Privacy Policy

Last updated: September 2026

This Privacy Policy describes how WINNAgility ("we", "us", or "our") collects, uses, and protects your information when you use the WINNAgility app ("the App"). By using the App, you agree to the practices described in this policy.

1. Information We Collect

We collect the following information when you create an account or use the App:

Account information — your email address and display name, used for account creation and login. If you sign in using a third-party provider (e.g. Google or Microsoft), that provider shares the email and name it holds for you.
Usage data — courses you have viewed, downloaded, marked as useful, or completed, and aggregated statistics about how filters and search are used (e.g. which filter categories are popular). This is used to personalise your experience and improve the App.
Uploaded content — course images and related metadata that you upload. When you upload a course, your account is recorded as the source of that upload.
Designer information — names and countries of course designers, added by users when uploading a course.
Traffic source data — when you arrive via a campaign link, we record the UTM parameters present in the link (source, medium, campaign) and the page you landed on, to understand which marketing efforts bring visitors. This is not linked to your account, email address, or IP address.

We do not collect location data, payment information, or sensitive personal data.

2. Legal Basis for Processing (GDPR)

We process your personal data on the following legal grounds:

Consent — when you create an account and use features such as marking a course useful or completed.
Performance of a contract — to provide the account and features you requested.
Legitimate interest — to analyse aggregate usage and improve the App, in a way that does not override your rights.

You may withdraw consent at any time by deleting your account, as described in section 7.

3. How We Use Your Information

To provide and operate the App and its features.
To personalise your experience (e.g. tracking completed and useful courses).
To improve App performance, search, and content quality through aggregate statistics.
To measure the effectiveness of marketing campaigns through aggregate, anonymous traffic-source data.
To respond to support requests sent to us by email.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Cookies & Local Storage

The App does not use advertising or tracking cookies. We only use essential local storage in your browser to keep you signed in and remember your preferences (such as dark mode and saved default filters). These are necessary for the App to function and are not shared with third parties. No cookie banner is shown because no non-essential cookies are set.

5. Data Storage & Security

Your data is stored securely on the Base44 platform infrastructure. We take reasonable technical measures to protect your information from unauthorised access, loss, or misuse. Access to personal data is limited to authorised administrators only.

Because the hosting infrastructure may be located outside the European Economic Area (EEA), we rely on appropriate safeguards (such as Standard Contractual Clauses) to ensure your data is protected to a level consistent with EU/EEA law when transferred outside the EEA.

6. Data Retention

We retain your account data for as long as your account is active. Uploaded course content remains on the App even after the uploading account is deleted, as it is intended for public sharing; the link to your account is removed on deletion. If you wish to delete your account and associated data, please contact us at info@winnagility.se and we will process your request promptly.

7. Third-Party Services

The App uses the following third-party services:

Base44 — cloud platform providing backend infrastructure, authentication, and data storage.
Google Fonts — used to load fonts for the user interface.
flagcdn.com — used to display country flags next to designer names.
Authentication providers — if you sign in with Google or Microsoft, that provider processes your sign-in.

These services may process limited technical data (such as IP addresses) in accordance with their own privacy policies.

8. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Your Rights

Under the GDPR and similar laws, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and personal data ("right to be forgotten").
Receive a copy of your data in a portable format ("data portability").
Object to or restrict certain processing of your data.
Withdraw consent at any time by deleting your account.
Lodge a complaint with the supervisory authority in your country (in Sweden: IMY — Integritysskyddsmyndigheten).

To exercise any of these rights, contact us at info@winnagility.se.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected with an updated date at the top of this page. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

WINNAgility
info@winnagility.se
www.winnagility.com