Privacy Notice

Last updated: June 25, 2026

This Privacy Notice explains how Lesson ForgeAI ("we", "us", "our") collects, uses, shares and protects personal data when you use LessonForge AI (the "Service").

1. Who we are

Lesson ForgeAI is the data controller for personal data processed through the Service. For privacy questions, contact us via our contact page.

2. Personal data we collect

  • Account data: name, email, login credentials (or OAuth identifier).
  • Profile & usage data: lessons you generate, edits, saved history, language preference.
  • Support data: messages you send us through contact forms or email.
  • Technical data: IP address, device identifiers, browser type, log data and basic analytics.
  • Payment data: handled by Paddle (see Section 5); we do not store full card details.

3. Purposes & legal bases

  • Provide the Service (contract): create your account, generate lessons, store your history.
  • Customer support (contract / legitimate interests): respond to your requests.
  • Security & fraud prevention (legitimate interests / legal obligation): protect accounts and the Service.
  • Product improvement & analytics (legitimate interests): understand usage and improve features.
  • Marketing (consent, where required): only with your opt-in; you can withdraw at any time.
  • Legal compliance (legal obligation): tax, accounting and responding to lawful requests.

4. AI processing

Lesson prompts and inputs are sent to our AI provider(s) solely to generate lesson content for you. Do not include sensitive personal data about students in prompts.

5. Sharing your data

We share personal data only with:

  • Service providers / subprocessors: hosting, database, authentication, AI generation, email, and analytics providers acting on our instructions.
  • Paddle.com Market Limited, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance and invoicing.
  • Professional advisers: legal, accounting and audit firms when needed.
  • Authorities: where required by law or to protect rights and safety.

6. International transfers

Personal data may be transferred to and processed in countries outside your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Data retention

We keep personal data only as long as needed to provide the Service and meet legal obligations. Account and lesson data are retained while your account is active and deleted or anonymised within a reasonable period after account closure, subject to legal retention requirements (e.g. tax records).

8. Your rights

Subject to applicable law, you may have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent. You may also lodge a complaint with your local data protection authority. To exercise your rights, contact us via the contact page; we aim to respond within one month.

9. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and least-privilege practices. No system is 100% secure; please use a strong, unique password.

10. Cookies

We use essential cookies and similar technologies required to run the Service (e.g. authentication and session management). Where we use analytics or non-essential cookies, we will request consent as required by local law.

11. Children

The Service is intended for teachers and adult educators. It is not directed to children, and we do not knowingly collect personal data from children using the Service directly.

12. Changes to this notice

We may update this notice from time to time. Material changes will be communicated through the Service or by email.