Privacy Policy

How we collect, use, store, and protect your information.

GDPR-aligned

Designed with UK/EU privacy principles in mind.

Security

We use technical and organisational measures.

1. Who we are

This Privacy Policy describes how Professor Sweet ("we", "us", "our") processes personal data when you use our website and services (the "Service").

2. What data we collect

The data you provide may include:

Account details (e.g., email address, authentication identifiers).
Child profile details you enter (e.g., name, age, learning preferences, notes).
Lesson planning inputs and generated outputs.
Support messages you send to us (if applicable).

Technical data may include:

Device and usage information (e.g., browser type, approximate location, timestamps).
Log and security events (e.g., failed login attempts).

3. Legal bases for processing (GDPR)

We process personal data under the following legal bases:

Contract: to provide the Service (e.g., generating lesson plans, account access).
Legitimate interests: to keep the Service secure, prevent abuse, and improve reliability.
Consent: for optional cookies/analytics/marketing where required.
Legal obligation: where we must comply with applicable law.

4. How we use data

Provide, operate, and maintain the Service.
Personalise lesson plans based on profile inputs.
Generate and display reports and usage history.
Detect, prevent, and investigate fraud/abuse/security incidents.
Communicate important service updates.

5. Cookies and similar technologies

We use essential cookies to enable authentication and core features. Optional cookies (e.g., analytics) are only used if you opt in.

You can manage cookie choices through the cookie banner.

Essential cookies are always enabled.

6. Sharing and processors

We may share personal data with trusted service providers (processors) who help us run the Service (e.g., hosting, authentication, database, analytics if enabled). Processors must act on our instructions and implement appropriate safeguards.

We do not sell personal data.

7. International transfers

If personal data is transferred outside the UK/EU, we use appropriate safeguards such as adequacy decisions or standard contractual clauses.

Safeguards apply where required.

8. Retention

We retain personal data only as long as necessary to provide the Service, meet legal obligations, and resolve disputes. You can delete child profiles by removing them from your account (where supported) or request deletion.

Data minimisation and retention controls.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict processing, object, and data portability. Where we rely on consent, you can withdraw it at any time.

10. Contact

If you have questions or requests, contact us at your support email.

Support contact via account email.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with an updated effective date.

Effective date: 2026-01-11Terms FAQs