Privacy Policy
Last Updated: February 2, 2026
FumingLyon Network ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information.
1. Information We Collect
Information You Provide:
- My Next Hop: Email address, account information, profile details, interview practice data, generated feedback, and saved study progress
- Japa Reality: Name, email, phone, education, work experience, destination preferences
- Soro Soke: Email address, account information, vocabulary and speaking-practice progress, generated feedback
- Newsletter: Name and email address
- Payments: Payment information is processed by Stripe (we don't store card details)
Automatically Collected:
- IP address, browser type, device information
- Cookies and usage data (see Cookie Policy below)
- Analytics data (page views, clicks, time on site)
2. How We Use Your Information
- Provide Services: Deliver interview-prep features, create migration plans, and send newsletters
- Process Payments: Handle subscriptions and one-time purchases via Stripe
- Communication: Send service updates, respond to inquiries
- Improve Services: Analyze usage patterns to enhance features
- Legal Compliance: Comply with applicable laws and regulations
3. Data Sharing & Third Parties
We share your data with:
- OpenAI: Your prompts are sent to OpenAI for AI generation (subject to OpenAI's privacy policy)
- Stripe: Payment processing (subject to Stripe's privacy policy)
- Mailchimp: Email newsletters (subject to Mailchimp's privacy policy)
- Google: OAuth login and analytics
We do NOT sell your personal data to third parties.
4. Data Retention
- My Next Hop: Account data retained while your account remains active and for a reasonable period after closure for support, security, and compliance purposes
- Japa Reality: Form submissions retained for 2 years for follow-up and improvement
- Soro Soke: Account data retained while your account remains active and for a reasonable period after closure for support, security, and compliance purposes
- Newsletter: Until you unsubscribe
- Logs: Server logs retained for 90 days
5. Your Rights (GDPR & NDPR)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Withdraw Consent: Opt-out of data collection at any time
To exercise these rights, contact us at: privacy@fuminglyonnetwork.com
6. Data Security
We implement security measures including:
- HTTPS encryption for all data transmission
- Password hashing and secure session management
- Rate limiting to prevent abuse
- Regular security audits
- Input sanitization to prevent injection attacks
7. Cookies & Tracking
We use cookies for:
- Essential: Session management, authentication
- Analytics: Google Analytics to understand how you use our site
- Preferences: Remember your settings
You can manage cookies through our cookie banner or your browser settings.
8. International Data Transfers
Your data may be transferred to and processed in:
- United States (OpenAI, Stripe servers)
- Ireland (Google Cloud, Render.com hosting)
We ensure appropriate safeguards are in place for cross-border transfers.
9. Children's Privacy
Our services are not intended for users under 18. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this Privacy Policy occasionally. Changes will be posted on this page with an updated "Last Updated" date.
11. Contact Us
For privacy-related questions or concerns:
- Email: privacy@fuminglyonnetwork.com
- Data Protection Officer: dpo@fuminglyonnetwork.com
- Website: https://www.fuminglyonnetwork.com/contact
12. Regulatory Compliance
This Privacy Policy complies with:
- Nigeria Data Protection Regulation (NDPR) 2019
- EU General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
Data Deletion Request
Want to delete all your data? You can submit a deletion request and we'll process it within 30 days.
Request Data Deletion