Privacy Notice

EdGenie is run by EdGenie LTD, a company registered in England and Wales (company number 12203882), registered office 261 Green Lanes, London, England, N13 4XE. EdGenie LTD is the controller of your personal information, which means we decide how and why it is used. We are registered with the Information Commissioner's Office (ICO) under number ZB242650.

This notice covers our website, the EdGenie student platform (GenieOS), our live classes, our emails and WhatsApp messages, and anything else that links to it. Our affiliate EdGenie FZ-LLC serves customers in the UAE; if you buy from them, they will tell you how they use your information.

For anything about your personal information, email support@edgenie.co.uk. We have not appointed a Data Protection Officer because the law does not require us to, but that inbox reaches the person responsible.

Many of our students are under 18. We design EdGenie with the ICO's Age Appropriate Design Code in mind: we collect only what we need to teach, we do not use your information for targeted advertising on EdGenie, and we explain things in plain language.

• EdGenie is for students aged 13 and over. Students under 18 should use it with the knowledge of a parent or guardian, who is usually the person who buys the course.
• When a parent buys for a student, the parent gives us some of the student's details (such as their name, email and subjects). We use them to set up and run the student's account.
• Students can use the rights in section 9 themselves. Parents can make requests for a younger child. We may need to check that the person asking is entitled to.
• We do not use students' information to show them targeted adverts on EdGenie.

Information you or your parent give us

• Account details: name, email address, phone number, password (stored only as a secure hash, never in readable form), your EdGenie ID, and links between family members in the same household.
• Study details: subjects, exam boards, exam year, level, goals and the answers you give during onboarding.
• Purchase details: what you bought, prices, discount codes and billing contact details. Card details go straight to Stripe; we never see or store your full card number.
• Your work and messages: essays and answers you submit for feedback, files and images you upload, community posts and comments, messages to our tutors and staff, and your conversations with Ed, our AI tutor.
• Support and feedback: what you tell us when you contact us, and reviews you choose to leave.

Information created as you use EdGenie

• Learning activity: lessons watched, quiz results, progress, streaks, feedback on your work, predicted grades and reports built from your activity.
• Live classes: attendance, questions you ask and, if you are invited to speak, your voice. Live masterclasses may be recorded so that students on the course can rewatch them, which means a recording can include questions you ask out loud or in the class chat.
• Technical information: IP address, browser and device type, the pages you use and when, and security logs. If you allow notifications, a push-notification address for your device.
• Email and messaging activity: whether our emails were delivered, opened or bounced, so we can stop sending to addresses that do not work.

Information from other sources

• From a parent or guardian who buys for you, as above.
• From Stripe, to confirm a payment and help prevent fraud.
• From the earlier EdGenie systems (Circle, LearnWorlds and Auth0) we are moving away from, so your account, progress and community posts carry over.

Data protection law says we must have a lawful basis for each use. Ours are below. Where we rely on "legitimate interests", we have weighed our interest against your rights and the extra care owed to young people, and you can object at any time (section 9).

We do not make decisions about you that have legal or similarly significant effects using only automated means. Ed's answers and our predicted grades are generated automatically to help you study. They are guidance, not decisions about you. If you want a person to look at something, contact us.

Ed is powered by OpenAI. When you chat with Ed, your message, the conversation so far, and files you attach to the chat (such as a past paper) are sent to OpenAI to produce a reply. Under our business terms with OpenAI, data sent through their API is not used to train their models.

• Do not share personal details in Ed that you would not want stored with your account.
• Your conversations are stored with your account so you can come back to them.
• Ed can make mistakes. Check important answers with your teacher.

We do not sell your personal information. We share it only with companies that help us run EdGenie (our "processors"), under contracts that require them to keep it safe and use it only on our instructions, and in the other cases listed below.

Meta (advert measurement)

Only if you switch Marketing on in the cookie banner while signed in to your EdGenie account, our server tells Meta Platforms Ireland when you finish signing up and when you buy, so we can measure and improve our adverts. Each event includes a scrambled (hashed) form of your email address, name, phone number, EdGenie account ID and country, which Meta uses to match it, plus the IP address and browser details of your most recent sign-in. A sign-up also says whether you are a student or a parent; a purchase also includes what you bought and the amount paid. Meta acts as a separate controller for this. We do it on the basis of your consent, which is recorded on your EdGenie account (with when, and where, you gave it): with Marketing off, or if you have not decided, nothing is sent, and switching it on later does not send anything about earlier sign-ups or purchases. You can switch it off at any time from the Cookie Policy page, or email support@edgenie.co.uk.

Others

• Parents and guardians, about the student they enrolled (for example, progress reports).
• Our tutors and staff, who need it to teach and support you, under confidentiality duties.
• Professional advisers, and the police, courts or regulators when the law requires it or to protect someone's safety.
• A buyer of our business, if that ever happens, under the same protections.

Some of the companies above store or access information outside the UK, mainly in the USA and the EU. We only allow this where the law gives your information equivalent protection: the destination has a UK "adequacy" decision (such as the EU, or US companies certified under the UK Extension to the EU-US Data Privacy Framework), or we use the ICO's International Data Transfer Agreement or Addendum together with the additional safeguards it requires. Ask us for details or a copy.

• Account, study and learning records: while your account is open, and afterwards only as long as we need them for the purposes above, for example to answer questions about your course. Then we delete or anonymise them.
• Payment and tax records: six years after the end of the tax year they relate to, as UK tax law requires.
• Marketing: until you unsubscribe. We keep a minimal record that you opted out, so we do not contact you again by mistake.
• Security logs: for a short period, unless needed to investigate an incident.
• Class recordings: for as long as they are part of the course library.

If you close your account, we delete or anonymise your information unless we must keep part of it for one of these reasons.

You have the right to:

• access your personal information and get a copy;
• correct anything that is wrong or incomplete;
• delete it, in many circumstances;
• restrict how we use it while a concern is looked into;
• object to uses based on legitimate interests, and to direct marketing at any time; and withdraw consent (for example to the Meta advert measurement) at any time;
• data portability: receive information you gave us in a usable format, or have it sent to someone else;
• withdraw consent at any time, where we rely on it (for example in your cookie settings), without affecting what happened before.

Email support@edgenie.co.uk. It is free, and we will reply within one month (we may extend this by up to two more months for complex requests, and will tell you if so). We may ask you to prove who you are first. Every marketing email has an unsubscribe link, and you can ask us to stop WhatsApp messages at any time.

Information is encrypted in transit, passwords are stored only as secure hashes, access is limited to people who need it, and payment details are handled by Stripe, which is certified to the payment industry's highest security standard. If something goes wrong that puts your information at risk, we will tell you and the ICO when the law requires it.

Please talk to us first at support@edgenie.co.uk so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

We update this notice when what we do changes. The date at the top shows the latest version. If a change affects you significantly, we will tell you by email or in the platform before it takes effect.