Privacy Policy

TruLearn is an education product used by children and by students, so this policy is written to be read rather than to be defensible. It describes what we collect, why, and what we will not do.

What we collect

• Account details. Your name, email address and password (stored only as a cryptographic hash, never in readable form). If you sign in with a link, we record that too.
• What the student tells us at intake. Year group, goals, what they find hard, how they prefer to be taught, the name they want to be called. All of it is used to decide how to teach, and all of it can be changed.
• What happens in a session. What was taught, what the student said when explaining an idea back, what they drew on the whiteboard, how it was graded, and which misconceptions appeared. This is the learner model, and it is the reason the tutor knows what your child got wrong last week.
• Security events. Sign-ins, sign-in failures, password resets and account deletions, with the IP address and browser that made the request.
• Nothing from advertisers. We run no advertising trackers and no third-party analytics that follow you off this site.

Voice, specifically

A session is a live voice conversation. The audio travels directly from the browser to our speech provider and does not pass through TruLearn's servers; our key for that provider never reaches the browser. We keep the text of what a student said when they were explaining an idea, because that is the evidence a grade is based on and what makes next week's review specific. We do not keep recordings of a student's voice after a session, and we do not train models on student voice data.

Children

Where a student is under 13, the account is created and controlled by a parent or guardian, and we collect only what is needed to teach: no phone number, no address, no contacts, no location. We do not show advertising to children and we do not sell or rent anyone's personal information, at any age, for any price. Full COPPA-compliant parental consent flows are being built alongside our K-8 courses and will be in place before those courses are offered.

Who else sees it

Only the service providers that make the product work, and only the part each one needs: our hosting and database providers, our transactional email provider (for verification and activation emails), and the AI providers that supply the voice and the language model. They act on our instructions and may not use your data for their own purposes. We do not sell personal information. If we are ever legally compelled to hand something over, we will tell the affected account unless we are forbidden from doing so.

How long we keep it

Account and learning records are kept for as long as the account exists, because a learner model that forgets is the one thing this product must not do. Security logs are kept as an immutable trail. When you delete your account we remove your personal data and learning records; backups age out within 30 days.

Your choices

• See or correct what we hold about you, from the account settings or by asking.
• Delete the account and its learning records. This is available in the product and takes effect immediately.
• Ask for a copy of your data, which we will send in a machine-readable format.
• Withdraw consent for anything optional. Where a student is a child, a parent or guardian can exercise all of these on their behalf.

Security

Traffic is encrypted in transit. Passwords are hashed. Session cookies are scoped to our own domains and marked so that other sites cannot read them. Access to production data is limited to the people who need it. No system is perfect; if we discover a breach affecting your data we will tell you promptly and say what we know.

Changes

If we change this policy in a way that materially affects you, we will say so by email rather than by quietly editing this page, and the date at the top will change.

Contact

Questions, requests, or a correction to something here: hello@trulearn.ai.