Taught by Humans - < tbh />

Privacy Policy

Last updated 23rd September 2026

Welcome to Taught by Humans ("we", "us", or "our"). Your privacy matters to us. This Privacy Policy explains how we collect, use, process, and protect your personal data — whether you are a user of our learning platform or a subscriber to our marketing communications.

Platform Users

What We Collect

When you use our platform, we may collect:

  • Personal details you provide (e.g. name, email address) during signup or onboarding.
  • Learning data, such as course progress, module choices, and confidence scores.
  • Interactions with the platform, including chatbot conversations (if used).
  • Device and usage data, such as IP address, browser type, and session activity.
  • Optional third-party file access, such as Google Drive, OneDrive, or SharePoint, where you choose to connect these services to import documents. We only access files you explicitly select.

How We Use Your Data

We use your data to:

  • Deliver and personalise your learning experience.
  • Operate, maintain, and improve the platform, including analytics and feature testing.
  • Provide technical support and respond to queries.
  • Keep the platform safe and fair for all users, including detecting misuse.
  • Send essential communications (e.g. login links, password resets, or system updates).
  • Conduct internal analysis and AI-assisted workflows to improve our products and services.

We do not use your data for advertising or profiling beyond learning personalisation.

Our lawful bases for processing include: performance of contract (to provide the service), legitimate interests (security, analytics, and internal analysis), and consent where required (e.g. feedback or research participation).

Marketing Subscribers

What We Collect

If you subscribe to our newsletter or marketing communications, we collect:

  • Your email address and, where provided, your name.
  • Engagement data, such as open rates and click activity, to help us understand what content is useful.

How We Use Your Data

We use your data to:

  • Send you newsletters, updates, and marketing communications you have signed up for.
  • Analyse subscriber engagement to improve our communications.

Our lawful basis for processing marketing subscriber data is consent. You can unsubscribe at any time using the link in any email we send.

Third-Party Services

We work with trusted third-party services to operate our platform and business. All providers are bound by appropriate data protection terms, including Standard Contractual Clauses where data is processed outside the UK or EEA.

Platform Infrastructure

  • Supabase – user data storage (EU-based, encrypted at rest).
  • Vercel – platform deployment (EU-hosted backend).

AI Services

  • OpenAI – provides AI features within the platform, including chatbot functionality. Conversation data may be sent to OpenAI to deliver these features; no data is used for model training.
  • Anthropic – used for internal AI-assisted analysis and workflows, including analysis of marketing and platform data to improve our products and communications. No data is used for model training.

Communications

  • Brevo – for sending transactional emails (e.g. login links, system updates) and marketing communications to subscribers.

Internal Tools and Automation

  • Google Workspace – internal use including support, feedback handling, and data analysis (e.g. Google Sheets). No user data is shared with Google for advertising purposes.
  • Notion – internal documentation and workflows. May contain references to aggregated or anonymised user data.
  • Make – automation platform used to connect and move data between our internal systems and services.

Optional Integrations

  • Google Drive, SharePoint, and OneDrive (optional) – where you choose to connect your account, we request read-only access to allow file imports into the platform. We do not store, modify, or access files beyond the specific file you select. Access can be revoked at any time via Connected Apps in your account settings.

We do not sell or share your data for commercial gain.

Cookies and Tracking

We use cookies and analytics tools to help us understand how the platform is used, improve features, and detect bugs or misuse. You can adjust your browser settings to manage cookies if preferred.

Retention

We retain your data only as long as necessary. For platform users, this means while your account is active — dormant accounts are deleted after 12 months of inactivity unless we are legally required to keep records for longer. For marketing subscribers, we retain your data while you remain subscribed and for a reasonable period thereafter.

Your Rights

Under UK data protection law, you have the right to access, correct, delete, or restrict the use of your personal data. You can also object to certain uses or request a copy of your data in a portable format. Please email [email protected] to make a request.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our platform, services, or legal obligations. When significant changes occur, we'll notify users and always post the latest version here.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, email [email protected].