page reflects when the policy was last revised.