Citizen Investor
Start free
Legal

Privacy Policy

Last updated: 22 April 2026

This Privacy Policy explains how Invest by LinnetFlow ("we", "us", "our") collects, uses, and protects your personal data when you use invest.linnetflow.com.

1. Who we are

Invest by LinnetFlow is an educational fintech platform that helps people learn investing through gamified lessons, AI coaching, and a risk-free stock simulator. The data controller is LinnetFlow.

2. What data we collect

  • Account data: email address, display name, password hash.
  • Profile data: optional currency, country, and learning preferences.
  • Usage data: lessons completed, XP earned, simulator activity.
  • Technical data: device type, browser, IP address, anonymised analytics events.
  • Communication data: messages you send via support or contact forms.

3. How we use your data

  • To provide and personalise the educational platform.
  • To save your progress, portfolios, and preferences.
  • To improve the product through anonymised analytics.
  • To respond to support requests.
  • To comply with legal obligations.

4. Legal basis for processing (GDPR)

  • Contract: to deliver the service you signed up for.
  • Consent: for non-essential analytics and marketing cookies.
  • Legitimate interests: to secure the platform and improve features.
  • Legal obligation: where required by law.

5. Cookies and analytics

We use essential cookies to run the platform and optional cookies for anonymised analytics and preference storage. See our Cookie Policy for full details and how to change your choices.

6. Third-party providers

  • Hosting and infrastructure providers (cloud platforms).
  • Authentication and database providers.
  • AI providers used for educational coaching features.
  • Privacy-respecting analytics where consented.

7. Data retention

We keep your account data for as long as your account is active. If you delete your account, we remove personal data within 30 days, except where we are required to retain certain records by law.

8. Security

We use encryption in transit (HTTPS), hashed passwords, row-level security on our database, and least-privilege access controls. No system is 100% secure, but we work hard to protect your data.

9. International transfers

Some of our providers operate outside the EU/UK. Where this happens, we rely on Standard Contractual Clauses or equivalent safeguards approved by data protection authorities.

10. Your rights

Under GDPR you have the right to access, correct, delete, restrict, port, or object to processing of your personal data. You can exercise any of these rights via our data request page.

11. Contact

For privacy questions or to exercise your rights, contact us at privacy@linnetflow.com.