Privacy Policy
Poseidon Academy mobile app
Effective date: September 25, 2026
This policy covers the Poseidon Academy mobile app (app id com.poseidonholdings.academy) for iOS and Android, operated by Poseidon Holdings ("we," "us," or "our"). It does not cover the theposeidonholdings.com website, which has its own privacy policy.
Plain-language summary
- We collect your email address and a password so you can sign in. That is the only personal information Poseidon collects.
- Your password is never stored in readable form — our server keeps only a scrypt hash of it.
- The app displays advertising served by Google AdMob. To do that, Google collects your device's advertising identifier and device and network information. That data goes to Google, not to us. Section 3 explains it and how to limit it.
- Your bookmarks, checklist progress and cached lessons stay on your device and are never sent to us.
- We do not sell your personal information for money.
1. What Poseidon collects
| Data | Where it goes | Why |
|---|---|---|
| Email address | Our backend server and, as part of your sign-in session, your device | Creating your account, signing you in, and identifying your account for support or deletion requests |
| Password | Our backend server, stored only as a scrypt hash (never in plain text) | Verifying sign-in |
| Session token | Your device only, sent to our server as an authorization header when the app validates your session | Keeping you signed in between launches |
That is the complete list of what we collect. Separately, our advertising provider collects the data described in section 3.
As with any internet service, our hosting provider may keep standard server request logs (for example IP addresses and timestamps) for security and reliability purposes. We do not use those logs to build profiles of you.
2. Data stored only on your device (not collected)
The app caches data in your device's app storage so it works offline. This data never leaves your device and we cannot see it:
- Cached lesson, glossary, and checklist content
- Your bookmarked lessons
- Your release-checklist progress
Deleting the app, or clearing its storage, removes all of it.
3. Advertising
The app is free and is supported by advertising. Ads are served by Google AdMob, part of Google. The Google Mobile Ads SDK runs inside the app and communicates with Google's servers to request and display ads.
To serve those ads, Google collects and processes:
- your device's advertising identifier — the Android Advertising ID, or Apple's IDFA on iOS where you permit it;
- device and network information — device model, operating system version, language, screen dimensions, IP address and the approximate region derived from it;
- ad interaction data — which ads were shown to you, and whether you tapped them.
This information is collected by Google as a third party. Poseidon does not receive it in raw form and cannot identify you from it. We disclose it here because it is collected through our app, and because both app stores hold us responsible for what the SDKs we bundle collect.
Google's own terms explain what it does with this data:
- Google Privacy Policy
- How Google uses information from sites or apps that use our services
- Google AdMob terms
Turning off personalised advertising
You can limit or switch off personalised ads at any time:
- Android: Settings → Google → Ads, where you can delete or reset your advertising ID, or opt out of ad personalisation.
- iOS: Settings → Privacy & Security → Tracking. The app asks for tracking permission on first launch; declining it means the IDFA is not used.
- In the EEA and the UK: a consent form appears in the app the first time you open it, and you can change your choice there at any time.
Turning off personalisation does not remove ads — it means the ads you see are less targeted.
Poseidon Academy is not directed at children, and child-directed ad treatment is not enabled. See section 8.
4. How we use your information
Your email address and password hash are used solely to operate your account: registration, sign-in, and session validation. We do not use them for marketing, profiling, or ad targeting, and we do not combine them with data from other sources. Your email address is never passed to our advertising provider.
5. Sharing and selling
We do not sell your personal information for money, and we do not share your account information with third parties for their own marketing.
The parties that process data through the app are:
- Our hosting provider, which runs the backend server and database as our infrastructure processor.
- Google, which receives the advertising data described in section 3 and acts as an independent controller of it.
Under some privacy laws — notably the CCPA/CPRA in California — using advertising identifiers for personalised advertising counts as "sharing" personal information for cross-context behavioural advertising, even though no money changes hands. If you would rather we did not, use the opt-out controls in section 3, which stop personalised advertising on your device.
Lessons may contain links to external resources such as videos or articles. Tapping one opens it outside the app, and that site's own privacy policy then applies — we send them nothing about you.
6. Retention
Your account record (email address and password hash) is kept for as long as your account exists. When you delete your account, that record is deleted immediately and nothing about it is retained. Advertising data held by Google is subject to Google's own retention practices, described in its privacy policy.
7. Deleting your account and data
You can delete your account from inside the app at any time, under Account → Delete account. Deletion is immediate and permanent, and removes your email address and password hash from our server.
If you cannot access the app, see our account deletion page for how to request deletion by email.
Signing out removes the session token from your device. Uninstalling the app removes all locally stored data.
8. Children
Poseidon Academy is educational content about the music business, directed at independent artists. It is not directed at children under 13, and we do not knowingly collect personal information from children under 13. Child-directed ad treatment is not enabled, because the app is not aimed at children. If you believe a child under 13 has created an account, contact us and we will delete it.
9. Security
Passwords are hashed with scrypt on the server, sessions use signed bearer tokens, and the app communicates with the server over HTTPS. Deleting your account requires your current password as well as a valid session, so a lost or stolen token alone cannot destroy your account. No method of transmission or storage is 100% secure, but we take reasonable measures appropriate to the small amount of data we hold.
10. Your rights
Depending on where you live — for example under the GDPR in the EU and UK, or the CCPA/CPRA in California — you may have rights to access, correct, delete, or export your personal information, to opt out of personalised advertising, and to lodge a complaint with a supervisory authority. Because we hold only your email address and a password hash, exercising these rights with us is simple: contact us at the address below, or delete your account in the app. For the advertising data Google holds, use the controls in section 3 and Google's own privacy tools.
11. Changes to this policy
We may update this policy as the app changes. We will post the updated version at theposeidonholdings.com/poseidon-academy/privacy and update the effective date above. Material changes will be flagged in the app or by email.
12. Contact
Poseidon Holdings — conundrumnation@theposeidonholdings.com
See also the app's Terms of Service and account deletion page.