Privacy Policy

Account information

• Name, email, password (stored securely)
• Preferred language (detected automatically)
• Class code (optional — if your teacher provided one)

Learning data

• We don't collect learning analytics: not your reading time, and not your quiz or game scores. We do save where you got to in the book so you can continue from the same spot — and that's private to you alone
• Quizzes and games give you your score in the moment — and nothing is saved anywhere

Technical data

• IP address (for security and country detection)
• Browser type (for login security tracking)
• Login log (success/failure, to protect your account)

Payment data

• Purchase history and book access records
• Payment processing is handled by a trusted third-party provider — we never see or store your card number

How we use your data

Legal basis for processing

• Performance of a contract: we process your data to provide the service you signed up for (account, reading)
• Consent: you consented to data processing when you created your account and agreed to the terms
• Legitimate interest: we process security data (IP, login log) to protect your account and our platform
• For children under 16: processing is based on the parental consent provided during registration

Data controller

The Inside the AI Mind team is the controller of your personal data. For privacy inquiries, contact the privacy team at support@insidetheaimind.com

Younger users' privacy

• We comply with the Children's Online Privacy Protection Act (COPPA) and the GDPR provisions for children's data (Article 8)
• We collect the minimum data the platform needs to work (data minimization)
• We never sell user data to anyone — including children's data
• We never show ads or do behavioral advertising
• Users under 13 must provide a parent's email during registration — and we send a consent notice to the parent
• We recommend users aged 13–15 (Europe) or 13–17 (elsewhere) register with parental supervision
• Parents/guardians can request to view, export, or delete their child's data at any time via support@insidetheaimind.com
• Parents/guardians can withdraw consent and request account deactivation at any time
• We don't require a child to provide more personal data than is reasonably necessary to participate

Who can see your data

• Platform administrators: can view account information for support and oversight
• No one else: we don't sell, rent, or share your personal data with advertisers or third parties

Third-party services we use

• Payment processing (has its own privacy policy)
• Website hosting and content delivery
• Content management system (contains no user data)
• Security and bot protection
• Sending emails for verification, password reset, and notifications
• Error monitoring (EU region, no personal data)

Cookies and local storage

• We use a single secure cookie for authentication (not for tracking)
• We save where you got to in the book on your account — not on your device — so you can continue from the same spot on any device. We use local storage only for session settings, with no scores or answers
• We don't use advertising cookies or tracking pixels

How long we keep data

• Account data: kept while the account is active. Deleted within 30 days of a deletion request.
• Learning data: we don't collect it in the first place — nothing is saved
• Login log: kept for 90 days for security purposes, then deleted automatically.
• Payment records: kept for 7 years as required by financial regulations.
• Contact messages: deleted automatically 6 months after they're resolved, and in any case kept no longer than two years.
• Career Launchpad applications: rejected applications are deleted after one year, and unreviewed ones after two years at most. Accepted applications are kept as an enrollment record.

International data transfers

Your data may be processed outside the EU by our service providers, primarily in the United States and the EU.

All international transfers are protected by Standard Contractual Clauses (SCCs) and our providers' security certifications.

Automated decisions

• No AI-generated content is used to make decisions that affect your rights
• Bot protection is used to prevent spam — it works silently and doesn't affect your experience
• There are no automated decisions with legal or significant effects on users

Your rights (GDPR)

Under European data protection law, you have the right to:

• Access: request a copy of all your personal data in a portable format
• Rectification: request correction of inaccurate information
• Erasure: request deletion of your account and all associated data
• Withdraw consent: stop the processing of your data at any time
• Data portability: receive your data in a machine-readable format
• Lodge a complaint: you have the right to file a complaint with your local data protection authority

To exercise any of these rights, email us at: support@insidetheaimind.com

Data security

• Passwords are stored securely and irreversibly — we can never see your password
• All data is encrypted in transit
• Access to your data is limited to authorized systems only
• Regular security reviews and updates

Changes to this policy

• We'll update this page when our practices change
• We'll notify you of important changes by email
• The "last updated" date at the top always reflects the current version

Contact

Questions about your privacy? Email us at support@insidetheaimind.com