01Legal
Privacy Policy
Draft for review. This document was drafted in-house on 2026-08-22, has not been reviewed by a lawyer, is not legal advice, and is published here so it can be read and corrected. It does not take effect until Geoffrey Kent approves a reviewed version, and approval replaces this draft rather than amending it.
Version draft-2026-08-22, not in effect. Status: draft.
Geoffrey Kent Academy ("the Academy") is operated by Geoffrey Kent. This policy describes what personal information the Academy collects when you use the platform, why it is collected, who else processes it, and what you can ask us to do with it.
What we collect
- Account information. Your email address, and a password held only as a hash by our authentication provider. If you tell us your name, we hold that too.
- Diagnostic answers and results. Your answers to the Founder Readiness diagnostic and any other instrument you complete, the scores derived from them, the constraint and archetype the engine resolves, and the date you completed it.
- Membership and billing state. Which membership you hold, whether it is active, and the identifiers our payment processor gives us. Card numbers are entered on the processor's own hosted pages and never reach the Academy.
- Learning activity. Which lessons and missions you have opened or completed, and where you left off.
- Attribution. A campaign reference from the link you arrived on, and the date you arrived.
- Support correspondence. Anything you send us, and notes staff record about it.
The Academy does not store raw IP addresses or raw browser user-agent strings for analytics, and does not sell personal information to anyone.
Why we collect it
To give you an account and keep it secure; to score the diagnostic and produce your scorecard, constraint, archetype and mission; to give you access to what your membership includes; to take payment and answer billing questions; to answer support requests; and to understand, in aggregate, which entry points bring founders to the Academy.
Who else processes it
The Academy runs on a small number of vendors, each of which processes some of the above on our instructions:
- Supabase for the database and authentication.
- Stripe for payments and subscription billing.
- Vercel for application hosting.
- Mux for video hosting and playback.
This list is part of what a reviewer is asked to confirm before this draft is approved.
How long we keep it
Retention periods have not been set yet. That decision is open and is recorded as such internally rather than answered here with a number nobody has agreed to. Until it is settled, account, diagnostic and billing records are kept for as long as your account exists.
Your choices
You can ask us to show you the personal information we hold about you, correct it, delete your account and the data attached to it, or send you a copy. Ask by writing to the support contact published in the Academy. We will tell you what we have done and when.
Depending on where you live you may have further rights under laws such as the UK and EU General Data Protection Regulation or the California Consumer Privacy Act. The specific mechanics of those rights, including any right to complain to a regulator, are part of what this draft needs reviewed.
Children
The Academy is built for people running or starting a business and is not directed at children. Do not create an account for anyone under 16.
Changes
When this document changes, the new version is published with a new version identifier. Agreement to an earlier version does not carry forward: the platform records consent against a specific version, and a new one is asked for rather than assumed.