Privacy Policy

1. Who We Are

GradeAid (DK) (“we,” “us,” or “our”) is the Data Controller responsible for processing your personal data. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR).

Contact: privacy@gradeaid.ai

2. Information We Collect

• Parent's Email Address: Used for account verification, billing communications, and safety alerts.
• Child's Data: Nickname, grade level, and the content of chat interactions with the AI tutor.
• Cookies: Used to remember your login session and preferences.
• Usage Data: Anonymous analytics about how you interact with our platform to improve our service.

3. How We Use Your Data

• To provide and personalize the AI tutoring service (Tailored Learning).
• To process subscription payments via Stripe.
• To verify parental consent for users under 16 years of age.
• To improve our service, including AI safety guardrails.
• To communicate important updates about the service.

4. Legal Basis for Processing

• Consent: Parental verification of the child's account.
• Contract: Processing necessary to fulfill the subscription service.
• Legitimate Interest: Improving AI safety and service quality.

5. Data Sharing & Third Parties

• Google Gemini: We send anonymized educational questions to Google Gemini. All personal identifiers are stripped before transmission. Google is contractually prohibited from using this data to train its models.
• Stripe: Payment processing. We do not store full credit card details.
• Google Analytics: Anonymous usage analytics (with your cookie consent).

We do not sell your data to any third party.

6. Data Retention

Chat logs are retained for a maximum of 90 days before permanent deletion or full anonymization, unless legally required otherwise.

Account data is retained for the duration of the subscription and deleted upon account closure request.

7. International Transfers

Anonymized data may be processed by Google Gemini servers located outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

8. Children's Privacy

Protecting children's data is our top priority. Users under 16 require verified parental consent. We collect only the minimum data necessary (nickname, grade level, chat content) and anonymize all data before sending to third-party AI services.

9. Your Rights (GDPR)

Contact privacy@gradeaid.ai to exercise any of the following:

• Right to Access: Request a copy of all data we hold about you.
• Right to Rectification: Correct inaccurate data.
• Right to Erasure: Request permanent deletion of your account and data.
• Right to Portability: Receive your data in a machine-readable format (JSON/PDF).
• Right to Object: Object to processing based on legitimate interest.
• Right to Withdraw Consent: Withdraw consent at any time without affecting lawfulness of prior processing.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security assessments.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email. Continued use of GradeAid signifies acceptance.