Who We Are Welcome to Socolai (socolai.com). We are an AI tutoring web app designed to help students learn maths, chemistry, biology, and physics. [CONFIRM: Legal entity name, e.g., Individual Operator or Registered Company Name] operates Socolai from [CONFIRM: New Zealand].
The Data We Collect We only collect what we need to run the app:
- From Parents (Early Access): Your email address, an optional note about what you need help with, and the age group of your child. We do not ask for your child’s name or exact birthdate. We keep early-access emails for 12 months, then delete them.
- From Students (In the App): Photos of homework problems, typed questions, and the chat transcripts with our AI tutor. [PLEASE ADVISE: Are user accounts created with emails/passwords during this pilot phase, or just a shared passcode?]
How We Use and Store Your Data We use this data only to provide the tutoring service and improve the app.
- Photos and Chat Transcripts: We keep these as part of the student's learning history so they can review past problems and solutions. Photos are removed 30 days after they are uploaded. Chat transcripts are kept until you or your child ask us to delete them, or until 12 months after the last activity on that problem, whichever comes first.
- Abuse Prevention: To stop spam on the early-access form, we use a one-way scrambled (hashed) version of your network address to limit repeat submissions. Our database never stores raw IP addresses, and the scrambled value is deleted within 24 hours. Our hosting provider may keep standard server logs.
- Learning Profiles: [CONFIRM: If the curriculum feature launches, we will store learning goals, schedules, and progress connected to your account.]
Who We Share Data With (Our Processors) We do not sell your data. We use secure external services to make Socolai work:
- AI Technology Partners: We securely send text and images to an external AI provider to generate the tutoring responses. [CONFIRM: Your provider's terms state that your data is NOT used to train their AI models. The AI provider temporarily holds data for up to 30 days for safety monitoring, but Socolai saves your learning history in our own database until you delete it.]
- Secure Cloud Storage: We store our database, chat transcripts, and photos on secure servers provided by a third-party cloud host, located in [CONFIRM: Server Region, e.g., the US or Australia].
- Web Hosting and Measurement: We use a web hosting provider that helps our site load quickly and tells us basic, anonymous information about how many people visit the site.
- Donation Provider: We use an external payment service for voluntary donations. We do not process or store your payment details.
International Transfers Because our providers operate globally, your data will be transferred to and processed outside of your home country, primarily in the United States and [CONFIRM: any other regions where your cloud host stores data]. By using Socolai, you agree to this transfer.
Regional Rights
- New Zealand (Privacy Act 2020) & Australia (Privacy Act 1988): You have the right to ask for a copy of your personal information and to have it corrected. We take reasonable steps to ensure our overseas cloud providers protect your data.
- United States (COPPA & State Laws): We do not knowingly collect personal data from children under 13 without verifiable parental consent. Parents control the early-access sign-up.
- European Union & UK (GDPR): Our legal basis for processing is your consent and the performance of our service. You have the right to access, delete, restrict, and export your data. If you wish to know the specific names of our cloud and AI providers, you can request this by emailing us.
- Vietnam (Decree 13/2023/ND-CP & Personal Data Protection Law): You have the right to know how your data is processed, request deletion, and withdraw consent. Data transfers outside Vietnam are conducted strictly to provide the core tutoring service you requested.
Child-Friendly Privacy Notice
How Socolai Protects Your Information
- What we know: We see the homework photos you upload and the chats you have with the AI tutor. We also know your general age group, but not your name or exact birthday.
- Why we need it: To help you learn and answer your questions.
- Who we share it with: Only the computer systems that run the app (like the AI that powers the tutor). We never sell your information to anyone.
- How long we keep it: We keep your photos for 30 days. We keep your chats so you can look back at your past work, until you or your parents ask us to delete them, or until 12 months after you last used that problem.
- Your rights: You or your parents can ask us to delete your chats and information at any time.
Cookies and measurement
No Tracking Cookies Socolai respects your privacy. We do not use third-party tracking cookies, marketing cookies, or advertising pixels.
We only use cookieless, anonymous measurement tools to see how fast our pages load and how many people visit the site. The student sign-in uses one strictly necessary cookie that remembers you entered the access code. It is not used for tracking. Because we do not store personal data on your device for tracking purposes, you will not see a cookie consent banner on Socolai.
Your data rights
Access, Correction, and Deletion Requests If you want to view, fix, or delete your data (or your child's data), email us at [CONFIRM: your contact email, e.g., privacy@socolai.com].
- Deletion is by email request for now; there is no self-service button yet.
- We will reply within 14 days.
- If you ask for deletion, we will wipe your email, chat transcripts, and photos from our database within 30 days.
Data Breach Process If our systems are compromised and personal data is exposed:
- We will close the vulnerability and secure the app immediately.
- We will notify affected parents via email within 72 hours, explaining what data was exposed and what steps we are taking.
- We will notify the relevant privacy authorities (e.g., the New Zealand Privacy Commissioner) if the breach poses a risk of serious harm.