Privacy Policy

Last updated: June 2, 2026

This policy describes the data Ulearn AI (“Ulearn”, “we”) collects, how we use it, who we share it with, and the choices you have. It applies to the Ulearn website at ulearnai.org and the Ulearn Chrome extension.

Related policies

Information we collect

Account information. When you create a Ulearn account, we store your email address and an authentication token so you can sign back in. We do not collect your name, phone number, date of birth, or any other profile details.
Study data. Decks you create, cards you add, quiz answers, review history, and spaced-repetition state. This is the information that makes the app work and is tied to your account so it can sync across your devices.
Public courses you publish. If you publish a course through the web app, its title, description, cards, and linked video IDs become visible to other Ulearn users who browse public courses. Your account email is never shown to other users. At sign-up, you choose a display name (also called a username) that is shown as the author of any course you publish — you can change it at any time from the Account tab. If you prefer, you can tick “Publish public courses anonymously” and your courses will appear as authored by “Anonymous” instead.
Usage events. Basic product-analytics events — sign-in, page view, quiz started, quiz completed — so we can see which features are used and fix bugs. Events are keyed to an anonymous visitor identifier and, if you are signed in, your email.
Content you submit to AI features. Text you paste to generate a quiz, transcripts of videos you actively watch (see the YouTube API Services Disclosure), and your free-response answers are sent to an AI provider to produce quiz questions or grading feedback.
Subscription metadata. If you subscribe to a paid plan (Learner Plus, Teacher Plus, Family, Family Pro, etc.) we store the plan name, whether you bill monthly or yearly, the subscription status (active, past-due, canceled), and an opaque customer identifier returned by our payment processor. We do not store your full card number, CVV, expiry, or billing address — those go directly to the payment processor (see “Payments and subscriptions” below).

Information we do not collect

We do not sell or share your personal information with advertisers or data brokers.
We do not build cross-site behavioral profiles of you.
We do not collect precise location data.
The Chrome extension does not read pages outside of YouTube; its permissions are scoped to youtube.com/watch* and youtube.com/shorts/*.

How we use your information

To provide the Ulearn service: store and sync your decks, schedule your reviews, generate quizzes.
To communicate with you about your account (password resets, service announcements). We will not send marketing email without a clear opt-in.
To debug errors and measure aggregate product usage, so we can prioritise what to build next.
To enforce our terms and keep the service safe (for example, blocking abuse of AI features).

AI processing

Generating a quiz or grading a free-response answer requires sending the relevant text (your pasted content, a transcript of the video you’re watching, or your written answer) to a third-party large-language-model provider operating under its own privacy terms. We send only the minimum text needed for the task, and we do not send your email, account identifier, or any account-linked metadata with these requests. The AI provider processes the text to return a response to us and is contractually prohibited from training its models on our customer data.

Payments and subscriptions

Paid plans are processed by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. When you start or manage a subscription:

Card details go to Stripe, not Ulearn. Checkout and the billing portal are hosted on Stripe’s domain (checkout.stripe.com / billing.stripe.com). Your card number, CVV, expiry, billing name, and billing address are entered into Stripe’s pages and stored on Stripe’s systems. Ulearn never sees or stores those values.
What Ulearn stores on its side. An opaque Stripe customer identifier so we can look up your subscription, your current plan and billing cadence, and subscription status (active, trialing, past-due, canceled). This is the minimum needed to gate paid features.
What Stripe shares back with Ulearn. Plan, billing status, and the email you used at checkout. Stripe may also share the country your card was issued in for tax / fraud purposes. Card details are never shared with Ulearn.
Your control. You can update your payment method, view invoices, switch plans, or cancel at any time through the Stripe-hosted Customer Portal (reachable from Settings → Billing inside the app). Cancellation stops future renewals; existing access continues through the end of the paid period.
Stripe’s own policy. Stripe processes your data under its own privacy policy. As a data processor for our subscriptions, Stripe is bound by GDPR-compliant data-processing terms.
Refunds and disputes. Refund requests should go to academysiegel@gmail.com; if approved, the refund is issued through Stripe back to the original payment method. Chargebacks initiated through your bank are handled per Stripe’s dispute process.

Who we share information with

We share information only with a small number of service providers who help us operate Ulearn — for example, our hosting provider, our authentication provider, the AI provider described above, and our payment processor (Stripe). These providers are bound by confidentiality and data-handling agreements. We do not sell your information, and we do not disclose it to third parties for their own marketing.

We may disclose information when required by law, valid legal process, or to protect the rights, property, or safety of Ulearn, our users, or the public. If we receive a law-enforcement request, we will push back on overbroad requests and, where permitted, notify affected users.

Data retention

Your account data and study history remain until you delete them.
You can delete all of your data at any time via the Clear My Data button in the account menu at ulearnai.org/app.
Raw transcripts sent to the AI provider are not persisted by Ulearn after the quiz is generated. Only the resulting quiz questions and minimal video identifiers are saved to your account.
Aggregated usage analytics may be kept in a de-identified form for longer-term product metrics.
Subscription metadata (Stripe customer ID, plan, status, last billing event) is kept while your account is active and for a short reconciliation window after cancellation; receipts and invoices are kept by Stripe per their retention policy (typically 7–10 years to meet financial-record law). Deleting your Ulearn account removes the local subscription metadata but does not retroactively erase Stripe’s records of past charges — you can request Stripe-side deletion of any data not required for regulatory record-keeping by contacting us.

Your rights

Regardless of where you live, you can:

Access or export your study data — email academysiegel@gmail.com and we will provide a copy within a reasonable time.
Delete your data — use the in-app Clear My Data button or email us for full account deletion.
Correct any information we hold about you — email us.
Withdraw consent for any optional processing at any time.
Revoke YouTube / Google access via Google’s Third-Party Apps page.

If you are in the EEA, UK, or other jurisdictions with specific privacy laws, you additionally have the rights granted by those laws (including the right to lodge a complaint with a supervisory authority). Our legal basis for processing is your consent (account creation) and our legitimate interest in operating and improving the service.

Cookies and local storage

We use browser local storage and essential cookies to keep you signed in and to remember your preferences. We do not use third-party advertising or cross-site tracking cookies. Some in-app badges and banners use local storage only (no cookie is set).

Children’s privacy

Ulearn supports homeschool learners of any age, including children under 13. We follow the principles of the U.S. Children’s Online Privacy Protection Act (COPPA) and equivalent laws elsewhere:

A child under 13 cannot create their own Ulearn account. Direct sign-ups are gated to age 13 or older. Children under 13 only access Ulearn through a homeschool parent or legal guardian who has created a Family / Family Pro account, agreed to this policy, and added the child as a profile under their account.
What we collect from a child profile. A first name (or nickname) chosen by the parent, optional age and grade, study history (decks, cards, quiz answers, spaced-repetition state), in-game balances (coins, gems, XP, level), and chosen avatar / pet. We do not collect a child’s email, phone number, address, real-name surname (unless the parent enters one), photo, geolocation, or any social-network identifier.
How that data is used. Only to provide the learning experience to the child — sync their progress across the parent’s devices, schedule spaced reviews, generate quiz feedback, surface earned badges, and produce printable transcripts and hours logs for the parent. We never use a child’s data for advertising, profiling outside of the educational service, or for any feature unrelated to their own learning.
Sharing. Child data is never sold, never shared with marketers, and is never disclosed to third parties except service providers strictly needed to run the service (hosting, AI provider for quiz generation / grading on the parent’s paid plan, payment processor for the parent’s billing) — each bound by confidentiality and data-handling terms.
Parental controls. At any time the parent can: view what the child has done in the Reports tab, edit or delete the child’s profile, pause AI features, switch off the in-game economy (gamesOff in Settings), or delete the entire family account. Deleting a profile removes the child’s study history, in-game balances, and any AI-generated content tied to them.
AI processing of child content. Free-response answers a child types into a quiz are sent to our AI provider only to grade that single answer; the text is not retained by Ulearn after grading and is contractually prohibited from being used to train the provider’s models. Transcripts from videos the child watches are treated the same way (see “AI processing” above).
School-mode students. When a school or co-op teacher provisions a student account, the teacher (and, for K-12 schools, the school) acts as the responsible party under COPPA / FERPA. The same data-minimization rules apply — we only collect what’s needed to deliver the service.
Contacting us. A parent or guardian who wants to review, export, or delete their child’s data — or who believes a child under 13 has signed up directly without their consent — can email academysiegel@gmail.com and we will act within a reasonable time, typically within five business days.

Security

We use industry-standard measures to protect your data in transit and at rest, including encrypted connections and access controls on our administrative systems. No system is 100% secure; if we become aware of a breach that affects your data, we will notify you and the appropriate authorities as required by law.

International transfers

Ulearn may process data in countries other than the one in which you reside. Where we transfer data internationally, we rely on standard contractual clauses and the legal protections of the destination jurisdiction.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. If we make material changes, we will post a notice on the site and, where we have a valid email, notify you directly.

Contact

Questions or requests regarding this policy or your data: academysiegel@gmail.com.