Introduction
LearnWithYou ("we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered learning platform. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) in the European Union, the California Consumer Privacy Act (CCPA), and other relevant privacy regulations worldwide.
Information We Collect
Account Information
When you create an account through Google OAuth, we collect:
- Your email address
- Your full name (if provided by Google)
- Your Google profile picture (if available)
Usage Information
We automatically collect information about how you use our service, including:
- Lessons you create and interact with
- Content sources you provide (including videos, documents, presentations, images, audio files, web articles, and other uploaded materials)
- Your quiz attempts and essay submissions
- Chat messages within lessons
- Credit purchase and usage history
Payment Information
Payment processing is handled securely by Lemon Squeezy. We do not store your credit card information. We only receive confirmation of successful transactions and order identifiers.
Technical Information
We may collect device information, IP addresses, browser type, and access times for security and service improvement purposes.
How We Use Your Information
We use your information for the following purposes:
- To provide and maintain our AI-powered learning services
- To generate personalized lessons, quizzes, and learning materials
- To process payments and manage your credit balance
- To communicate with you about your account and service updates
- To improve our services and develop new features
- To detect, prevent, and address technical issues and security vulnerabilities
- To comply with legal obligations
Data Sharing and Disclosure
We do not sell, trade, or share your personal information with third parties except in the following limited circumstances:
Service Providers
We use trusted third-party service providers to help operate our platform, including providers for database management, authentication, payment processing, hosting infrastructure, and other essential services. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
Legal Requirements
We may disclose your information if required by law, court order, or governmental request, or to protect our rights and safety.
Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. You can delete your account at any time from your account settings. Upon account deletion, we will remove or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or security purposes.
Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (right to be forgotten)
- Data Portability: Request a copy of your data in a structured, machine-readable format
- Objection: Object to processing of your personal information
- Restriction: Request restriction of processing in certain circumstances
- Withdraw Consent: Withdraw consent for data processing at any time
To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:
- Encryption of data in transit using SSL/TLS
- Secure authentication through Google OAuth
- Regular security assessments and updates
- Access controls and monitoring
- Secure cloud infrastructure with industry-standard providers
International Data Transfers
Our services are hosted on cloud infrastructure that may process and store data in multiple countries, including the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. We ensure that appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.
Children's Privacy
Our services are not intended for children under 13 years of age (or 16 in the European Union). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information promptly.
Cookies and Tracking
We use essential cookies for authentication and session management. These are strictly necessary for the operation of our service. We do not use third-party advertising or analytics cookies. You can control cookie settings through your browser preferences.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes become effective when posted on this page.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at [email protected]
Regulatory Compliance
This Privacy Policy is designed to comply with:
- General Data Protection Regulation (GDPR) - European Union
- California Consumer Privacy Act (CCPA) - California, USA
- Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
- UK Data Protection Act 2018 - United Kingdom
- Other applicable international data protection regulations