Privacy

Teachers

Teachers provide an email address and a display name to create an account. That information is personal data, and is used to sign you in, to keep your courses and material private to your account, and to operate the pilot. Other teachers cannot see your material. The person who runs the pilot can see teacher account information in order to support and operate the service.

Course material

When a teacher attaches a file, the text is currently read from it inside the teacher's own browser. The extracted text and basic details about it (a label, file type, size and status) are then stored on our side so the activity works across devices and sessions. Original uploaded files are not stored as files.

Teachers are responsible for the material they attach: for being entitled to use it for this teaching purpose, and for not including confidential information, sensitive personal data, student work, or anything else that should not be processed through this service. Before creating an activity a teacher has to confirm this.

Who can see stored course material

• Stored course material is private to the teacher account that created it and is not made available to other teachers.
• Students are tutored from it, but are not given the uploaded source files and have no interface for browsing or reading the stored course text.
• The service administrator can see teacher account information and the operational metadata needed to run and support the pilot — teacher name and email, course and activity names, material labels, status, size and processing errors. The administrator interface does not provide ordinary access to read the stored extracted course text.
• Hosting, database and AI services process it automatically as needed to run the service.

Deleting course material

A teacher can delete any of their own activities or a whole course at any time from the teacher portal. Deleting an activity also deletes the text stored from its material. Deleting a course deletes the course together with every activity and material under it. Deletion is permanent.

A teacher can also delete their own account from the bottom of the teacher portal. That removes the sign-in itself, the teacher profile and role, every course, activity and stored material text, and the anonymous open counters for those activities. It also deletes any contact-form messages sent from that account's own email address. Messages sent from other addresses are separate records, and are kept for the retention period below.

The administrator may suspend or delete an account where that is reasonably necessary to keep the service secure, to prevent misuse, to meet a legal obligation, or to operate the pilot. Deleting an account removes that teacher's courses, activities and materials with it. Ordinary backups or provider logs may persist for a short period outside the application database.

You are interacting with an AI system

Learn uses AI to generate the questions, to interpret what a student writes, and to produce the feedback and explanations, working from the material the teacher provided. Nothing is written or checked by a person in advance, so output can be incomplete, unclear or wrong — it is not a grade, a result or professional advice. Learn is designed for formative practice only: it produces no marks or rankings, takes no decision about a student, and reports nothing about an individual student to a teacher.

AI processing

To run a tutoring session, the relevant course text and the current conversation are sent over an encrypted connection to an external AI service, which generates the question and the feedback. That service acts as a processor for this purpose only, and the specific provider may change during the pilot.

Learn does not use course material, tutoring prompts or student answers to train any model of its own, and keeps no copy of a tutoring conversation in its own database. Like any processor, the AI service may hold a request briefly in order to deliver the response and to prevent abuse, under its own terms. If you need the current provider details for an institutional review, ask us through the contact page.

What we process, and why

In short, the categories of data and the purposes they serve are:

• Teacher account data (email address, display name, account role, sign-in and last-active timestamps) — to let staff sign in, to keep each teacher's material separate from other teachers', and to operate the pilot.
• Teaching content (extracted course text and basic file details such as label, type, size and processing status) — to make a tutoring activity work across devices.
• Tutoring interaction content (course text and the running conversation) — sent to an AI provider to generate the next question and the feedback.
• Anonymous operational counters (that an activity was started or completed, when, which activity, rough measures such as a question count) — to see whether the service is being used and working.
• Contact enquiries (name, email address, any affiliation, subject and message) — to read and answer what you sent.

We do not use any of this for advertising, profiling of students, or automated decisions about a person's education, employment or access to services.

Students

Students stay anonymous. No account is needed, students are never asked who they are, and nothing links a session to a person. Answers and questions live in the browser for the length of the session and are sent to the AI service to produce the feedback and the next question; Learn keeps no transcript of them in its own application database. Teachers never see student answers, results or a learning profile — only anonymous totals for the activity.

We do record small anonymous counters for operating the service, such as that an activity was started or completed, when, which activity it was, and rough measures like a number of questions. These counters are not linked to a person. Learn does not store IP addresses or device identifiers in its own database. The hosting, database and AI services keep their own ordinary security logs, which can include technical details such as an IP address, as every internet service does.

Contact & feedback form

If you write to us through the contact & feedback form, we keep what you send — your name, email address, any affiliation and your message — in order to read it, reply to it and follow it up during the pilot. There is currently no outbound email provider configured, so messages are stored for the person running the pilot, who reads them and replies manually.

Where data is processed

Learn runs on third-party hosting, database and AI services, which process data on our behalf to deliver it. Some of them operate internationally and may process data outside the EEA under the safeguards that apply to their services. We can give an institution the current list of providers and the applicable terms on request through the contact page.

Keeping and deleting data

Teacher accounts, courses, activities and stored course text are kept while the account is in use in the pilot, and are never deleted automatically by age. A teacher can permanently delete their own activities, their stored material text, a whole course with everything under it, or their entire account including the sign-in. The administrator may suspend or delete an account where that is reasonably necessary to keep the service secure, to prevent misuse, to meet a legal obligation, or to operate the pilot; deleting an account removes that teacher's courses, activities and materials with it. Operational and contact records have fixed retention limits: contact and feedback messages are deleted after 12 months, notes about unreadable uploaded files after 90 days, operational alerts after 180 days, and the anonymous activity counters after 180 days, after which only anonymous monthly totals per activity remain — counts of openings and answered questions, with nothing about any individual. Those monthly totals are deleted together with the activity or the account.

Your requests

Write to us through the contact & feedback page if you want to know what we hold about you, or to have it corrected or deleted; a teacher can also correct their own details and delete their own material and account from the teacher portal. In the EEA and the UK data-protection law gives you these rights directly, and you may also contact your national data-protection authority (in Sweden, IMY) if you are not satisfied with how a request was handled.

Who is responsible

This pilot is operated by Joakim Munkhammar, Associate Professor at Uppsala University, who is responsible for the personal data described here. The contact & feedback page is the way to reach us about it. Teacher account data is processed to provide the service a teacher asks for and to operate the pilot; contact messages are processed in order to answer them.