Privacy Policy
_Last updated: 07/07/26
Sakrano ("we", "us") operates Sakrano (the "Service") and is the data controller for the personal data described here. This policy explains what we collect, why, and your rights.
1. Data we collect
- Account data: name, email, password (hashed), account type (kid/parent/teacher), age, country, and optional profile fields.
- Managed-student data: for accounts a teacher or parent creates, we store the student's number, display name, and a password (see "Children's privacy").
- Content you provide: learning topics, uploaded school materials (photos/PDFs/notes), chat messages, and quiz answers.
- Usage data: feature usage, credits, log and device/technical data.
- Payment data: handled by Paddle (our Merchant of Record). We do not store your full card details; we receive limited transaction and subscription status data from Paddle.
2. How we use data
To provide and operate the Service (create notebooks, generate content, run quizzes and chat); to manage accounts, credits, and subscriptions; to secure the Service and prevent abuse; to provide support; to comply with law; and to improve the Service.
3. Legal bases (where GDPR applies)
Performance of our contract with you; your consent (where required, e.g. optional processing); our legitimate interests (security, improvement); and legal obligations.
4. Children's privacy
The Service is designed for use by children only through a parent, guardian, or teacher who creates and manages the account. We rely on that adult's authority and consent. We do not knowingly collect personal data directly from children under [13] without such adult involvement, and we do not serve them behavioural advertising. Parents and teachers can view, change, or delete their managed students' accounts, and can contact us to exercise these rights.
5. Sharing & processors
We share data with service providers who process it on our behalf, including: Paddle (payments, tax, and billing as Merchant of Record); AI/LLM providers (to generate research, videos, quizzes, and chat from your inputs); cloud hosting and storage (e.g. AWS); and analytics/hosting (e.g. Vercel). We require processors to protect your data. We do not sell your personal data.
6. International transfers
Your data may be processed in countries other than yours, including where our providers operate. Where required, we use appropriate safeguards for such transfers.
7. Retention
We keep personal data for as long as your account is active and as needed to provide the Service, then delete or anonymise it, subject to legal retention requirements. Deleting a notebook removes its generated artifacts; deleting your account removes your personal data subject to those requirements.
8. Security
We use reasonable technical and organisational measures (including encryption in transit and hashed passwords) to protect your data. No system is perfectly secure.
9. Your rights
Subject to your jurisdiction (e.g. GDPR/CCPA), you may request access, correction, deletion, portability, restriction, or objection, and may withdraw consent. To exercise these rights, contact us at [privacy@example.com]. You may also lodge a complaint with your local data-protection authority.
10. Cookies
We use necessary cookies to keep you signed in and, where enabled, limited analytics. You can control cookies via your browser settings.
11. Changes
We may update this policy; material changes will be posted here with a new "last updated" date.
12. Contact
Privacy questions or requests: [privacy@example.com], [COMPANY LEGAL NAME], [company address].