Privacy Policy — EDUP AI

Last updated: 2026-08-27

Data controller: UAB Information Technology Solutions Command, Lithuania

1. Introduction

EDUP AI ("we", "our", "the app") respects your privacy. This policy explains how we collect, use, and protect personal data when you use our mobile application and related services.

2. Data we collect

• Account: name, email, password (hashed)
• Profile: age/grade, avatar, username
• Learning: XP, lesson progress, quiz results
• Social (with parental consent for children): messages, profile comments — moderated
• Voice: used for AI tutor speech recognition; we do not store audio recordings
• Technical: IP address, device info, usage analytics

We do not collect GPS / location data.

3. Optional attention / gaze assistance

If you opt in, the front camera may be used during lessons. Processing happens on-device; no images are sent to our servers. Only numeric attention metrics may be stored. You can disable this at any time.

4. How we use data

• Provide and improve educational services
• Personalize learning
• Send important account notifications
• Ensure safety and moderation

5. Third-party services

• Supabase — authentication and data storage
• OpenAI (via EDUP secure proxy) — AI tutor and content moderation
• Microsoft Azure — speech-to-text and text-to-speech
• RevenueCat — subscriptions (App Store / Google Play)
• Google AdMob — ads for users 16+ only; no ads for children
• Apple / Google — sign-in

All processors handle data under GDPR requirements (DPA / standard contractual clauses).

6. Children's privacy

EDUP AI is designed for students and families (approx. ages 9–14 / grades 4–10).

• We process children's data with parental/guardian consent (GDPR Art. 8).
• Guest mode requires parental acknowledgment.
• Parents can link accounts, view progress, set screen time limits.
• Social messaging is off by default for children; parents can enable it.
• All children's social content and AI responses are moderated.
• No advertising for users under 16.

7. Your rights (GDPR)

You may request access, correction, deletion, restriction, portability, or object to processing. Contact: privacy@edup.lt

You may also contact the State Data Protection Inspectorate of Lithuania (www.ada.lt).

8. Data retention

• Active account data: while the account is active
• After deletion: up to 30 days (recovery window)
• Analytics: up to 2 years (anonymized where possible)

9. Security

We use SSL/TLS encryption in transit, encryption at rest, access controls, and regular security reviews.

10. Contact

• Privacy: privacy@edup.lt
• Support: hello@itscommand.com
• Support page: https://edup-ai.com/support

← Back to EDUP AI · Support

© 2026 UAB Information Technology Solutions Command