Privacy Policy

Last updated: February 2026

1. Who We Are

Teacherbot ("we", "us", "our") operates the website teacherbot.io. We are committed to protecting the privacy of our users, especially children who interact with our platform as quiz participants.

2. Data We Collect from Teachers

When you create an account, we collect:

  • Email address
  • Display name
  • Password (stored securely using bcrypt hashing)
  • Quiz content you create
  • Usage data (quizzes played, features used)

If you subscribe to a paid plan, payment information is processed by Stripe, our payment provider and merchant of record. We do not store your card details. Stripe's privacy policy applies to payment data: stripe.com/privacy

3. Children's Data - Our Approach

We do not collect personal data from children. Students participate in live quizzes using only a nickname of their choosing and a game code. We do not collect, store, or process any personally identifiable information (PII) from students. Specifically:

  • No student accounts are required
  • No email addresses from students
  • No real names required - students choose any nickname
  • No persistent identification across sessions
  • Quiz responses are stored anonymously against nicknames only

This approach is designed to comply with the UK Age Appropriate Design Code (Children's Code), the EU General Data Protection Regulation (GDPR), and US COPPA requirements.

4. How We Use Your Data

We use teacher data to:

  • Provide and improve our service
  • Process payments (via Stripe)
  • Send essential service communications
  • Display your quizzes in our public library (if public)
  • Generate anonymised usage analytics

We will never sell your data to third parties.

5. Cookies

We use essential cookies for:

  • Authentication: Supabase session cookies to keep you logged in
  • Analytics: PostHog analytics cookies to understand how teachers use the product (anonymised)

We do not use advertising cookies or tracking pixels.

6. Data Retention & Deletion

Your account data is retained for as long as your account is active. You can delete your account at any time from your settings page. When you delete your account:

  • Your profile and personal data are permanently deleted
  • Your quizzes are deleted
  • Quiz session data (anonymous student nicknames and scores) may be retained in anonymised form for analytics

Anonymous quiz participation data (nicknames and scores) from completed sessions is retained for up to 12 months for teacher analytics, then automatically deleted.

7. Your GDPR Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Port your data to another service
  • Object to processing of your data
  • Restrict processing of your data

To exercise any of these rights, contact us at privacy@teacherbot.io.

8. Data Processors

  • Supabase: Database and authentication (EU data processing)
  • Vercel: Application hosting
  • Stripe: Payment processing (merchant of record)
  • OpenAI: AI quiz generation (data not used for training)
  • PostHog: Product analytics

9. Contact

For any questions about this privacy policy or your data, contact us at privacy@teacherbot.io.