Meta Humans Privacy Policy

MTH Winter Park LLC d/b/a Meta Humans ("Meta Humans," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights with respect to it. We operate the Meta Humans website at metahumans.com, the HUBS platform at hubs.metahumans.com, the community platform at community.metahumans.com, and related services (collectively, the "Service").

We do not sell, rent, or trade your personal information to any third party for commercial purposes. Full stop.

1. Who This Policy Applies To

This Privacy Policy applies to all visitors and users of the Service, including:

Subscribers: independent operators of learning communities who subscribe to the HUBS platform under a Platform Subscription Agreement.

Individual users: any person with an individual account on the platform or community forum under the Platform User Terms, including a subscriber's staff and anyone enrolled in Meta Humans training.

Parents and guardians: adults connected to a member through the parent portal.

Members: children and teens attending a learning community that uses the platform. Members do not have platform accounts and do not log in.

General visitors: anyone visiting our public-facing website.

2. Two Ways We Handle Data

We operate learning centers of our own, and we provide the HUBS platform to independent subscribers. The difference matters for your data.

For the centers we and our affiliates operate, Meta Humans is the business collecting and using the information, and this Policy governs directly.

For learning communities operated by independent subscribers, the subscriber owns the data concerning its members and families, and we process that data on the subscriber's behalf to provide the platform, as described in the subscriber's Platform Subscription Agreement and its Data Processing Addendum. Independent subscribers are separate businesses; they are responsible for their own enrollment, parental consents, and privacy practices, and requests about a member's data at an independent community should be directed to that community's operator. We will assist and will forward any request we receive to the right place.

3. Information We Collect

3.1 Information provided to us

Account information for subscribers and individual users: name, email address, password, and role.

Subscriber business information: business name, address, contact information, and billing information.

Member records: the platform is designed to need very little. It requires only a minimal identifier for each member, typically a first name or a chosen display name, plus the activity records the platform generates (check-ins, XP, badges, portfolios, schedules, goal progress). What additional information, if any, is entered about a member is decided by the operator of the community the member attends. Enrollment, family, billing, and any health or emergency information for communities that use a separate membership service (such as Gymdesk) are collected and held in that service under the community's own account, not on the HUBS platform.

Parent portal contacts: the email address a parent or guardian uses to receive one-time login codes.

Training records: enrollment in Meta Humans training, progress, completion, and the certificate of completion (the name of the training and the year completed).

Payment information: billing details for subscriptions and training fees. Payment card data is processed by our payment processor (Stripe) and is not stored on our servers.

Communications: messages you send us by email or through the Service.

3.2 Information collected automatically

Log data (IP address, browser type, operating system, referring URLs, pages visited, timestamps), device information, and usage data within the platform. We use cookies and similar technologies to operate the Service and maintain session state, as described in Section 10.

3.3 Information from third parties

Payment processors confirm successful or failed transactions. Where a community's operator has connected a membership service such as Gymdesk to the platform, that service syncs membership and attendance information at the operator's direction, under the operator's own agreement with that service.

4. How We Use Information

We use the information we collect to operate, maintain, secure, and improve the Service; create and manage accounts; process payments and billing; generate member activity records, receipts, and parent-facing learning documentation; record training enrollment and completion; send operational communications (account confirmations, billing notices, platform updates); respond to inquiries and provide support; enforce the Platform Subscription Agreement and Platform User Terms; produce aggregate, de-identified analysis of platform usage that does not identify individual users; and comply with legal obligations.

Where we use AI-assisted tools to help generate educational program content, those tools process program content, not member personal information.

We do not use personal information for behavioral advertising and we do not sell it to data brokers or advertising networks.

5. Children's Privacy

The HUBS platform is built so that children interact with it as little as possible, and never through an account.

Members do not log in to the HUBS platform. Members have no platform usernames or passwords. Check-in is performed by staff or through the community's membership service. Family access to a member's activity runs through the parent portal, which parents access with a one-time code sent to their own email; no parent password is stored. Convenience displays such as scoreboards and receipts screens do not require login and are reachable only through non-public links containing a token the community can reset at any time.

The platform requires only a minimal identifier for each member, and many communities use first names or chosen display names.

At the learning centers we and our affiliates operate, members may be issued a managed Google Workspace for Education account (@metahumans.net) used to sign in to center Chromebooks and specific educational tools. These accounts exist under a Google Workspace for Education license and are administered by us: email is disabled, YouTube is disabled, and available services are restricted to what programs use. Google processes account information under its Google Workspace for Education terms as a service provider to the center. The accounts belong to the center, are used only for center activities, and are deactivated when a member leaves. Some educational tools (such as Onshape) are accessed through shared, center-managed sign-in rather than individual child accounts, so the tool receives no personal information about the member. Notice of these accounts, and any consent required for them, is part of enrollment at our centers. Independent communities provision their own technology and are responsible for their own practices.

We do not knowingly collect personal information directly from children under 13 online. Enrollment of a member, and any parental consent required for it, is handled by the operator of the community the child attends: by us for the centers we and our affiliates operate, and by the independent subscriber for their own community.

Parents and guardians may review the information held about their child, request its deletion, or withdraw the child from the service. For our own centers, contact us at hi@metahumans.com with the subject line "Parent Privacy Request" and we will respond within 30 days. For an independent community, contact that community's operator; if you contact us instead, we will forward your request to the operator and assist in fulfilling it.

6. How We Share Information

We do not sell, rent, or trade your personal information. We share information only in these limited circumstances:

With the community a member attends: information about a member's attendance, activity, and progress is available to the operator of the community the member attends. For independent communities, that operator owns this data.

With service providers who help us operate the Service, limited to what they need: cloud hosting and infrastructure providers, payment processing (Stripe, for billing), transactional email delivery, and video hosting for training content. For the centers we and our affiliates operate, this also includes education technology providers, principally Google Workspace for Education, under their education service terms. These providers are obligated to use the information only to perform services for us and to protect it. A current list of the subprocessors that handle member data is available on request.

With services a community connects itself: where an operator connects a membership service such as Gymdesk, data flows to that service at the operator's direction under the operator's own agreement with it.

For legal reasons: if required by law, court order, or governmental authority, or where disclosure is necessary in good faith to protect the rights, property, or safety of Meta Humans, our users, or the public.

In a business transfer: in a merger, acquisition, or sale of assets, personal information may transfer to the acquiring entity. We will notify affected users before any such transfer and provide choices as required by law.

7. Data Retention and Export

We retain personal information for as long as needed to operate the Service and as required by law.

For independent communities, retention follows the subscriber's Platform Subscription Agreement: when a subscription ends, the subscriber may export its member data within 60 days, after which we may delete it, subject to routine backups and legal retention obligations. Questions about a former community's records go to that community's operator.

For the centers we and our affiliates operate, we retain member records only as long as needed for the purposes above and any legal requirements, and parents may request deletion as described in Section 5. Managed education accounts issued to members are deactivated when membership ends and deleted in the ordinary course thereafter.

Training completion records are retained so that certificates of completion remain verifiable; completion is a permanent fact.

You may request deletion of your own personal information at any time at hi@metahumans.com. We process deletion requests within 30 days, subject to legal retention obligations. Deleting your account ends your access to the Service.

8. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit, role-based access controls limiting who can see what within the platform, one-time login codes for the parent portal rather than stored parent passwords, resettable non-public tokens for convenience displays, and access limited to personnel who need it.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account or information has been compromised, contact us immediately at hi@metahumans.com. If a security breach affects personal information, we will notify affected parties as required by applicable law and, for subscriber member data, as provided in the Data Processing Addendum.

9. Your Rights and Choices

Access and correction: you may access and update your own account information through your account settings, or contact us for help.

Deletion: as described in Sections 5 and 7.

California residents: where the California Consumer Privacy Act applies, you have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. Contact hi@metahumans.com.

International users: your information is processed in the United States. For subscribers whose local data-protection law applies, transfers are governed by the Data Processing Addendum, including the Standard Contractual Clauses where required. By using the Service you acknowledge processing in the United States as described in this Policy.

Communications: parents and guardians at the centers we and our affiliates operate receive regular email about their child's membership, including schedules, announcements, program updates, and events; some of these describe center programs, camps, or events available for enrollment. You may opt out of non-essential communications at any time via the unsubscribe link or by contacting us; essential notices about your child's enrollment, safety, or account continue for as long as membership is active. Independent communities send their own communications to their own families. We never send third-party advertising, and we never share email addresses with advertisers. Subscribers and individual users may receive operational emails about the Service; contact us to opt out of non-essential communications.

10. Cookies

Cookies are small text files stored on your device. Essential cookies are required for the Service to function (sessions, security) and cannot be disabled without impairing the Service. Non-essential cookies, such as analytics, help us understand usage; you may disable them in your browser. We do not use cookies for behavioral advertising.

11. Third-Party Links

The Service may link to third-party websites. This Policy does not apply to them, and we encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Policy to reflect changes in our practices or the law. For material changes we will post the updated Policy on the Service and, where required, notify you by email. Changes affecting the protections for subscriber member data additionally follow the notice provisions of the Data Processing Addendum. The date at the top reflects the latest update.

13. Contact Us

MTH Winter Park LLC d/b/a Meta Humans 2175 Aloma Ave Winter Park, FL 32792 Email: hi@metahumans.com

We respond to privacy inquiries within 30 days.