Privacy Policy

Draft for legal review before public launch.

Learniverse is a study platform used by secondary-school students, many of whom are under 18. We collect as little personal data as we can, never sell it, and never use it for advertising.

What we collect

• Account details: name, email, password (stored hashed by our authentication provider), country, school name, year group, curriculum and subjects.
• Age: birth month and year, used only to apply age-appropriate protections and parental-consent rules. It is never shown to other users.
• Learning activity: practice answers, study sessions, notes, flashcards, planner items, XP and achievements.
• AI tutor conversations and short learning notes the tutor saves (which you can view and delete).
• Content you share: community posts, comments and uploaded documents.
• Technical data: essential cookies to keep you signed in; hashed IP addresses in security logs. Analytics only with your consent.

Why we use it (legal bases)

• To provide the service you signed up for (contract).
• To keep Learniverse safe, prevent abuse and cheating, and moderate content (legitimate interests / legal obligation).
• For optional analytics and marketing emails (consent, which you can withdraw at any time).
• For children below the applicable age of digital consent — 13 by default (configurable to meet local rules such as the UK, EU member states and Brazil's LGPD) — we rely on verified consent from a parent or guardian, or on the authorisation of the student's school.

Children and teenagers

• Profiles of under-18s are not public; leaderboards show first name and last initial only.
• Under-13s cannot post in the community, upload, or appear on public leaderboards until a parent, guardian or school confirms consent.
• Sharing contact details (emails, phone numbers, social handles) in the community is automatically blocked.

Who processes data for us

Supabase (database, authentication, file storage), Vercel (hosting), Anthropic (AI tutor), Voyage AI (optional search embeddings), OpenAI (optional voice), Stripe (payments — we never see card details), Resend (emails) and Plausible (privacy-friendly analytics, only with consent). They process data only on our instructions.

AI tutor

Your messages and relevant study context are sent to our AI provider to generate answers. We do not use your conversations to train AI models. AI answers can be wrong and AI feedback is never an official grade.

Teachers and schools

If you join a class, its teacher can see your progress in that class. School administrators can see their school's members. Schools can never see another school's data.

Retention and deletion

We keep your data while your account is active. You can export or permanently delete your account at any time in Settings → Account & data. Security logs are kept for up to 12 months.

Your rights

You can access, correct, export, delete or restrict use of your data, and object to processing. Under the GDPR and Brazil's LGPD you may also complain to your data-protection authority (e.g. the ANPD in Brazil). Contact us at support@learniverse.study.