Privacy Policy

1. INTRODUCTION

Welcome to Lessonarity, an AI-powered teaching assistant platform operated as a sole proprietorship. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website lessonarity.com and use our services.

Business Information:
Lessonarity (Sole Proprietor)
[Lessonarity Business Address, Brunei Darussalam]
Contact: admin@lessonarity.com

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Service.

2. INFORMATION WE COLLECT

2.1 Personal Information

We collect the following personal information:

• Account Information: Name, email address, password (encrypted)
• Authentication Data: Google OAuth credentials (if you sign in with Google)
• Profile Information: Display name, preferences, settings
• Payment Information: Billing details processed through Paddle (we do not store full credit card numbers)

2.2 Usage Data

We automatically collect usage information:

• Number of questions generated
• Lesson plans created
• Features used and frequency
• Storage usage statistics
• Login timestamps and session duration
• Device information and IP address
• Browser type and operating system

2.3 User Content

Content you create or upload:

• Lesson plans and syllabi
• AI-generated questions and assessments
• Uploaded examination papers and documents
• Chat messages with AI assistant
• Images and educational materials

2.4 Cookies and Tracking Technologies

We use:

• Essential Cookies: Required for authentication and basic functionality
• Performance Cookies: Analytics to understand how you use our Service
• Preference Cookies: Remember your settings and preferences
• Local Storage: Store user preferences and session data in your browser

3. HOW WE USE YOUR INFORMATION

We use collected information for:

3.1 Service Provision

• Creating and managing your account
• Processing your requests to generate educational content
• Storing and organizing your materials in cloud storage
• Providing AI-powered features and tools
• Enabling file uploads and downloads

3.2 Billing and Payments

• Processing subscription payments through Paddle
• Managing billing cycles and renewals
• Sending payment receipts and invoices
• Handling refund requests

3.3 Communication

• Sending service-related notifications
• Responding to your inquiries and support requests
• Providing updates about new features
• Sending security alerts and important notices
• Marketing communications (with your consent, opt-out available)

3.4 Service Improvement

• Analyzing usage patterns to improve features
• Training and improving AI models using anonymized data
• Troubleshooting technical issues
• Developing new features and tools
• Monitoring service performance and reliability

3.5 Legal and Security

• Enforcing our Terms of Service
• Detecting and preventing fraud or abuse
• Complying with legal obligations
• Protecting our rights and property
• Ensuring platform security

4. THIRD-PARTY SERVICES

We use the following third-party services:

4.1 Firebase & Google Cloud Platform

• Purpose: Authentication, database, and cloud storage
• Data Shared: Account information, user content, usage data
• Privacy Policy: Firebase Privacy

4.2 Paddle

• Purpose: Payment processing and subscription management
• Data Shared: Billing information, email, transaction data
• Privacy Policy: Paddle Privacy
• Note: Paddle acts as the merchant of record and handles all payment data securely

4.3 AI Service Providers

• Purpose: AI-powered content generation (OpenAI, MiniMax, others)
• Data Shared: User prompts and inputs for content generation (anonymized)
• Note: No personally identifiable information is sent to AI providers

4.4 Google OAuth

• Purpose: Alternative authentication method
• Data Shared: Email address, profile information
• Privacy Policy: Google Privacy

5. DATA STORAGE AND SECURITY

5.1 Where We Store Your Data

• Primary Storage: Google Cloud Platform servers (Firebase)
• Location: Data may be stored in multiple regions for redundancy
• Backups: Automated backups for disaster recovery

5.2 Security Measures

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for stored data
• Secure password hashing (bcrypt/Firebase Auth)
• Regular security audits and updates
• Access controls and authentication
• Firewall and intrusion detection

5.3 Data Retention

• Active Accounts: Data retained while account is active
• Deleted Accounts: Personal data purged within 90 days
• Backups: May persist in backups for up to 180 days
• Anonymized Data: May be retained indefinitely for analytics
• Legal Obligations: Some data retained as required by law

6. YOUR RIGHTS AND CHOICES

6.1 Access and Portability

• Request a copy of your personal data
• Export your content and materials
• Download AI-generated content

6.2 Correction and Update

• Update your profile information through account settings
• Correct inaccurate personal data
• Change your display name and preferences

6.3 Deletion

• Delete your account at any time
• Request deletion of specific content
• Right to be forgotten (subject to legal obligations)

6.4 Marketing Preferences

• Opt-out of marketing emails via unsubscribe link
• Adjust notification preferences in account settings
• Note: You cannot opt-out of essential service communications

6.5 Cookie Management

• Manage cookies through your browser settings
• Block or delete cookies (may affect functionality)
• Essential cookies required for service operation

7. DATA SHARING AND DISCLOSURE

7.1 We Do NOT Sell Your Data

7.2 When We May Share Information

• Service Providers: Third-party services listed above necessary to provide our Service
• Legal Requirements: When required by law or legal process
• Safety and Security: To protect rights, property, or safety
• Business Transfers: In event of merger, acquisition, or sale (with notice)
• With Your Consent: When you explicitly authorize sharing

7.3 Anonymized Data

We may share anonymized, aggregated data that cannot identify you personally for:

• Research and analytics
• Improving AI models
• Industry reports and insights

8. INTERNATIONAL DATA TRANSFERS

Our Service is primarily operated in Brunei, but we use cloud infrastructure that may store data in multiple countries. By using our Service, you consent to:

• Transfer of data to countries outside Brunei
• Processing by Google Cloud Platform in various regions
• Storage on servers that meet international security standards

We ensure all data transfers comply with applicable data protection laws and use appropriate safeguards.

9. CHILDREN'S PRIVACY

If we discover we have collected data from a child under 13, we will delete it promptly. Teachers may use our Service to create educational content for students, but students should not create their own accounts.

If you believe a child has provided personal information to us, please contact us immediately at admin@lessonarity.com.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. When we do:

• We will update the "Last Updated" date at the top
• We will notify you via email or in-app notification for material changes
• Continued use after changes constitutes acceptance
• You may review the updated policy on this page

We encourage you to review this Privacy Policy periodically for any changes.

11. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.