Privacy notice
Draft for the owner's review, not legal advice. Last updated: 3 October 2026 (contact email added; AWS's statement on model training added; earlier on 2 October: profile and location, AI feedback on reflections, AI model changed to Amazon Nova 2 Lite, account approval, quiz tries and administrator emails).
Who runs Aegis
Aegis is a personal learning platform run by one person (the "administrator"). Location: Sydney, Australia. Contact for privacy questions and requests: tabhishek308@gmail.com.
What we collect
- Account: your email address and a password. The password is handled by Amazon Cognito and stored only in protected, hashed form; the administrator cannot see it.
- Learning data: your progress through lessons, quiz attempts and scores, how many of your tries at each quiz you have used, and the weekly reflections you write (saving one is part of finishing a week), with any AI feedback on them.
- Account approval: whether the administrator has approved your account, and when. New accounts can sign in and answer the profile questions, but can open the lessons only after the administrator approves them.
- Session data: a sign-in token and a session cookie that keeps you signed in and lets the site check that you are signed in.
- Technical data: like any website, our hosting provider receives your IP address and browser details when you load a page.
- Profile: answers to a few questions asked once after your first sign-in, which you can change later on your profile page: your name, an optional phone number (not verified), confirmation that you are 18 or over, your goals, the programme that interests you, your experience, the hours you can study each week and how you heard of Aegis (the last two are optional).
- Location: the country, region and city of your connection when you sign in, as estimated by our hosting provider. Only the most recent one is kept; your IP address is not stored.
Why we use it
- To create and secure your account and keep the site for signed-in learners only.
- To save your progress and results so you can continue on any device.
- To let the administrator understand how the platform is used and support learners.
- To let the administrator approve new accounts and give another try at a quiz when a learner has used both tries.
Where it is stored and who can see it
Account and learning data are stored with Amazon Web Services in the United States (us-east-1). The site is served by Vercel. Only the administrator can view learner data, through an administrator page. We do not sell your data, show advertising, or share it with other organisations except these service providers, which process it on our behalf.
The administrator page shows profiles, progress, quiz tries and the dates of reflections, but never the text of your reflections or your quiz answers.
When a new learner answers the profile questions, or a learner has used both tries at a quiz, the administrator receives an email (sent through Amazon Simple Notification Service) with the learner's name or email address and, for a quiz, which quiz it was. It never contains quiz answers or reflection text.
Your browser also keeps some data locally (for example, progress and a sync queue) so the site works offline; you can clear it in your browser settings.
AI feedback on reflections (only if you agree)
If you tick "Grade my reflections with AI" in the reflection window, each reflection you save is sent, together with that week's learning outcomes, to Amazon Bedrock, an AWS service, where Amazon's Nova 2 Lite model returns a score and short written feedback. Requests are processed in AWS data centres in the United States (N. Virginia, Ohio or Oregon). Your name, email address and profile are not sent.
- The feedback is advice only. It never decides whether you can continue; saving the reflection is what counts.
- According to AWS's Bedrock documentation (checked 2 October 2026), by default Bedrock does not store the text sent to this model or its reply, and AWS operators cannot access them. The model is provided by Amazon, so your text is processed within AWS and is not sent to a separate AI company.
- According to AWS's Amazon Bedrock FAQ (checked 3 October 2026), AWS does not use the text sent to Bedrock or the replies to train Amazon Nova or any other model.
- The score and feedback are stored with your reflection in your account, kept as long as your reflections.
- Without your agreement, reflections are saved but never sent for AI feedback. You can withdraw your agreement at any time on your profile page; reflections saved after that are not sent.
- To keep costs under control, the number of AI-graded reflections is limited per learner each day and for the whole site each month; above the limit, reflections are saved without feedback.
How long we keep it
Until you ask us to delete it. Backups and provider logs may hold copies for a limited time afterwards.
Your choices
You can ask to see, correct or delete your data, or close your account, by writing to the contact address above. Where the law gives you further rights, we will honour them.
Age
Aegis is for adults. If you say you are under 18, your profile answers are not saved and you are signed out. If you are under 18, please do not create an account.
Changes
We will update this page when what we collect changes and show the date above.