Privacy Policy

This Privacy Policy explains how Essay Coach, operated by Aria Data Labs ("we", "us"), collects, uses, and protects personal data when providing our educational writing platform (the "Service"). We are committed to responsible data use and compliance with the UK General Data Protection Regulation (UK GDPR) and equivalent international standards.

• School Use: When provided through an educational institution, the school is the Data Controller and Essay Coach acts as a Data Processor.
• Individual Use: When used by individuals outside a school context, Essay Coach acts as the Data Controller.

We collect only data necessary to support educational functionality:

• Account Information: Name, email address, and user role.
• Educational Profile: School year/grade and curriculum framework (for example, UK National Curriculum, IB). This is used to ensure age-appropriate guidance and assessment alignment.
• Learning Data: Writing submissions, revisions, and engagement metrics. This data is used for progress tracking, not for surveillance or profiling.
• Technical Data: Device type and log data required for security and performance.

We do not collect precise location data, nationality, or sensitive personal data (biometrics, health data) unless explicitly required and authorized by a school via a specific agreement.

• Submitted content is processed to generate suggestions.
• No Automated Decisions: AI outputs are assistive. No automated decisions are made regarding grades, enrollment, or academic outcomes (GDPR Article 22).

We do not sell personal data. We share data only with:

• Authorized School Staff: Teachers and admins overseeing the student.
• Sub-processors: We use third-party providers for hosting (Vercel), database management, and AI processing. A current list of sub-processors is available upon request at info@ariadatabs.com.

We retain personal data only for as long as necessary to provide the Service.

• Default Policy: We typically retain student data for the duration of the active account plus 12 months, unless a school controller requests earlier deletion or a longer retention period to meet legal obligations.

Under the GDPR, you may have the right to access, correct, or erase your data. For school-managed accounts, these requests should generally be directed to your school first. Contact us at: info@ariadatabs.com.