Data Security

Last updated: [Insert date]

Our Approach

At rYOUminate, we take data security seriously. We design our platform around a few core principles:

  • Purpose limitation: We collect only the data we need to provide our service.
  • Cohort-based reporting: Partner institutions receive de-identified, aggregated insights about their program cohorts, not individual learner records.
  • Continuous improvement: We regularly update our security practices to address emerging threats.

1. Security Practices

We implement a range of technical and organizational safeguards to protect your information:

Encryption in Transit

All data transmitted between your device and our servers uses HTTPS encryption (TLS/SSL). This ensures your information is protected from interception during transmission.

Encryption at Rest

We use encryption to protect sensitive data stored on our servers, including passwords and personal information, where technically supported.

Access Controls

We follow the principle of least privilege: team members have access only to the data and systems needed for their role. Access is regularly reviewed and revoked when unnecessary.

Audit Logging

We maintain logs of significant system activities and data access to detect and investigate suspicious behavior.

Regular Updates and Monitoring

We regularly update our systems and software to address known vulnerabilities. Our platform is monitored 24/7 for security threats and anomalies.

Strong Authentication

We require strong passwords and recommend unique credentials for each account. Passwords are hashed using industry-standard algorithms.

2. Data Minimization and Reporting Ethics

We believe in responsible data use, especially when supporting institutional partners:

Cohort-Based Reporting

Partner institutions receive insights at the cohort level (e.g., "cohort average confidence in time management") rather than individual learner data. This protects privacy while providing actionable program insights.

Anonymization Practices

Where possible, we de-identify individual learner records in partner dashboards. When individual data must be included for legitimate service delivery (e.g., a learner's own progress dashboard), we limit disclosure to authorized users.

Avoiding Individual Identification

We aim to avoid disclosing personally identifying information about individual learners in partner reports, unless explicitly necessary for program support and agreed upon in your contract.

3. Vendor Management

rYOUminate uses third-party service providers (hosting, analytics, email delivery, payment processing, scheduling, and form management) to operate the platform. All vendors are:

  • Contractually bound to maintain the confidentiality and security of your information.
  • Permitted to use your data only to provide services to rYOUminate.
  • Subject to data processing agreements that align with our security standards.
  • Regularly reviewed to ensure they meet our security expectations.

A detailed list of our service providers can be provided upon request. Please contact us for information about vendors used in your specific region or program.

4. Data Retention and Deletion

We retain your data for as long as necessary to:

  • Provide rYOUminate services.
  • Support your learning journey and progress tracking.
  • Comply with legal and contractual obligations.
  • Prevent fraud and enforce our agreements.

When you delete your account or request deletion of your data, we remove or anonymize your personal information within 30 days, unless we are required by law to retain it. Anonymized or aggregated data may be retained for analytics and product improvement.

5. What You Can Do

Protecting your data is a shared responsibility. You can take these steps:

  • Use a strong password: Create a unique, complex password with at least 12 characters. Avoid common words and reusing passwords across platforms.
  • Keep your password confidential: Never share your login credentials with others, including rYOUminate staff.
  • Log out after use: Always log out when you're finished, especially on shared devices.
  • Enable two-factor authentication (if available): Use additional verification methods to secure your account.
  • Report suspicious activity: If you notice unauthorized access or unusual behavior, contact us immediately.
  • Keep your device secure: Use antivirus software and keep your operating system and apps updated.

6. Incident Response

If we discover a security breach or unauthorized access to your information, we will:

  • Immediately investigate and contain the incident.
  • Notify affected users and relevant authorities in accordance with applicable law and our contractual obligations.
  • Provide information about the incident, including what data was accessed and steps you can take to protect yourself.
  • Take corrective actions to prevent similar incidents.

Notification will be provided without unreasonable delay and in a manner consistent with applicable privacy laws.

7. Security Requests for Institutions

If you represent an institution and need security documentation, compliance certifications, or vendor assessments, we are happy to assist.

Request vendor documentation and security details

Contact: inquiries@ryouminate.com

8. Security Concerns

If you discover a security vulnerability or have concerns about data security, please report it to us immediately:

rYOUminate Security Team

Email: inquiries@ryouminate.com

Please include details about the vulnerability and how we can contact you.