Privacy Policy

Last Updated: October 3, 2026

CertLynx is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use and share it, how it is stored, and the choices available to you when you use the CertLynx website, iOS and Android applications, and related services (collectively, the “Platform”).

Information We Collect

  • Account and authentication information: name, email address, password or authentication credentials, and information needed to create and secure your account.
  • Phone and security information: if you provide a mobile number for verification, security, or text messaging, we collect the number and related verification or consent information. A number may be used for verification or security even if you do not opt in to optional reminder messages.
  • Profile information: information you choose to provide, such as a profile photo, bio, certification interests, study goals, and related profile details.
  • User Content: videos, photos, posts, comments, forum content, messages, study-group content, captions, and other content you choose to create, record, post, or upload.
  • Usage and device information: information actually transmitted when you use the Platform, such as pages or screens viewed, features used, actions taken, and basic browser or device information.
  • Website cookies and related technologies: the website uses cookies, browser storage, analytics, and website security technologies as described in the Cookie Policy.
  • Mobile authentication storage: the native apps may securely store login or authentication tokens using protected device storage, such as SecureStore or comparable operating-system security storage. Native app login does not rely on the website's next-auth cookies.

Camera, Microphone, and Photo Library in the Mobile Apps

The native iOS and Android applications may request access to your camera, microphone, and photo library so you can record, select, and upload study videos, photos, or other content you choose to share. These permissions are requested for the features that need them; they are not a disclosure that every permission is used at all times.

Content you choose to upload is transmitted off your device to CertLynx or its service providers as necessary to store, process, display, moderate, and deliver that content. You can control camera, microphone, and photo-library permissions through your device settings. Denying a permission may make the related feature unavailable.

How We Use Information

  • Provide, operate, maintain, secure, and improve the Platform.
  • Create and manage accounts and authenticate users.
  • Enable profiles, community features, study groups, User Content, tutoring, learning tools, and other requested functionality.
  • Personalize relevant certification, study-group, community, and content experiences.
  • Process eligible payments and payment-related features.
  • Communicate about accounts, transactions, support, security, and service updates.
  • Detect fraud, abuse, policy violations, and security threats.
  • Measure website usage and performance where the applicable measurement tools are enabled.

Website Security, Device Fingerprinting, and Phone Verification

The CertLynx website may use device-fingerprinting technology, including FingerprintJS or similar website security technology, at sign-up, login, or other security-sensitive points to help detect repeat abuse and attempts to evade account restrictions. Native password login in the iOS and Android applications does not send or use the website FingerprintJS visitor identifier. The native apps may use other security information made available through the app, operating system, authentication service, device, or server to protect accounts and prevent abuse. Phone verification may be required for certain actions or account types.

SMS / Text Messaging

CertLynx may send transactional or account-related text messages to users who provide a mobile number, including verification codes and, where the user has opted in, study reminders or tutoring-related updates. Message frequency varies and message and data rates may apply. Where consent is required for optional messages, consent is not a condition of purchase. You may opt out of optional text messages by replying STOP or using available messaging settings. Reply HELP for help.

We do not sell, rent, or share mobile numbers or SMS opt-in consent with third parties or affiliates for their marketing or promotional purposes. Twilio may process phone numbers and messaging information solely as needed to provide CertLynx messaging services.

Lynx (AI Study Companion)

Lynx, including timed Lynx Study Sessions, is available on the CertLynx website and in the iOS and Android apps when enabled for your account.

Lynx Study Sessions do not use your device camera or microphone. Native camera and microphone access remains for other features (such as recording study videos), not for Lynx facial or voice analysis.

Lynx chat and Need-help messages during a Lynx Study Session are text-based on the Platform and do not require camera or microphone access. Chat messages and relevant session context may be sent to OpenAI's API to generate responses. CertLynx does not send raw camera video or raw microphone recordings to OpenAI as part of Lynx chat.

Full Experience / Video Mode: Lynx video-based Full Experience functionality is currently unavailable. If enabled in the future, it may request browser camera and microphone access. When enabled and affirmatively used, browser-based facial-expression analysis may be performed locally using in-browser models, and browser speech-recognition services may process spoken words according to the browser provider's privacy practices. Required permission prompts and disclosures will be presented before that processing.

Lynx session data, including chat history and relevant session information, may be stored and associated with your account. You may use available Lynx controls or contact support to request deletion of Lynx session history, subject to lawful retention requirements.

If you upload or paste study materials for Lynx, we extract text from PDF, Word, or TXT (and pasted notes), store it with your account, and may send excerpts to OpenAI to ground Lynx responses. Post-session Lynx recaps may be generated from Need-help transcripts in the current session and, when available, Need-help messages from prior completed Lynx Study Sessions on the same subject.

Service Providers and Third-Party Processing

CertLynx uses service providers to operate specific parts of the Platform. Depending on the feature used, providers may process information on our behalf or under their applicable terms. These include:

  • Amazon Web Services (AWS), including S3 or related cloud services: hosting, infrastructure, and storage of Platform data and uploaded content.
  • Stripe: payment processing, payment-related features, fraud prevention, and eligible payouts.
  • OpenAI: processing Lynx chat messages and relevant context to generate AI-assisted responses.
  • Twilio: delivery of verification and other CertLynx text messages where SMS functionality is used.
  • Resend: delivery of account, transactional, support, or other CertLynx email communications where enabled.
  • Google: website analytics through Google Analytics, Google Ads conversion measurement where enabled on the website, and browser-provided services that may be used by optional web features.

Service providers receive information only as reasonably necessary for the applicable service. We require or expect providers handling personal information on our behalf to protect it consistently with applicable law and their contractual obligations.

Advertising

CertLynx may display first-party advertisements for certification-related products or services. CertLynx manages these placements directly and does not use third-party advertising networks to serve CertLynx ads. We may use information such as certification interests or activity on CertLynx to select relevant first-party ads, but we do not provide personal information to external advertisers for their independent behavioral advertising.

The mobile feed does not currently display CertLynx advertising placements. If mobile placements are introduced, this Privacy Policy and the Advertising Policy will apply.

Sale and Sharing of Personal Information

CertLynx does not sell personal information. We do not share personal information with third parties for their independent cross-context behavioral advertising or behavioral advertising profiles. We may disclose information to service providers for the operational purposes described in this policy and as otherwise required or permitted by law.

International Data Transfers

CertLynx and some service providers operate or maintain systems in the United States. If you access the Platform from another country, information may be transferred to, stored in, or processed in the United States or other countries where CertLynx or its providers operate. For example, website analytics information processed through Google Analytics may be transmitted to and stored on servers in the United States. Where required, appropriate safeguards are used for international transfers.

Data Retention, Security, and Deletion

We retain personal information only for as long as reasonably necessary to provide the Platform, fulfill the purposes described here, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and protect users and the Platform. Retention periods can vary by data type and purpose.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including protected authentication storage in the native apps and secure transmission practices where applicable. No transmission or storage method is completely secure.

You can delete your CertLynx account and associated personal data without signing in with Google, Apple, or a CertLynx password. If you can still sign in, the fastest option is Settings: open the Security tab, then tap Delete Account. On the website use Settings. Deletion from Settings takes effect when you confirm it.

If you cannot sign in, submit the form below or email privacy@certlynx.com. We review requests and complete deletion within 30 days.

Account deletion is intended to delete or de-identify personal information and User Content associated with the account, including profile information, study activity stored with the account, messages we can reasonably remove, and app or website records tied to that user. CertLynx may retain information that we must or are permitted to keep for legal, security, fraud-prevention, dispute-resolution, tax, or other legitimate purposes. Examples include records of a completed payment, content we are required to preserve, and information needed to prevent banned or deleted accounts from immediately returning. You may also contact support@certlynx.com with deletion or privacy questions.

Your Choices and Privacy Rights

  • Update available profile and account information through account settings.
  • Manage website cookies using browser controls and any controls CertLynx makes available.
  • Manage camera, microphone, and photo-library permissions for the native apps through device settings.
  • Opt out of optional SMS messages as described above.
  • Depending on where you live, request access, correction, deletion, portability, restriction, or other rights provided by applicable privacy law. Account-deletion requests can be submitted in the Data Retention, Security, and Deletion section above.

Children's Privacy

CertLynx is intended for users who are at least 18 years old and is not directed to children or minors under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we collected personal information from a person under 18, we will take reasonable steps to delete it, subject to applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are material, we may provide notice through the Platform or by other appropriate means. The “Last Updated” date above indicates when this policy was most recently revised.

Contact Us

For privacy questions or requests, contact privacy@certlynx.com or support@certlynx.com.