Privacy Policy

1. Introduction

AiDU (“we”, “us”, “our”) is an AI-powered education platform that helps teachers plan lessons, generate assessments, and manage classrooms more efficiently. AiDU is operated by AiDU Education (“the Company”).

This Privacy Policy explains what information we collect, how we use it, how we protect it, and your choices regarding your data. It applies to all users of the AiDU platform at aidu-tech.com and any related services.

By using AiDU, you agree to the practices described in this policy. If you do not agree, please do not use the platform.

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Email address
• Password (stored as a secure hash — we never store plain-text passwords)
• Role (teacher, admin, or other role you select)
• Display name (optional)
• School affiliation (optional)

2.2 Content You Create

When you use AiDU, we store:

• Classrooms you create (name, grade level, subject)
• Student names and optional identifiers (student codes) that you enter
• Lessons, assessments, and quizzes you generate or upload
• Teaching preferences and settings
• Curriculum documents you upload (PDFs, Word files)

2.3 Google Classroom Data (Optional Integration)

If you choose to connect your Google Classroom account, we access and store the following data from Google, strictly to provide the integration features:

• Course information: course names, IDs, and status (active/archived/deleted)
• Student roster: student names and email addresses enrolled in your courses
• Coursework: assignment titles, descriptions, and due dates
• Student submissions: submission status (turned in, returned, etc.) and grades
• OAuth tokens: access and refresh tokens to maintain the connection

We request only the Google API scopes necessary for these features. You can review the specific permissions on the Google consent screen before granting access, and you can disconnect at any time (see Section 7).

2.4 Google Forms Data (Optional)

If you use the quiz-to-Google-Forms feature, we access your Google Forms account to create forms and read response summaries. We do not store Google Forms data beyond what is needed to display results in your AiDU dashboard.

2.5 Usage & Performance Data

We collect operational metrics to improve the platform:

• AI operation logs (which features you used, response times, token usage, cost)
• Sync logs (when Google Classroom data was last synced, success/failure)

These logs are associated with your account for admin dashboard analytics but do not contain lesson content or student personal information.

2.6 Automatically Collected Data

We use standard web server logs that may record your IP address, browser type, and access times. We do not use third-party tracking cookies or analytics services.

3. How We Use Your Information

We use your information to:

• Provide and operate the AiDU platform
• Generate AI-powered lesson plans, assessments, and teaching suggestions
• Sync data between AiDU and Google Classroom when you enable the integration
• Send you transactional emails (e.g., email verification, password resets)
• Monitor platform performance and improve our AI models' efficiency
• Provide admin users with aggregated performance dashboards

We do not:

• Sell your data to third parties
• Use your data for advertising
• Share student information with anyone outside your school context
• Use student personal information to train AI models

4. AI Processing & Third-Party Services

4.1 AI Lesson Generation (Anthropic Claude)

When you generate or modify a lesson, your lesson instructions and uploaded curriculum context are sent to Anthropic's Claude API for processing. This data is sent in real time and is not stored by Anthropic beyond the API request lifecycle, per Anthropic's commercial API privacy policy.

Student names and personal data are not included in AI prompts. The AI only receives lesson parameters (subject, grade, topic, preferences) and curriculum text.

4.2 Teacher Intelligence

Our Teacher Intelligence feature analyzes your teaching patterns (e.g., which lesson modifications you make, quiz difficulty preferences) to suggest personalized defaults. This analysis is performed using the same Anthropic Claude API. The data sent includes aggregated teaching signals — never student names or personal details.

4.3 Google APIs

AiDU's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4.4 Supabase (Database & Authentication)

Your account data and platform content are stored in Supabase, a hosted PostgreSQL service with row-level security. Supabase handles authentication (password hashing, session tokens) and data storage. See Supabase's Privacy Policy.

4.5 Email (SMTP)

We send transactional emails (verification, password reset) via a configured SMTP provider. We do not send marketing emails.

5. Google Classroom — Specific Disclosures

This section satisfies the disclosure requirements for Google's OAuth verification and the Google API Services User Data Policy.

5.1 Scopes We Request

5.2 How We Store Google Data

• OAuth tokens (access and refresh) are stored in our database, protected by row-level security so only the owning user's requests can access them.
• Synced data (course names, student rosters, submission statuses, grades) is stored in our Supabase database to provide the integration features.
• We do not share Google Classroom data with any third party.
• Google data is not sent to AI services — lesson generation does not use student roster or submission data.

5.3 How to Disconnect

You can disconnect your Google Classroom integration at any time from the LMS page in AiDU. This revokes AiDU's access to your Google data. You can also revoke access from your Google Account permissions page.

When you disconnect, synced data (course names, rosters, grades) remains in AiDU to preserve your classroom records. You may request full deletion by contacting us (see Section 10).

6. Data Sharing

We share your data only in these limited circumstances:

• Within your school: Admins at your school may see aggregated usage data (not your lesson content or student details).
• AI processing: Lesson instructions and curriculum context are sent to Anthropic for generation (see Section 4.1).
• Infrastructure providers: Supabase (database hosting), Google Cloud (application hosting). These providers process data on our behalf under their own privacy commitments.
• Legal requirements: If required by law, regulation, or legal process.

We do not sell, rent, or trade your personal information.

7. Data Security

• All data in transit is encrypted via HTTPS/TLS.
• Passwords are hashed using industry-standard algorithms (bcrypt via Supabase Auth).
• Database access is protected by row-level security (RLS) — users can only access their own data.
• OAuth tokens are stored server-side and are never exposed to the browser.
• The application runs on Google Cloud Run with non-root containers.
• Admin access is restricted to approved administrator accounts.

8. Data Retention

• Account data: Retained as long as your account is active.
• Lessons and classrooms: Retained as long as your account is active or until you delete them.
• Google Classroom sync data: Refreshed on each sync cycle (every 30 minutes for submissions, every 2 hours for courses/rosters). Historical data is retained to preserve grade records.
• Performance metrics: Retained for platform monitoring; admins may clear this data.
• Deleted accounts: Upon account deletion, we remove your personal data within 30 days. Aggregated, anonymized analytics may be retained.

9. Children's Privacy

AiDU is a tool for teachers and school administrators. It is not designed for direct use by students under the age of 16. Teachers may enter student names and class rosters into AiDU for classroom management purposes — this is done under the school's authority and the teacher's professional responsibility.

We do not knowingly collect personal information directly from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data (lesson content, classroom data)
• Withdraw consent for Google Classroom integration at any time
• Object to certain processing

To exercise any of these rights, contact us at [email protected].

11. International Data Transfers

AiDU is hosted on Google Cloud (US region). If you are accessing AiDU from outside the United States, your data will be transferred to and processed in the US. We rely on standard contractual clauses and our service providers' certifications to safeguard cross-border transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or an in-app notice. The “Last updated” date at the top reflects the most recent revision.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: [email protected]
• Website: aidu-tech.com