Privacy Policy

Last updated: [insert date] ยท Applies to the EduAI web application and its Admin console

Before you rely on this: this is a genuine, complete-structure privacy policy covering what EduAI actually collects and does, written so you have a real starting point rather than a placeholder โ€” but it is not a substitute for review by a lawyer familiar with your jurisdiction (COPPA in the US, UK/EU GDPR-K, or your local equivalent for services used by children). Have it reviewed before this app is used by real students, especially ones under 13.

1. Who this policy covers

This policy applies to anyone who creates an account on EduAI โ€” students of any age, and the parents/guardians who register on behalf of a child. EduAI is used across education levels from early childhood (Baby/Toddler) through postgraduate (Masters), so the information we collect and how we collect it varies by age.

2. Information we collect

We do not collect payment information (EduAI does not currently process payments), precise location, or biometric data.

3. Children's data and parental consent

For learners at the Baby/Toddler, Nursery, and Primary levels, we require a parent or guardian's name, email, and explicit consent before an account is created. If you are a parent/guardian and did not authorize an account for your child, or want to review, correct, or delete your child's data, contact us using the details in Section 8 โ€” we will act on that request without requiring the child to do anything themselves.

We do not knowingly collect more information from a child than is needed for the learning features described in this policy, and we do not use children's data for advertising.

4. How your data is used

5. Third-party processing (AI features)

EduAI's AI tutor, feedback, and content-generation features send the relevant text (and, for photo-based assessments, images) to Anthropic's Claude API for processing. Anthropic processes this data under its own terms and privacy policy. We send only what's needed to generate the response (e.g. your question and the lesson topic) โ€” we do not send your name, email, or account credentials to the AI model.

6. Data retention

We keep account and learning data for as long as the account is active, so your progress and history remain available to you. If an account is deleted (by the user, a parent/guardian, or an administrator), associated personal data is removed within a reasonable period, except where we're required to retain records for legal or security reasons (e.g. abuse-prevention logs).

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent (for parents/guardians of a child account). To exercise any of these, contact us using the details below. We will not charge a fee for a reasonable request, and we will verify your identity (or your relationship to a child account) before acting on it.

8. Contact

Questions about this policy, or requests relating to your data (or your child's), can be sent to: [insert your organization's contact/support email].

9. Changes to this policy

If this policy changes in a way that affects how we handle your data, we'll update the "Last updated" date above and, for material changes, make reasonable efforts to notify registered users.