Effective Date: 20 February 2026
EduviateAI ("we," "us," or "our") is committed to protecting the privacy of all users of our AI-powered tutoring and learning platform, including students (including minors), adult learners, teachers, educators, schools, and institutions. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and Services at www.eduviateai.com.
1. Information We Collect
1.1 Information You Provide
When you register and use EduviateAI, we may collect:
- Account information: name, email address, username, password, role (student, teacher, institution)
- Profile information: year group or level, subjects of interest, educational institution
- Payment information: billing name, address, and payment card details (processed securely via third-party payment processors)
- Communications: messages, feedback, or support requests you send us
- User-generated content: assignments, quiz responses, notes, and other educational materials
1.2 Information Collected Automatically
When you use our Services, we automatically collect:
- Usage data: pages visited, features used, time spent, AI interactions, and learning progress
- Device and technical data: IP address, browser type, device identifiers, and operating system
- Cookies and similar technologies: session data and preference settings (see our Cookie Policy)
1.3 Information from Schools and Institutions
When EduviateAI is deployed by a school or institution, the institution may provide us with student roster data including names, year groups, and email addresses. In such cases, the institution acts as the data controller for student data and EduviateAI acts as a data processor.
2. How We Use Your Information
We use the information we collect to:
- Provide, personalise, and improve our AI tutoring and learning Services
- Track learning progress and generate performance analytics for students, teachers, and institutions
- Communicate with you about your account, updates, and support
- Process payments and manage subscriptions
- Ensure the safety and security of our platform
- Comply with legal obligations
- Improve and train our AI models using aggregated, de-identified data
We do NOT use student personal data to serve targeted advertising. We do not sell personal data of any user, and in particular not that of minor students.
3. Children's Privacy and UK GDPR Compliance
EduviateAI takes the privacy of children very seriously. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Age Appropriate Design Code (Children's Code) issued by the Information Commissioner's Office (ICO).
- We do not knowingly collect personal information directly from children under 13 without verifiable parental consent or school or institutional authorisation.
- Schools and institutions that use EduviateAI for students under 13 must obtain appropriate parental consent and provide that authorisation to us.
- Parents or guardians may review, request deletion of, or refuse further collection of their child's personal information by contacting us at enquries@eduviateai.com.
- If we discover we have inadvertently collected personal information from a child under 13 without proper consent, we will delete it promptly.
- We apply the principle of data minimisation and only collect data that is strictly necessary for the educational Services we provide to young users.
4. Legal Bases for Processing (UK GDPR)
We process personal data under the following lawful bases:
- Contract: To fulfil our contractual obligations in providing the Services to you
- Legitimate interests: To improve our platform, ensure security, and communicate with users, where these interests are not overridden by your rights
- Legal obligation: Where we are required to process data to comply with applicable law
- Consent: Where we have obtained your explicit consent, including where required for processing data relating to children
5. Sharing Your Information
We do not sell your personal information. We may share your information only in the following circumstances:
- Service providers: Trusted third-party suppliers who assist us in operating our platform (e.g., cloud hosting, payment processing, analytics), bound by confidentiality agreements and data processing agreements
- Educational institutions: Progress data and analytics are shared with teachers and administrators at your enrolled institution as part of the Services
- Legal compliance: Where required by law, court order, or regulatory authority
- Business transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to users
- Safety: To protect the rights, safety, or security of EduviateAI, our users, or the public
6. International Data Transfers
Where we transfer personal data outside the UK or European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, such as Standard Contractual Clauses or adequacy decisions issued by the UK Government.
7. Data Retention
We retain personal data for as long as necessary to provide our Services and fulfil the purposes described in this Policy, or as required by law. Student data associated with a school or institution account will be deleted or returned upon termination of the institutional agreement. Individual users may request deletion of their account data at any time.
8. Data Security
We implement industry-standard technical and organisational security measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Your Rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction
- Right to data portability
- Right to object
- Rights related to automated decision-making
To exercise any of these rights, please contact us at enquries@eduviateai.com. For students in institutional accounts, requests should be directed through the relevant school or institution administrator.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk if you believe we have not handled your data appropriately.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to maintain session information, remember your preferences, and analyse platform usage. You can control cookie settings through your browser or our cookie consent tool, but disabling certain cookies may affect the functionality of our Services. We do not use cookies to serve behavioural advertising.
11. Third-Party Links
Our platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies before providing any personal information.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify users of material changes via email or a prominent notice on our platform. The updated policy will be effective as of the date posted.
13. Contact Us
EduviateAI Privacy Team
Email: enquries@eduviateai.com
Website: www.eduviateai.com
For concerns related to student data or requests from parents and guardians, please reach us directly at enquries@eduviateai.com.