1. Who we are
Prof G's Learning Hub is operated by Prof G Learning Hub Ltd ("we", "us"). We are the data controller for the personal data we process about you when you use our website and Service.
2. Personal data we collect
- Account data: name, email, hashed password, date of birth (where required for age-appropriate features), profile picture, role.
- Learning data: courses enrolled, lesson progress, quiz attempts and scores, notes, bookmarks, homework submissions, certificates, forum posts, live-class registrations, recommendations, AI Study Assistant conversations.
- Family links: guardian/learner relationships you explicitly confirm.
- Support & communications: messages you send us, notification preferences.
- Technical data: IP address, device and browser information, usage/telemetry, cookies.
- Payment metadata: subscription status, plan, currency, and payment-provider customer/subscription identifiers. Card details are collected and processed by our payment provider — we never see or store them.
3. How and why we use your data
- To create and manage your account and deliver the Service (legal basis: performance of contract).
- To personalise learning, recommendations, and the AI Study Assistant (contract / legitimate interests).
- To provide safeguarding and moderation, including stricter defaults for under-18 users (legitimate interests, legal obligation).
- To send service, safety, and transactional emails and in-app notifications (contract).
- To send marketing emails, only where you have opted in (consent).
- To prevent fraud, secure the platform, and comply with law (legitimate interests, legal obligation).
- To improve the Service through aggregated analytics (legitimate interests).
4. Who we share data with
- Service providers / subprocessors: hosting, database, storage, analytics, email delivery, error monitoring, and customer support tooling — bound by confidentiality and data-processing terms.
- Our payment provider, for subscription and one-off payment processing, saved payment methods, invoicing, and tax calculation.
- AI providers (via the Lovable AI Gateway) to power the Study Assistant. Prompts and lesson context you submit are sent to the model provider to generate a response and are not used to train foundation models.
- Teachers and parents/guardians you are explicitly linked with, limited to the fields necessary for their role (e.g. progress summaries; never private notes or forum content of other learners).
- Professional advisers (legal, accounting) where necessary.
- Authorities where required by law or to protect someone's vital interests.
5. International transfers
Some of our processors are located outside the UK/EEA. Where personal data is transferred, we rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.
6. Retention
We keep account and learning data for as long as your account is active and for a reasonable period after closure so you can reactivate, then delete or anonymise it. Records we are required to keep for tax, safeguarding, or legal reasons are retained for the periods required by law.
7. Your rights
Under UK/EU data protection law you have the right to access, rectify, erase, restrict, or port your data, to object to certain processing, and to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office). We will respond to requests within one month.
8. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, row-level security in our database, and audit logging — to protect your data.
9. Cookies
We use essential cookies to keep you signed in and to keep the Service secure. We use analytics cookies to understand how the Service is used. You can manage cookie preferences in your browser.
10. Children
Where a learner is under 18, we apply stricter defaults (including forum moderation) and provide guardian dashboards subject to the learner's explicit consent. Guardians never see private notes, unsent submissions, or forum content of other learners.
11. Contact
Questions or data-rights requests: contact us.