Privacy notice

1. Who we are

Monofor University is operated by MonoFor, Inc. ("we"). We are the data controller for the personal data described here. Contact: [email protected].

2. What we process

• Identity data received from the Monofor identity provider when you sign in: name, email address, organization, group memberships and a technical user identifier. We do not store passwords.
• Learning data: enrollments, lesson and lab progress, instructor-led session registrations.
• Exam data: the questions shown to you, your answers, scores, start and submission times.
• Credentials: your name, the certification or badge, issue and expiry dates.
• Reports you send about content or translations.
• Technical data: a sign-in cookie, your language preference and server logs (including IP address) kept for security.

3. Why and on what legal basis

• To provide the platform, run exams and issue credentials: performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• To keep the service and exams secure and prevent misconduct: legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• To improve content using your reports and aggregated statistics: legitimate interest.

4. Automated decisions

Exams are scored automatically and the pass or fail result decides whether a credential is issued. You can ask for a human review of any result within 30 days by writing to [email protected].

5. Public verification

Every credential has a public verification page and a digitally signed copy. Anyone with the link sees your name, the credential and its dates; scores are not shown. You decide whom you share the link with.

6. Who receives data

Our hosting provider and the Monofor identity provider process data on our behalf. Public videos are embedded from YouTube in privacy-enhanced mode; YouTube receives data only when you play a video. Payments are taken by Stripe: your card details never reach us, and we keep only the order record. What you enter in the training request form is used only to answer your request. We do not sell personal data or use it for advertising.

7. International transfers

Our service providers may process data outside your country. Where required we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the transfer mechanisms of KVKK Article 9.

8. How long we keep it

Account, learning, exam and credential data are kept while your account exists and deleted when you delete it. Server logs are kept for 90 days. Content reports are kept for 12 months after they are resolved.

9. Your rights

You can access, correct, delete and export your data, object to processing and restrict it (GDPR Art. 15 to 22; KVKK Art. 11). In My learning you can download your data and delete your account yourself. For anything else write to [email protected]. You can complain to the Turkish Personal Data Protection Authority or to the data protection authority in your EU country.

10. Cookies

We only use cookies that are strictly necessary: mu_session keeps you signed in (7 days) and mu_locale remembers your language and mu_tz keeps your time zone so dates and times show in your local time. We do not use analytics or advertising cookies.

11. AI translation

Course content is translated from English with AI. Your personal data is not used to train AI models.

12. Online proctoring

We currently do not record camera, microphone or biometric data. If remote proctoring is introduced, you will be informed and asked for explicit consent before your exam.

13. Rewards and gifts

If you request a gift, such as the swag pack for your first certification, we process your name, shipping address, phone number, T-shirt size and any note, based on your explicit consent, only to send that gift. We share them with the courier for delivery. The address and phone number are deleted 30 days after delivery, or when the request is rejected or withdrawn (immediately if you withdraw it). The record that a gift was requested and sent is kept with your learning record.