Privacy Policy
Last updated: 2026-11-11
Nagless Learn is made for families with children aged 8 to 15, so we collect as little data as we can and delete it as soon as we can. The data controller is S.C. PUREQUAD SRL, CUI RO29314850, Reg. Com. J2017015676403, Bd. Iuliu Maniu nr. 7, Corp T, etaj 3, Sector 6, București, România. For any question about your data: hello@naglesslearn.com.
What we hold and why
| Data | From | Why | How long |
|---|---|---|---|
| Parent's name, email and password (hashed) | parent | account and sign-in | while the account exists |
| Child's first name and year of birth | parent | display, Junior or Teen mode | while the account exists |
| Timetable, activities, homework | parent or child | the day's plan and the homework window | while the account exists |
| Photos of homework and of the notebook | child, from the camera | proof of homework and the AI check | 30 days, then deleted, including from backups |
| AI verdicts and approvals | service, parent | history for the parent | while the account exists |
| Payment data | Stripe | the subscription | card details stay with Stripe; we keep the customer ID and invoices as long as the law requires |
| Phone notification token | app | notifications | until the phone is disconnected |
We never ask a child for an email address, phone number, location, contacts or gallery photos. Photos are taken only with the camera, at the moment of sending.
Legal basis
We process data to perform our contract with the parent (GDPR Art. 6(1)(b)), on the consent the parent gives for the child when adding them (GDPR Art. 6(1)(a) and Art. 8; in the US, verifiable parental consent under COPPA), and to meet legal duties such as invoicing (Art. 6(1)(c)).
The AI check
Homework photos are sent to an AI provider (Anthropic) only to find out whether the homework looks done. Under the provider's commercial terms, the photos are not used to train models. The AI never grades and makes no decision with legal effect; the parent can always change the verdict.
Who else sees data
Only the providers the service cannot run without, all under data processing agreements:
- Hetzner Online GmbH (Germany): servers. Data of EU families stays on servers in the EU, and data of US families on servers in the US.
- Stripe: payments.
- Anthropic: the AI check of photos. Transfers outside the EU rely on the Standard Contractual Clauses.
- Google Firebase Cloud Messaging and Apple Push Notification service: delivering notifications to phones.
We do not sell data, we show no ads and we never use children's data for marketing.
Cookies
We use only the cookies needed for sign-in and for your chosen language. We use no tracking or advertising cookies.
Your rights
As a parent you can ask at any time to access, correct, delete or export your data, withdraw consent for your child (which deletes the child's profile) and object to processing. Write to hello@naglesslearn.com; we answer within 30 days. You can also complain to the Romanian data protection authority (dataprotection.ro) or the authority in your country. In the US you can ask us at any time to review or delete your child's information and to stop collecting it.
Security
Connections are encrypted (HTTPS). Photos are encrypted on disk. Backups are encrypted and expire within 30 days. Service administrators cannot see children's photos.
Changes
If we change this policy in a material way, we tell you in the app and by email before it takes effect.