Privacy Policy

Who we are

skillwhimsy ("we") provides an AI study-tutor service. For questions about this policy or your data, contact us at info@skillwhimsy.com. See also our GDPR notice.

What data we collect

• Account data: email address and authentication identifiers (via Amazon Cognito), including sign-in with Google if you choose it.
• Learning content you create: courses, lessons, and related material — which may describe or be created on behalf of a child.
• Study activity: study sessions, messages exchanged with the AI tutor, answers, and progress.
• Billing data: subscription and payment status. Card payments are processed by Stripe; we do not store full card numbers.
• Usage/analytics: only if you accept analytics cookies (Google Analytics). Essential cookies required to run the app are always used.

Why we use it and the legal basis

• To provide the service and your account — performance of a contract.
• To process payments and manage subscriptions — performance of a contract / legal obligation.
• To improve the product via analytics — consent (you can refuse).
• To respond to support requests — legitimate interests / consent.

Children's data

Accounts are intended for adults (e.g. a parent or guardian). Content created for a child is visible only to the account owner and our backend systems that operate the service. A parent/guardian is responsible for the content they create about a child and provides consent for that processing. If you believe a child has provided us data without appropriate consent, contact us and we will delete it.

Who we share data with (processors)

• Amazon Web Services — hosting, database, authentication, storage.
• OpenAI — generates and powers the AI tutor; lesson and conversation text is sent to OpenAI to produce responses.
• Stripe — payment processing.
• Google Analytics — usage analytics (only with your consent).

Some of these providers are located outside the EEA (e.g. the United States). Such transfers rely on appropriate safeguards (e.g. Standard Contractual Clauses). We do not sell your personal data.

How long we keep it

We keep account and learning data for as long as your account is active and as needed to provide the service. You can request deletion at any time. Billing records may be retained longer where required by law.

Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to or restrict processing, and request a copy of your data. You may also withdraw analytics consent at any time. To exercise these rights, contact info@skillwhimsy.com. See the GDPR notice for details.

Cookies

We use essential cookies to keep you signed in and run the app. We use Google Analytics cookies only after you accept them via the consent banner; you can reject them and continue to use the service.

Changes

We may update this policy; material changes will be posted on this page.