Privacy Policy

1. Who we are

For the purposes of UK data protection law, the operator trading as Erlo Learning is the data controller for the personal information described in this policy.

Operator: Musa Ncube, trading as Erlo Learning.

Erlo Learning
Le Beau Soleil
Hawthorn Road
SO17 1PX
United Kingdom

Email: erlolearning@gmail.com
Website: erlolearning.com

2. Who Erlo Learning is for

Erlo Learning is designed primarily to help students study GCSE subjects and is intended for users aged 13 and over.

Users under 18 are encouraged to read this policy with a parent or guardian. Paid subscriptions should be purchased by an adult aged 18 or over.

We do not currently intend Erlo Learning accounts to be created by children under 13.

3. Information we collect

• Account information such as email address, username, account identifier, account creation date and login/account status.
• Learning information such as topics and skills practised, questions attempted, answers, marks, percentages, mastery, practice history, XP, streaks and recommendations.
• Tutor conversations, including messages you send and responses generated for you.
• Images and photographs of schoolwork you choose to upload.
• Subscription information such as Stripe customer/subscription identifiers, plan, status, billing period and cancellation status.
• Technical and security information such as IP address, browser/device type, request logs, timestamps, security events and diagnostics.
• Communications you send to us, including support and privacy requests.

4. How we obtain your information

Most information comes directly from you when you create an account, answer questions, send Tutor messages, upload work, purchase a subscription or contact us.

We may also receive information automatically from the technology used to operate Erlo Learning, and Stripe may provide subscription and payment-event information.

5. Why we use your information

Depending on the purpose, our lawful basis may include contract, legitimate interests, legal obligation, or consent where required.

• Create and operate your account.
• Provide Practice and Tutor features.
• Personalise learning and recommend skills.
• Process uploaded work.
• Manage Pro subscriptions.
• Prevent fraud, misuse and security incidents.
• Keep required financial and accounting records.
• Provide customer support.
• Maintain and improve reliability.

6. Children's privacy

Children deserve particular protection when using online services. We aim to collect only information reasonably necessary to provide Erlo Learning.

We do not sell children's personal information and do not currently use student information for targeted advertising.

We do not intend to use educational performance to make decisions that have legal effects or similarly significant consequences for a student.

7. Personalisation and automated recommendations

Erlo may analyse recent practice attempts and performance to recommend what you should practise next and may use labels such as weak, developing, secure or mastered.

These recommendations support learning. They are not official grades and do not determine school admission, qualifications, employment or other legal outcomes.

8. Artificial intelligence

Some Erlo Learning features use artificial intelligence supplied by third-party providers, including OpenAI.

Information sent to AI may include Tutor messages, educational questions, answers, images of schoolwork and relevant recent conversation context.

Erlo Learning does not use AI to make legal or similarly significant decisions about students. AI-generated feedback should be treated as educational assistance rather than an authoritative assessment.

9. Special category information

Erlo Learning does not ask students to provide sensitive personal information such as health information, ethnicity, religious beliefs, political views, sexual orientation or biometric information.

Because users can type free-form messages or upload images, this information could be included accidentally. Please avoid providing sensitive information unless genuinely necessary.

10. Who we share information with

We do not sell your personal information.

We may also disclose information where reasonably necessary to comply with law, protect users, enforce our rights or respond to a lawful request.

• Supabase — database and authentication.
• OpenAI — AI functionality.
• Stripe — payments, subscriptions and billing portal.
• Vercel — website hosting and delivery.
• Railway — backend/API hosting.

11. International transfers

Some technology providers operate internationally, so personal information may sometimes be processed outside the United Kingdom.

Where UK data protection law treats this as a restricted transfer, appropriate safeguards must be used.

12. How long we keep information

We do not keep personal information for longer than reasonably necessary.

Account, profile, practice, progress and mastery information is normally kept while your account remains active.

Tutor conversations are normally retained until you delete them or your account is deleted, subject to limited backup, security or legal retention.

Raw uploaded images are intended to be processed for the requested task rather than stored permanently by Erlo.

Financial records may be retained where necessary for accounting, tax, fraud prevention or legal purposes.

13. Cookies and similar technologies

Erlo Learning may use cookies, browser storage or similar technologies necessary to keep users signed in, maintain sessions, protect accounts and operate the website.

If we introduce non-essential analytics or advertising technologies that require consent, we will provide appropriate information and consent controls.

14. Security

We take reasonable technical and organisational measures to protect personal information, including authentication, access controls, secure communications, restricted administrative access and reputable infrastructure providers.

No internet service can guarantee absolute security.

15. Your data protection rights

These rights are not absolute. To exercise a privacy right, email erlolearning@gmail.com.

• Ask for access to your personal information.
• Ask us to correct inaccurate information.
• Request deletion where applicable.
• Restrict or object to certain processing where applicable.
• Receive certain information in a portable format where applicable.
• Withdraw consent where processing is based on consent.

16. Deleting your account

You may request deletion of your Erlo Learning account by contacting erlolearning@gmail.com.

Where a deletion request is valid, we will delete or anonymise personal information that we no longer have a lawful reason to keep. Some records may need to remain for legal, accounting, fraud-prevention, security or dispute-resolution purposes.

17. Marketing

We do not currently use student learning data for third-party advertising.

If we introduce direct marketing, we will comply with applicable UK privacy and electronic-communications rules.

18. Changes to this Privacy Policy

We may update this Privacy Policy as Erlo Learning changes, when new features are introduced, providers change or legal requirements change.

19. Complaints

If you have concerns about how Erlo Learning uses your information, contact erlolearning@gmail.com.

You also have the right to complain to the Information Commissioner's Office (ICO).