Privacy Policy

Welcome our learning platform - operated by Taught by Humans ("we", "us", or "our"). Your privacy is important to us. This Privacy Policy outlines how we collect, use, process, and disclose your information, including personal data, in conjunction with your access to and use of our platform.

Data Collection

When you use our platform, we collect information about you, including but not limited to:

• Personal details you provide (e.g., name, email address) when signing up.
• Learning data, such as course progress, module choices, and confidence scores.
• Information about how you interact with the platform, including chatbot conversations (if used).
• Device and usage information, such as IP address, browser type, operating system, and session activity.

Use of Data

We use your information to:

• Deliver and personalise your learning experience.
• Operate and improve our platform, including feature testing and analytics.
• Provide technical support and respond to enquiries.
• Ensure platform safety, monitor for misuse, and enforce our terms of service.
• Send essential communications (e.g., password resets or service updates).

We rely on a combination of legal bases for processing personal data, including performance of a contract (providing learning services), legitimate interests (platform analytics and security), and consent where required (e.g., for feedback or research participation).

Third-Party Services

We use carefully selected third-party services to operate our platform. These include:

• Supabase – hosts our main user database (EU-based, encrypted at rest).
• Vercel – serves our platform and backend (EU-hosted deployment).
• OpenAI – provides AI functionality for learning personalisation (only minimal, pseudonymised data sent, no training use).
• Resend – used for sending essential emails like login links or updates.
• Google Workspace – used internally for communication, forms, and customer support.

All providers are bound by appropriate data protection terms, including Standard Contractual Clauses where data is processed outside the UK or EEA. We never sell your data.

Cookies and Tracking

We use cookies and analytics tools to understand how people use our platform and improve the platform. This includes identifying which content is useful, detecting bugs, and keeping the platform secure. You can manage your browser settings to limit cookies if preferred.

Retention

We keep your personal data only for as long as necessary. This typically means while you have an active account. After that, data may be deleted or anonymised unless we are required to retain it by law. We automatically delete dormant accounts after 12 months of inactivity.

Your Rights

You have rights under UK data protection law, including to access, correct, delete, or restrict how we use your personal data. You can also object to certain uses or request data portability. Please contact us to make a request.

Changes to This Policy

We may update this Privacy Policy to reflect platform or legal changes. We will notify users of significant updates and post the latest version here.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us.