Privacy Notice
Last updated 3 October 2026
HumAIn Academy is an AI-literacy course built and run by Softway Solutions. Your employer invited you to it. This notice explains, in plain terms, what the course records about you, why, who else can see it, and what you can ask us to do about it.
We have tried to write this so that it is actually readable. If anything here is unclear, ask us — the address is at the bottom, and a person reads it.
The short version
- We hold your name, work email, and which organisation invited you.
- We record which modules you have finished, so the course can resume where you left off.
- We store what you type to Amie, and she keeps a few short notes about you between sessions so she does not start from zero each time.
- We record how the course's pages are used — clicks and scrolling — to find what is hard to use. What you type and what Amie says are blanked out of those recordings.
- Your organisation's administrator can see your progress. They cannot read your conversations with Amie.
- We do not sell your data, we do not advertise to you, and we do not track you across other websites.
- You can ask us to correct or delete everything, at any time, and we will.
Who we are
Softway Solutions is responsible for this course and for the data described here — a Data Fiduciary under India's Digital Personal Data Protection Act, and a business under the California Consumer Privacy Act. The course runs at www.humainacademy.app. Our contact address for anything in this notice, including complaints, is contact@softwaysolutions.com.
What we collect, and why
1. Your account
Your name, email address, and the organisation you belong to. We get these from the administrator who sent your invitation, or from the sign-in your organisation lets you use — you do not create an account yourself. Your organisation is worked out from your email address where we know its domain (a softway.com address belongs to Softway), and is otherwise the one the administrator chose. We need these to let you sign in and to know which organisation's course you belong to. If your organisation lets you use “Continue with work account”, its own Microsoft sign-in confirms who you are and tells us your name and work email address. Softway colleagues can also use “Continue with Google” with their softway.com Google account, and Google then tells us their name, email address and profile picture. We never see a work or Google password.
2. Your progress
Which modules you have completed and when. This is what unlocks the next module and lets you pick the course back up where you stopped.
We also note each day on which you open a module, and the avatar you choose, if you choose one. These are shown only to you, on the My Journey card in your account menu, and are deleted along with your account.
3. What you say to Amie
Amie is the AI companion inside the course. When you talk to her, we store the messages you send and the replies she gives, kept against your account. Storing them is what lets a conversation make sense from one message to the next.
One place works differently. At the end of each of the four modules about the risks of AI, you can tell Amie what still worries you, and she answers. What you type there is sent to generate her answer and is not stored, and nor is her reply.
4. What Amie remembers between sessions
This is the part worth reading closely, because it is the least obvious. Amie keeps a small set of short notes about you so that she is not meeting you for the first time on every module. Those notes cover roughly four things — the kind of work you do, what takes up most of your time, what you said you would happily hand off, and what worries you about AI — plus a brief summary of each conversation you have had.
Two things about how that works. The notes are written by an AI model reading your earlier conversations, which means they are a machine's paraphrase and can be wrong or clumsy; you can ask to see them, correct them, or have them removed. And your actual conversation text is never fed back to her — only these short notes are, which is a deliberate limit on how much of your history is in play at any moment.
5. Your answers inside the course
Some modules ask you to choose something — which worry about AI feels closest to yours, how you feel about AI generally, what you would want help with, and in the four risk modules, which part of your work a risk would touch and how you would guard against it. We keep those answers so the course can reflect them back to you later rather than asking twice.
Now and then, Amie also asks you a short question about how the course is going for you — how it feels, how the pace is, how the app is to use. What you tap, and anything you type after it, is kept so we can make the course and the app better, and we read it with your name beside it. It is never used to shape Amie’s replies to you, and it is deleted along with your account. Mixpanel, our analytics provider, is told which question she asked and which answer you tapped, but never the words you type. And Microsoft Clarity does not record what you type in her bubble.
When you use Send feedback in your account menu, we keep what you write and, if you include it, the screenshot, together with the page you were on, so the team can read it and fix things. It is stored with your account and deleted along with it. The screenshot is a picture of the course page as it was on your screen when you opened the panel — nothing outside the course is in it — and before sending you can black out any part of it, or leave it out altogether. A copy of what you wrote reaches the team by email, with a link to the screenshot that stops working after seven days.
6. How you use the course
We record a fixed, short list of things you do, so we can tell where the course is working and where people get stuck: that you signed in, that you opened a module, that you finished a video and how you answered “How did this feel?”, that you chose to stay on a video when the next one was offered, that you started or finished or skipped an interaction, that you opened Amie, that you sent her a message, that you replayed part of an interaction, that you opened the Support page, that you opened the learner guide or downloaded it, that you opened your account menu, that you chose an avatar, that you turned your My Journey card over, that something failed to load for you, that Amie asked how the course is going and whether you answered or closed it, that you sent feedback, and that you finished the course. For a module we also note how you reached it — the next-video countdown, a button, the course map — and for a sign-in, which way you signed in.
These records carry an account identifier, your organisation, which module you were on, and the country, region and city you are in. They deliberately carry no content at all — not a word you typed, not a word Amie said, not your name or email. The only choices they carry are three taps: the mark you give a video, the answer you tap when Amie asks how the course is going, and which avatar you chose — and, when you send feedback, whether a screenshot went with it. Never the words you type.
On location: the course runs in the United States and India, and knowing where you are is how we tell groups apart when we look at how the course is going. We work it out at the moment your request reaches us, from your connection, and pass on only the country, the region and the city — never your IP address, which is not sent to our analytics provider at all. A city worked out this way is approximate and can be a nearby one.
7. Video watching
For the course videos we record watch time, where people stop or rewind, and playback quality — how quickly a video started, whether it stuttered. This tells us whether a video is too long or simply broken. It is tied to your account identifier so that drop-off can be read per person as well as per video.
8. Technical information
Our hosting and video providers process the ordinary technical details of any web request — your IP address, browser and device type, and coarse location derived from the IP address (roughly, country and region). This is used to serve the site, protect it from abuse, and measure performance.
9. How the pages are used
While you are signed in, Microsoft Clarity records how you move through the course's pages: where you click, how far you scroll, and where a page seems to confuse people. We watch these recordings to find parts of the course that are hard to use, and Clarity also combines them into heatmaps of where people click.
The recordings are made with your words taken out. Anything you type, everything Amie says to you, and the text inside the interactions is blanked before it leaves your browser, so a recording shows the shape of the page and your clicks but not what was written. The recording is tied to your account identifier and your organisation, never your name or email. Clarity keeps recordings for about 30 days.
What we do not collect
- No payment details. You never pay us; your employer does.
- No sensitive categories — nothing about your health, religion, politics, caste, sexuality, biometrics, or precise location.
- No advertising or cross-site tracking. There is no ad technology in this product.
- No record of your keystrokes or of anything you write, no camera or microphone access, and no access to anything else on your device, or to anything outside this course.
Cookies and similar storage
We use five things, and three of them are strictly necessary for the course to function. We do not use advertising or cross-site tracking cookies, which is why you are not being asked to click through a consent banner.
| What | Purpose | How long |
|---|---|---|
| Sign-in cookie | Keeps you signed in. Without it you cannot use the course at all. | Your session |
amie_live_conversation | Tells the course which conversation with Amie you are currently in. Holds a random identifier and nothing else. | 1 hour |
| Short-term browser storage | Remembers small things within a single visit — whether Amie has already greeted you, for instance — so she does not repeat herself. | Until you close the tab |
muxData | Set by our video provider to recognise a returning viewer for the video quality and drop-off statistics described above. | 1 year |
_clck, _clsk | Set by Microsoft Clarity to link the pages of one visit into one recording, and to recognise a returning visitor. Only set while you are signed in. | 1 year and 1 day |
Our website analytics provider measures page visits without setting any cookie and without building a profile of you.
Who else sees your data
We use a small number of specialist companies to actually run the course. Each is bound by contract to use this data only to provide their service to us, and none of them is permitted to use it for their own purposes.
| Who | What for | What they receive |
|---|---|---|
| Supabase | Database, sign-in, and file storage | Everything described in this notice |
| Vercel | Hosting and page-visit measurement | Technical request data; no cookie, no profile |
| Anthropic | Generating Amie's replies | Your messages, your first name, your progress, and Amie's notes about you. Under their commercial terms this content is not used to train their models. |
| Mux | Delivering and measuring the videos | Your account identifier and playback behaviour. No name or email. |
| Mixpanel | Product analytics | Your account identifier, your organisation, the country, region and city you are in, and the event list above. No name, no email, no content, and never your IP address. |
| Microsoft (Clarity) | Recordings and heatmaps of how the pages are used | Your account identifier, your organisation, your clicks and scrolling, and technical request data. What you type, what Amie says and interaction text are blanked out first. No name, no email. |
| Your organisation's Microsoft sign-in | Confirming who you are when you choose “Continue with work account” | Nothing from us. It tells us your name and work email address. |
| Confirming who you are when a Softway colleague chooses “Continue with Google” | Nothing from us. It tells us your name, email address and profile picture. | |
| SendGrid | Sending sign-in and invitation emails, and passing feedback you send to our team | Your email address; and when you send feedback, what you wrote, your name and organisation, and a link to your screenshot, delivered only to our own inbox |
Beyond these, we disclose data only where the law requires it. We do not sell your personal information, and we do not share it for cross-context behavioural advertising — under the California Consumer Privacy Act or any other law.
What your organisation can see
An administrator at the organisation that invited you can see your name, your email, and how far through the course you are. They can also see how you answered the question about how you feel about AI, attributed to you by name.
They cannot see your conversations with Amie, or the notes she keeps about you. Those are not exposed anywhere in the administrator view. We built it that way deliberately: a companion you cannot be honest with is not much use.
Where your data is held
On servers in the United States (Northern Virginia). If you are in India, this means your personal data is transferred outside India — which the Digital Personal Data Protection Act permits, as the United States is not a country the Government of India has restricted for this purpose.
How long we keep it
For as long as your account exists. When your account is deleted, everything described in this notice that is held against it — your profile, your progress, your conversations with Amie, her notes about you, your answers inside the course, and any feedback you sent with its screenshots — is deleted along with it, automatically and in the same operation.
Two exceptions, both limited. Records held by our analytics and video providers are tied to an identifier rather than to your account, and are removed on request rather than automatically. And we may keep a minimal record of a deletion request itself, so that we can show we honoured it.
Your rights
You can ask us to:
- Show you what we hold — including the notes Amie keeps about you, which most people are curious about.
- Correct anything that is wrong — your name, or a note Amie has got wrong.
- Delete everything, and close your account.
- Stop Amie remembering, if you would rather she did not, while continuing the course.
If you are in India, the Digital Personal Data Protection Act also gives you the right to nominate someone to exercise these rights on your behalf if you are unable to, and the right to escalate a complaint to the Data Protection Board of India if we have not resolved it. If you are in California, you have the rights to know, delete, and correct, and the right not to be treated differently for exercising them.
To exercise any of these, or to complain, email contact@softwaysolutions.com. We will respond within 30 days. Because the course is provided through your employer, we may need to confirm your identity against your invitation before acting on a request.
Children
This is a workplace course and is not intended for anyone under 18. We do not knowingly collect data from children.
Changes to this notice
If we change what we collect or who we share it with, we will update this page and change the date at the top. If the change is significant, we will tell you by email rather than expect you to notice.