Privacy Policy

Learn2LearnAI is an adaptive learning platform used by parents, teachers, and the children in their care (typically ages 8 to 12). Accounts are created and controlled by an adult (a parent, guardian, or teacher); children use the service through an adult's account via learner profiles.

This policy explains what information we collect, how we use it, and the choices and rights you have. It is written to meet the US Children's Online Privacy Protection Act (COPPA) and the UK General Data Protection Regulation (UK-GDPR) and ICO Children's Code.

We practise data minimisation: we collect only what we need to run the service.

We use the information above to provide and operate the service, generate and adapt lessons, process payments and subscriptions, keep the platform safe (content moderation and abuse prevention), respond to support requests, and meet our legal obligations.

We do not sell personal information. We do not run third-party advertising or behavioural tracking on the child-facing parts of the service.

Children do not create their own accounts. An adult creates the account and each learner profile, and in doing so provides consent for the child's use of the service. For parent-created learner profiles we collect an approximate age range rather than a date of birth; for school accounts, a teacher or administrator may provide an optional date of birth for their enrolled students as part of roster management.

As the account holder, you can review the information associated with a child's profile, correct it, and delete it at any time from your account. You can withdraw consent by deleting the learner profile or closing the account, which removes the associated data as described under Data retention and deletion.

To generate lessons and power the character tutors, lesson content is sent to third-party AI providers through an API gateway. We minimise personal information in these requests and apply input and output safety checks.

We do not use your content to train our own models. We work with AI providers whose terms restrict the use of customer content for training, and we are confirming and documenting the specifics for each provider; we will keep this section accurate as those terms are finalised. We do not sell your content to anyone.

Where UK-GDPR applies, we rely on: performance of our contract with you (to provide the service you signed up for); your consent (for a child's use of the service); our legitimate interests (to keep the platform secure and to improve it, balanced against your rights); and compliance with legal obligations.

Depending on where you live, you have rights over personal information, including:

You can delete a learner profile or your entire account at any time. Deleting your account cancels any active subscription, removes your learner profiles and their lessons, and deletes associated stored files.

Where data is retained for inactive accounts, we apply region-aware retention windows (shorter for UK/EU users, in line with the ICO Children's Code) and delete data after the applicable period.

We use a small set of trusted providers to run the service. They process data on our behalf under contract:

We use encryption in transit, access controls, and audit logging to protect personal information. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data and the fact that we serve children.

We operate in the UK and the US and use providers that may process data in other countries. Where we transfer personal data internationally, we use appropriate safeguards as required by UK-GDPR.

We use only essential cookies needed to sign you in, remember your language, and protect sensitive settings. We do not use advertising or behavioural-tracking cookies.

We use a privacy-preserving, cookieless analytics service (Vercel Web Analytics) to understand overall usage, such as which pages are visited, device type, and approximate region. It does not set cookies, does not store IP addresses, and cannot identify an individual child or build a profile of a user. We do not run it on the child-facing learning pages, and we strip any web address details (such as one-time links) before they reach the service. If this changes, we will update this policy and provide any consent controls required by law.

We will update this policy as the service and the law evolve, and we will change the 'Last updated' date above. For material changes affecting children's data, we will take additional steps to notify account holders.

For privacy questions or to exercise your rights, contact us at privacy@learn2learnai.com.