Privacy Policy

Welcome to our learning platform, operated by Taught by Humans ("we", "us", or "our"). Your privacy matters to us. This Privacy Policy explains how we collect, use, process, and protect your personal data when you access and use the platform.

What We Collect

When you use our platform, we may collect the following information:

Personal details you provide (e.g., name, email address) during signup or onboarding.
Learning data, such as course progress, module choices, and confidence scores.
Interactions with the platform, including chatbot conversations (if used).
Device and usage data—like IP address, browser type, and session activity.

How We Use Your Data

We use your data to:

Deliver and personalise your learning experience.
Operate, maintain, and improve the platform, including analytics and feature testing.
Provide technical support and respond to queries.
Keep the platform safe and fair for all users, including detecting misuse.
Send essential communications (e.g. login links, password resets, or system updates).

We do not use your data for advertising or profiling beyond learning personalisation.

Our lawful bases for processing include: performance of contract (to provide the service), legitimate interests (security and analytics), and consent where required (e.g. feedback or research participation).

Third-Party Services

We work with a small number of trusted services to operate the platform:

Supabase – for user data storage (EU-based, encrypted at rest).
Vercel – for platform deployment (EU-hosted backend).
OpenAI – provides AI features (only minimal, pseudonymised data sent; no training use).
Resend (or Brevo if company requests EU data hosting) – for sending essential transactional emails.
Google Workspace – internal use only (e.g. support, feedback forms).

All providers are bound by appropriate data protection terms, including Standard Contractual Clauses where data is processed outside the UK or EEA. We do not sell or share your data for commercial gain.

Cookies and Tracking

We use cookies and analytics tools to help us understand how the platform is used, improve features, and detect bugs or misuse. You can adjust your browser settings to manage cookies if preferred.

Retention

We retain your data only as long as necessary. For most users, this means while your account is active. Dormant accounts are deleted after 12 months of inactivity unless we are legally required to keep records for longer.

Your Rights

Under UK data protection law, you have the right to access, correct, delete, or restrict the use of your personal data. You can also object to certain uses or request a copy of your data in a portable format. Please contact us to make a request.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our platform, services, or legal obligations. When significant changes occur, we’ll notify users and always post the latest version here.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us.