Privacy Policy
This explains what we collect when you use masterclass.mrmpodcast.com, your Mr. M Podcast account, and the Mr. M app for Android and iPhone, why we collect it, who else handles it, and how to delete it. We collect as little as the classes need, we never sell it, and the app shows no ads.
01 · Who we are
"Mr. M Podcast", "we" and "us" mean Maurizio Pedrazzoli Grazioli, trading as Mr. M Podcast, based in Dubai, United Arab Emirates, who is responsible for your data (the "controller").
This policy covers:
- masterclass.mrmpodcast.com, including the members' area, Community and class replays;
- your Mr. M Podcast account, which you create at mrmpodcast.com/account/ and which is the same account across mrmpodcast.com, the masterclass site and the app;
- the Mr. M app for Android and iPhone (package
com.mrmpodcast.app).
Contact us about anything in this policy at info@mrmpodcast.com or by direct message to @MrMPodcast on X.
02 · What we collect
You can browse the public pages without an account. Everything below the first two rows exists only if you create one.
| What | Details | Why |
|---|---|---|
| Visiting the website | Pages viewed, browser and device type, referring page, and an approximate location that Google works out from your connection, collected by Google Analytics using cookies. Only on the website; the app has no analytics. | To see which pages are useful. |
| Anonymous click counts | A daily total per button or link (for example "how many times the Replays row was opened today"). No user id, session, IP address or page path is stored, so these counts cannot be linked to you. | To see which parts of the site get used. |
| Account | Your email address and password. The password is stored only as a one-way hash by our sign-in provider; nobody, including us, can read it. | To sign you in and send class emails. |
| Profile | Your display name; a random "avatar seed" that draws your pixel cat; whether you have muted all emails; the class days, times and time zone you choose; the time zone your device reports; and which page you signed up from. | To show your name in Community, quote class times in your zone, respect your email choice, and understand which pages bring members in. |
| Community | Posts and replies you write, photos you upload (up to 5MB each, images only), YouTube or X links you share, and any post you report. Your display name is shown with your posts; your email never is. | To run the members-only discussion. |
| Replay views | Which class replays you opened, when you first and last opened each, and how many times. | To see how many people watch each replay. |
| Tool settings | If you use the tools on mrmpodcast.com while signed in, the setup you save in each tool. | So a tool remembers your setup. |
| Push notifications (app) | If you allow notifications: a device token issued by Apple or Google, your platform (Android or iPhone), and when the token was registered and last seen. We ask only after you sign in, never at first launch. | To tell you when a class is about to start. |
| Partnership enquiries | If you use the partnership form on mrmpodcast.com: your name, email, company and message, delivered to us by email. Not stored in our database. | To reply to you. |
What we do not collect
- No precise location. We never ask for location permission and we do not look up your IP address with any geolocation service. The "where members are" view is built from the time zone your device reports.
- No contacts, camera, microphone or files, and no access to your photo library beyond a photo you choose to post in Community.
- No payment details. Classes are free.
- No advertising identifiers, and no advertising or tracking SDKs in the app.
03 · What stays on your device
Face ID, Touch ID and fingerprint sign-in
If you turn on biometric sign-in in the app, your email and password are saved in your phone's own secure storage: the iOS Keychain on iPhone, or the Android Keystore on Android. The phone releases them only after a live Face ID, Touch ID, fingerprint or face unlock match, and iPhone forgets them if the enrolled faces or fingers change. They are never sent to us or anyone else. We never see your face or fingerprint; the phone only tells the app "match" or "no match". Turning biometric sign-in off in Settings, or deleting your account in the app, removes them.
The website and app also keep small items in your browser or app storage to work: your signed-in session (so you stay signed in), and whether biometric sign-in is turned on.
04 · How we use it
- To create and secure your account, and to sign you in.
- To send class invites, join links, reminders and announcements by email, unless you have turned on "Don't email me anything". Sign-in emails (confirming your address, resetting your password) are always sent, because the account cannot work without them.
- To send push notifications to the app, if you allowed them.
- To show class times in your time zone and run Community.
- To understand, in aggregate, which pages, tools and replays are used and where members are, so we can plan classes.
- To keep Community civil: reviewing reported posts and removing ones that break the rules.
We do not sell or rent your data, we do not use it for advertising, and we do not make automated decisions about you.
05 · Legal basis
We handle your data under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for members in the European Union or the United Kingdom, the GDPR and UK GDPR. We rely on:
- Contract: your account, profile, Community posts and class emails, because they are what you signed up for;
- Consent: push notifications and biometric sign-in, which you switch on and can switch off at any time; and website analytics cookies, which you can block in your browser at any time;
- Legitimate interests: anonymous usage counts, replay views, signup source and observed time zone, used only in aggregate to plan classes, and moderating Community.
07 · Links that leave the site
Some buttons take you to services we do not control. Once you are there, their privacy policy applies, not this one.
- Zoom: live classes run on Zoom. Joining opens a Zoom link, and Zoom sees whatever you give it (your name, camera, microphone, chat).
- YouTube: playing a replay loads YouTube's player.
- OKX: the trading masterclass page has a sponsored "Open an OKX account" link. It passes through a TinyURL short link, which records the click, and OKX can tell you arrived from Mr. M Podcast, which may earn us a referral reward. Anything you give OKX is covered by OKX's own policy. We do not send OKX any of your data, and the site never asks OKX for any.
- X: links to @MrMPodcast, and X posts shared in Community.
08 · How long we keep it
- Account, profile, Community posts, replay views, tool settings and push tokens: for as long as you have an account. Deleting your account removes them straight away (see section 10).
- Push tokens are also replaced when your device issues a new one.
- A Community post you remove is hidden from members at once, and its text stays in our database, visible only to the host for moderation, until you delete your account.
- Anonymous click counts: kept indefinitely, as they cannot identify anyone.
- Google Analytics: at most 14 months, after which Google deletes it automatically.
- Database backups: our provider keeps backups for a short, fixed period, used only to recover from a failure, after which deleted data is gone from them too.
- Email delivery logs (address, subject, delivered or not): kept by Resend for a limited period under its own retention policy, then deleted.
- Partnership enquiries: in our email inbox for as long as the conversation is useful.
09 · Your choices and rights
- Change your name, avatar, class preferences and password on your Account page, on the website or in the app.
- Stop emails with "Don't email me anything" in Account.
- Stop push notifications in your phone's Settings, under Notifications, Mr. M.
- Turn off biometric sign-in in the app's Settings.
- Block analytics cookies in your browser settings, or with Google's opt-out add-on.
- Delete your account at any time: see how to delete your account.
Depending on where you live, you may also have the right to ask for a copy of your data, have it corrected, restrict or object to how we use it, or receive it in a portable format. Ask us using the contacts in section 1 and we will reply within 30 days. You can also complain to your local data protection authority.
10 · Deleting your account
You can delete your account yourself, in the app (Account, Settings, Danger zone, Delete my account) or on the website (Account, Danger zone, Delete). Deletion is immediate and permanent. If you cannot sign in, message us and we will delete it for you.
Full steps, and exactly what is deleted and what is kept: masterclass.mrmpodcast.com/delete-account/.
11 · Security
Everything travels over HTTPS. In the database, row-level security means a signed-in member can read and change only their own account data; Community photos sit in private storage readable only by signed-in members; and only the host can read replay views, click counts and the members list. No system is perfectly secure, but we keep what we hold small, which limits what could ever be exposed.
12 · Children
Mr. M Podcast is not directed to children, and you must be at least 18 to create an account. If you believe a child has created an account, tell us and we will delete it.
13 · International transfers
Our providers, including our database host, store and process data on servers outside the United Arab Emirates, including in the United States. Where the law requires it, these transfers rely on the providers' standard contractual clauses or equivalent safeguards.
14 · Changes and contact
If we change this policy we will update the date at the top, and tell members by email or in the app before a significant change takes effect.
This policy is governed by the laws of the Emirate of Dubai and the federal laws of the United Arab Emirates.
Questions or requests: info@mrmpodcast.com, or a direct message to @MrMPodcast on X.