Privacy Policy

1. Introduction

Welcome to Professor Sweet ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered lesson planning service.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Professor Sweet is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at: hello@professorsweet.ai

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, password
• Child Profile Information: Child's name, age, year group, learning preferences, interests, and educational needs
• Lesson Data: Lesson plans you create, subjects, learning objectives, and customizations
• Payment Information: Billing details (processed securely by our payment provider)
• Communications: Messages you send us, feedback, and support requests

3.2 Information Collected Automatically

• Usage Data: How you interact with our service, features used, time spent
• Device Information: IP address, browser type, operating system
• Cookies: We use essential cookies for functionality and analytics cookies (with your consent)

4. How We Use Your Information

We process your personal data for the following purposes:

• Service Delivery: To provide and personalize our AI lesson planning service
• Account Management: To create and manage your account
• AI Processing: To generate personalized lesson plans based on child profiles
• Communication: To send service updates, respond to inquiries, and provide support
• Improvement: To analyze usage patterns and improve our service
• Legal Compliance: To comply with legal obligations and protect our rights
• Marketing: To send promotional materials (only with your consent, which you can withdraw at any time)

5. Legal Basis for Processing

Under UK GDPR, we process your data based on:

• Contract: Processing necessary to provide our service to you
• Consent: Where you have given explicit consent (e.g., marketing emails)
• Legitimate Interests: For service improvement and fraud prevention
• Legal Obligation: To comply with laws and regulations

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• AI Service Providers: To process and generate lesson plans (under strict data processing agreements)
• Payment Processors: To handle billing and payments securely
• Cloud Hosting: To store and manage data securely
• Analytics Providers: To understand service usage (anonymized where possible)
• Legal Requirements: When required by law or to protect our rights

All third-party service providers are carefully selected and required to protect your data in accordance with UK GDPR.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Until you delete your account, plus 30 days for backup purposes
• Lesson Plans: As long as your account is active
• Payment Records: 7 years for tax and accounting purposes
• Marketing Consent: Until you withdraw consent

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing or other consent-based processing

To exercise any of these rights, please contact us at hello@professorsweet.ai. We will respond within one month.

9. Children's Privacy

Our service is designed for use by parents, teachers, and tutors to create lesson plans for children. We do not knowingly collect personal data directly from children under 13. Child profile information is provided by adults (parents, teachers, tutors) and is used solely to personalize lesson plans.

If you believe we have inadvertently collected data from a child, please contact us immediately.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication
• Staff training on data protection
• Secure backup and disaster recovery procedures

11. International Data Transfers

Your data may be transferred to and processed in countries outside the UK. When we do so, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

12. Cookies

We use cookies and similar technologies to enhance your experience. You can control cookie preferences through your browser settings. Essential cookies are necessary for the service to function, while analytics and marketing cookies require your consent.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our service. The "Last updated" date at the top of this policy indicates when it was last revised.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: ico.org.uk