Back to Home

Privacy Notice

Last Updated: 7th February 2026

Introduction

PeddyLoop ("we," "our," or "us") is committed to protecting your privacy. This Privacy Notice explains how we collect, use, disclose, and safeguard your information when you use our AI-powered educational platform.

Information We Collect

Personal Information

  • Account Information: Name, email address, password (encrypted), and user type (student/teacher/parent)
  • Profile Information: Year group, exam board, qualification level, school name
  • Connection Codes: Unique codes for connecting teachers, parents, and students

Educational Data

  • Learning Sessions: Questions attempted, answers submitted, time spent, accuracy scores
  • Progress Records: Mastery levels, skill assessments, topic completion rates
  • Homework Assignments: Assigned work, completion status, grades
  • Submissions: Uploaded images of handwritten work, typed answers

Technical Information

  • Device Information: Browser type, operating system, device identifiers
  • Usage Data: Pages visited, features used, interaction patterns
  • Cookies: Session tokens, preference settings

AI Processing Data

  • Question Responses: Your answers are processed by AI to provide feedback
  • Image OCR: Handwritten work is processed to extract text
  • Performance Analytics: AI analyzes your progress to recommend content

How We Use Your Information

Educational Purposes

  • Provide personalized learning experiences and AI tutoring
  • Track progress and generate mastery assessments
  • Assign and grade homework automatically
  • Generate performance reports for students, teachers, and parents

Platform Operations

  • Authenticate users and maintain secure sessions
  • Enable connections between students, teachers, and parents
  • Send notifications about homework, connections, and achievements
  • Process payments and manage subscriptions

Improvement and Analytics

  • Analyze platform usage to improve features
  • Generate aggregate statistics (never personally identifiable)
  • Conduct research on educational effectiveness

Data Sharing and Disclosure

With Connected Users

  • Teachers and parents can view student progress when connected
  • Class members' names and progress may be visible to assigned teachers

Service Providers

  • Anthropic AI: Question evaluation and feedback generation
  • Cloud Storage: Secure file storage for submissions
  • Payment Processors: Subscription and payment handling
  • Email Services: Transactional notifications

Legal Requirements

We may disclose information if required by law, court order, or to protect rights and safety.

We Never

  • Sell your personal information to third parties
  • Share student data with advertisers
  • Use student work for commercial purposes without consent

Data Security

Security Measures

  • Encryption: All data transmitted over HTTPS/TLS
  • Password Security: Bcrypt hashing with salt
  • Database Security: PostgreSQL with row-level security
  • Access Controls: Role-based permissions and authentication
  • Regular Backups: Encrypted backups stored securely

Data Retention

  • Active Accounts: Data retained while account is active
  • Inactive Accounts: Anonymized after 2 years of inactivity
  • Deletion Requests: Processed within 30 days of request

Your Rights

Access and Control

  • View Your Data: Access your personal information and learning records
  • Update Information: Correct or update your profile details
  • Download Data: Export your progress and submissions
  • Delete Account: Request complete account deletion

Communication Preferences

  • Opt-out: Unsubscribe from marketing emails anytime
  • Notifications: Control notification preferences in settings

Parental Rights

Parents can access, update, or delete their children's data and request data exports.

Children's Privacy

Age Requirements

  • Students under 13: Require parental consent
  • Students 13-18: May create accounts with parental awareness

Parental Consent

  • We verify parental consent for users under 13
  • Parents can revoke consent and request data deletion at any time

COPPA Compliance

We comply with the Children's Online Privacy Protection Act (COPPA) for U.S. users.

Cookies and Tracking

Essential Cookies

  • Authentication: Session tokens to keep you logged in
  • Security: CSRF protection tokens
  • Preferences: UI settings and language preferences

Analytics Cookies

  • Usage Analytics: Understand how features are used
  • Performance Monitoring: Detect and fix errors

Managing Cookies

You can control cookies through your browser settings, but some features may not work without them.

International Data Transfers

Data may be processed in countries where our service providers operate. We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs)
  • Privacy Shield frameworks where applicable
  • Equivalent privacy protections

Updates to This Notice

We may update this Privacy Notice periodically. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via email.

Contact Us

Contact Us

For privacy-related questions or to exercise your rights:

Email: info@peddyloop.com Website: https://peddyloop.com/contact

By using PeddyLoop, you acknowledge that you have read and understood this Privacy Notice.