Legal document

Privacy Policy

Last updated: May 2026 · Effective: May 2026

// Written for you — plain English, no jargon

This page explains what information AI Mastery collects about you, why we collect it, and what we do with it. We've written this version to be easy to understand. If you want the more detailed legal version, click "Full version" above.

What is AI Mastery?

AI Mastery is an online learning platform that teaches teenagers about artificial intelligence. It's run by AI Mastery, based in the UK.

What information do we collect about you?

We only collect the information we genuinely need:

Your account details — your name (or what you'd like us to call you), your email address, and your age.

Your learning progress — which modules you've completed, how much XP you've earned, which badges you've unlocked, and your quiz scores.

Your feedback — the answers you give in the feedback forms at the end of each module. This helps us make the platform better.

Basic technical information — things like which browser you're using and roughly where in the UK you are. This helps us make sure the platform works properly.

Why do we collect this?

We use your information to:

• Let you log in and access your learning
• Save your progress so you don't lose it
• Show your parent or guardian how you're doing
• Send you emails about new modules or challenges
• Make the platform better based on your feedback

We never sell your information to anyone. We never use it for advertising.

Who can see my information?

You — you can always see your own information in your account.

Your parent or guardian — they have access to a parent dashboard showing your progress, XP, badges, and feedback scores.

The AI Mastery team — we can see your information to run the platform and fix problems.

Nobody else — we don't share your information with other companies, advertisers, or anyone outside AI Mastery.

Is my information safe?

Yes. Your information is stored securely using Supabase, a trusted database service. We use HTTPS encryption on our website — that's what the padlock symbol in your browser means. Your password is never stored as plain text.

How long do you keep my information?

We keep your information for as long as your account is active. If you or your parent asks us to delete your account, we will delete all your information within 30 days.

What are my rights?

You have the right to:

• See all the information we hold about you
• Ask us to correct anything that's wrong
• Ask us to delete your account and all your data
• Ask us to stop using your information

To do any of these, just email us at hello@aimastery.london

I'm under 13 — is that okay?

If you're under 13, a parent or guardian must create your account and give permission for you to use the platform. If you're 13 or over, you can create your own account. This follows UK law on children's online privacy.

Questions?

If you have any questions about your privacy — or anything feels wrong — email us at hello@aimastery.london and we'll get back to you within 5 working days.

🏢

1. Who we are

AI Mastery is an online educational platform providing AI literacy courses for teenagers aged 11–16, operated as a sole trader business in the United Kingdom.

Data Controller: AI Mastery
Contact: hello@aimastery.london
Website: aimastery.london
ICO Registration Number: [ICO Registration Number — to be added when received]

We are registered with the Information Commissioner's Office (ICO) as a data controller. We process children's personal data and have appointed a Data Protection Officer in accordance with UK GDPR Article 37.

📋

2. What data we collect

We collect the minimum data necessary to operate the platform effectively. We do not collect sensitive personal data, payment card information, or any data beyond what is listed below.

Data type	What we collect	Why
Account data	Email address, preferred name, age/date of birth, pronouns (optional)	Account creation and personalisation
Learning progress	Modules completed, XP earned, badges unlocked, quiz scores, lesson difficulty ratings	Progress persistence and parent dashboard
Feedback data	Written answers to module feedback forms	Platform improvement and curriculum development
Technical data	Browser type, device type, anonymised IP address, pages visited	Platform performance and analytics
Parent data	Parent email address (for under-13 accounts and parent dashboard)	Parental consent and progress reporting

⚖️

3. Legal basis for processing

Under UK GDPR we rely on the following lawful bases:

Performance of a contract — processing your account data and learning progress is necessary to provide the service you have signed up for.

Consent — for students aged 13 and over who sign up directly. For students under 13, we require verifiable parental consent before activating the account, in compliance with UK GDPR Article 8 and the Data Protection Act 2018.

Legitimate interests — for analytics and platform improvement, where we have assessed that our interests do not override the rights and freedoms of the data subjects, particularly given the additional protections applied to children's data.

👶

4. Children's data — special provisions

AI Mastery is designed for use by children aged 11–16. We take the protection of children's personal data extremely seriously and comply with the UK GDPR, the Data Protection Act 2018, and the ICO's Age Appropriate Design Code (Children's Code).

Age 13 and over: Students may create their own accounts and provide their own consent for data processing.

Under age 13: A parent or guardian must create the account and provide verifiable consent before the child's account is activated. We send a confirmation email to the parent's email address and the account remains inactive until consent is confirmed.

What we do not do with children's data:

• We do not profile children for advertising purposes
• We do not share children's data with third-party advertisers
• We do not use nudge techniques to encourage children to provide unnecessary data
• We do not make automated decisions about children that have significant effects on them
• We do not collect more data than is strictly necessary

We have completed a Data Protection Impact Assessment (DPIA) for our processing of children's personal data, as required by the Children's Code.

🔒

5. How we store and protect your data

All data is stored securely using Supabase, a SOC 2 compliant database platform hosted within the European Economic Area. Our website uses HTTPS encryption. Passwords are hashed and never stored in plain text.

Access to personal data is restricted to authorised personnel only. We do not store payment card information — all payments are processed by Payhip, a PCI-DSS compliant payment processor.

In the event of a data breach that is likely to result in a risk to individuals' rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay, as required by UK GDPR Article 33.

🤝

6. Third parties and data sharing

We do not sell personal data. We do not share personal data with advertisers. We share data only with the following service providers, strictly for the purpose of operating the platform:

Provider	Purpose	Data shared
Supabase	Database and data storage	All account and progress data
Netlify	Website hosting	Technical/server logs only
Clerk	User authentication	Email address, account credentials
Payhip	Payment processing	Email address, subscription status
Google Analytics	Anonymous usage analytics	Anonymised IP, pages visited (no personal identifiers)
ImprovMX	Email forwarding	Email messages sent to hello@aimastery.london

All third-party providers are bound by data processing agreements and comply with UK GDPR requirements.

🗓️

7. How long we keep your data

We retain personal data only for as long as necessary:

Account and progress data — retained for the duration of the active subscription, plus 90 days after cancellation to allow reactivation.

Feedback data — retained for up to 2 years for platform improvement purposes, then anonymised or deleted.

Technical/analytics data — retained for a maximum of 14 months in Google Analytics (configured to minimum retention settings).

Upon request for account deletion, all personal data is deleted within 30 days.

✅

8. Your rights

Under UK GDPR you have the following rights. These apply to both students and parents acting on behalf of their child:

👁️

Right of access

You can request a copy of all personal data we hold about you or your child.

✏️

Right to rectification

You can ask us to correct any inaccurate or incomplete data.

🗑️

Right to erasure

You can ask us to delete your account and all associated data. Particularly relevant where data was collected when the individual was a child.

⏸️

Right to restriction

You can ask us to stop processing your data in certain circumstances.

📦

Right to portability

You can ask us to provide your data in a machine-readable format.

🚫

Right to object

You can object to processing based on legitimate interests.

↩️

Right to withdraw consent

Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at hello@aimastery.london. We will respond within one calendar month.

🍪

9. Cookies

We use cookies to make the platform work and to understand how it is used.

Essential cookies — required for login, session management, and platform functionality. These cannot be disabled as the platform will not function without them.

Analytics cookies — we use Google Analytics 4 with IP anonymisation enabled and advertising features disabled. These cookies collect anonymous information about how visitors use the platform. You can decline these when you first visit the site.

We do not use advertising cookies, tracking cookies, or any cookies that build profiles for marketing purposes.

🔄

10. Changes to this policy

We may update this privacy policy from time to time. When we make significant changes we will notify registered users by email and update the "Last updated" date at the top of this page. Continued use of the platform after notification constitutes acceptance of the updated policy.

⚖️

11. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at hello@aimastery.london and we will do our best to resolve the issue.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator:

Information Commissioner's Office
Website: ico.org.uk
Helpline: 0303 123 1113
ICO Registration Number: [ICO Registration Number — to be added]

Questions about your privacy?

We're happy to answer any questions about how we handle your data. Email us at hello@aimastery.london and we'll get back to you within 5 working days.

AI Mastery · aimastery.london · Registered in the United Kingdom
ICO Registration Number: [to be added when received]