Privacy

Last updated 3 October 2026. This is the whole of it — there is no second policy somewhere else.

This statement covers Better AI Learning at learn.betterailearning.education and the Language Learner app at languagelearner.betterailearning.education. The language app has no account system of its own: when you sign in there, you are signing in here, and anything stored about you is stored here.

The short version

You can use the language courses without an account, and if you do, nothing you do in a lesson leaves your browser. No sign-up wall, no tracking pixel.
We never store what you typed into an exercise — only whether the answer was right or wrong, so the progress report can be drawn.
We never see your card details.Payment happens on our payment provider's own checkout.
We do not sell personal data, run advertising, or share data with ad networks. There is no cross-site tracking.
Email information@betterailearning.education and we will send you a copy of your data, correct it, or delete it.

Who is responsible

Better AI Learning operates both sites and is the data controller for the personal data described here. For anything about this statement or your data, write to information@betterailearning.education. A real person reads it.

If a school, employer or other organization gave you your account, that organization also decides what happens to your learning records within its own courses, and its own privacy notice applies alongside this one.

What we collect, and why

Every row below is something the system actually stores. Nothing is collected “just in case”.

What	Why	Lawful basis
Your name and email address	To have an account at all: to sign you in, to address you, and to send you the emails below.	Contract
Your password, hashed	To check your sign-in. It is stored as a one-way hash — we cannot read it, and neither can anyone who obtains the database.	Contract
Session records: a token, your IP address, your browser's user-agent string, and the times the session started and was last used	To keep you signed in, to expire the session after about a day of inactivity, and to enforce one active session per account so a shared password is visible rather than silent.	Legitimate interests
Sign-in events: whether an attempt succeeded, failed on bad credentials, or was rate-limited, plus whether the device looked like a phone, tablet or desktop	To detect password-guessing and account sharing, and to know whether sign-in is working at all.	Legitimate interests
Exercise attempts: the course, lesson, exercise and item you answered, which attempt it was, whether it was correct, and when	To draw your progress report and to decide what to put in front of you next. The text you typed is never sent and never stored — only the right/wrong outcome.	Contract
Lesson state: which lessons you have opened and finished	To return you to where you were and to mark the course map.	Contract
Purchases: an order reference from our payment provider, which pass you bought, the amount and currency, and the date	To give you the access you paid for and to answer billing questions. Our payment provider is the merchant of record, so it issues the invoice and keeps the statutory transaction record — not us.	Contract
Generation records: for a lesson, the topic you asked for; for practice, which skill you practiced and which lessons it drew on — plus which model wrote it, how many tokens it used, and what it cost	To produce what you asked for, to meter your credits honestly, and to investigate a generation that failed.	Contract
Aggregate site analytics: page views, referrers, country, and browser class	To know which courses people actually use. Collected without cookies and without building a profile of you — see Cookies below.	Legitimate interests

Using the language courses without signing in

Signed out, the app keeps your settings and your answers in your own browser's local storage and sends none of it anywhere: your native language, the course you last opened, which study-plan steps you ticked, your audio preferences, and the log of exercise attempts waiting to be uploaded. If you never sign in, that log is never uploaded. Clearing your browser's site data erases all of it, which also means it is not a backup — sign in if you want your progress to survive a new device.

Cookies

We use two cookies, both necessary, neither used for advertising:

A session cookie, set when you sign in. It is scoped to .betterailearning.education so that one sign-in works across both apps, and it expires after about a day of inactivity. Signing out deletes it.
A language-preference cookie, remembering which language you want the interface in.

Our analytics does not use cookies and does not fingerprint your device, which is why you are not asked to consent to it. Our payment provider sets its own cookies on its own checkout pages, under its own policy.

Who else processes your data

We keep this list short on purpose. Each of these is a service we pay to do one job, acting on our instructions:

Fly.io — runs the application servers, in the United States.
Turso — hosts the database, with its primary copy in the United States (Oregon). This is where the account, progress and purchase records live.
Cloudflare — serves the language app and its audio files, and provides the cookieless analytics.
Resend — delivers transactional email (password resets and the like). It handles your email address and the message.
Lemon Squeezy — takes payment as merchant of record. You enter your payment details on their checkout, not on ours; we receive an order reference, an amount and a status.
Anthropic — generates a lesson dialogue or practice exercises when you ask for one. For a lesson, the topic you type and the course context are sent to its API. For practice, what is sent is the skill you chose, the lessons you are weakest in, and the vocabulary and grammar of those lessons — never your answers. Under the commercial terms we use, that content is not used to train models.

That is the whole list. In particular, the typefaces are served from our own servers, not from Google Fonts — so reading a page does not announce your visit to anyone we have not named above.

Where your data goes

Our servers and database are in the United States, so if you are in the United Kingdom or the European Economic Area your personal data is transferred outside it. We rely on the standard contractual clauses and equivalent terms in our providers' data-processing agreements to protect that transfer. If you would like to know what those say for a particular provider, ask us.

How long we keep it

Your account, progress and generated lessons — until you ask us to delete the account. Deleting it removes the account record and everything attached to it: every exercise attempt, every lesson state, and your purchase history too.
Sessions — about a day after you stop using them, then they are swept away.
Purchase records — deleted with the account, like everything else. We keep no copy. Our payment provider holds its own record of the transaction, because as merchant of record that obligation is its own, and its policy governs how long.
Sign-in and usage events — kept as individual events for the short term and otherwise rolled up into daily counts that identify nobody.

Your rights

If you are in the United Kingdom or the European Economic Area, the UK GDPR and GDPR give you the right to ask us to:

give you a copy of the personal data we hold about you, in a portable form;
correct anything inaccurate;
delete your account and data;
restrict or object to our processing, including anything we do on the basis of legitimate interests;
withdraw consent where we relied on it.

Write to information@betterailearning.education. We will answer within one month. We do not charge for this and we will not ask you why. If you are unhappy with how we handle it you can complain to your data protection authority — in the UK, the Information Commissioner's Office at ico.org.uk.

Wherever you live, you can ask for the same things. The rights above are the ones the law guarantees; the practice is the same for everyone.

Children

These sites are not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, write to information@betterailearning.education and we will delete it. Where an organization enrolls learners, it is responsible for having the consent its own jurisdiction requires.

Security

Passwords are stored only as one-way hashes. Everything travels over HTTPS. One account can hold one active session at a time, so a password being passed around shows up rather than going unnoticed. No system is perfect; if you find a problem, please tell us at information@betterailearning.education rather than anywhere else first.

Changes

If what we collect changes, this page changes with it, and the date at the top moves. Material changes to how we use data you have already given us will be announced by email to account holders rather than quietly edited in.

Better AI Learning courses Language Learner