Privacy Policy

ailearning.global · Version 2026-10-15 · Effective 15 October 2026

This policy explains what personal data ailearning.global collects, why, who processes it, how long we keep it, and your rights. It applies to everyone who visits the site, uses its learning tools, signs in, writes to us, or takes part in a program we publish here. Because some of those programs involve young people, section 9 on minors is part of the main text, not a footnote.

In short: you can read the whole site without giving us anything. Google Analytics is on by default and you can switch it off at any time through «Cookie settings» at the bottom of every page. The AI tools pass what you type through our server to Google’s Gemini model to answer you; our server keeps no text, only usage figures, and we keep a conversation only if you are signed in, tell us your age range and choose to save it (under 18, with the agreement of a parent or legal representative). We never sell your data, and we never ask anyone to put personal data about a minor into a tool on this site.

1. Who is responsible

In this policy, «aiLearning», «we» and «us» mean the responsible company above. For anything about your data, write to privacy@ailearning.global.

Schools and programs. When a school runs one of our learning programs with its own participants (for example «Grow with AI», section 9), the school decides what data about its participants is collected, collects the consents, and keeps the signed forms. This website does not collect those forms or that data.

2. What we collect, why, and on what basis

Nothing above is compulsory to read the site. Your name and e-mail are needed only to receive an answer, a newsletter or an account.

Pages shared by private link. Some pages are addressed to a named person or institution and are reachable only through an unguessable link we send them: invitation letters for the aiLearning Challenge (/proposals/challenge/p/…) and proposals for institutions. They contain only the name, title and institution of the person addressed and the text of our letter. They are not linked from the site’s pages, carry a «noindex» instruction for search engines and are left out of the sitemap, but anyone who has the link can read the page. If you are named in one and want it changed or removed, write to privacy@ailearning.global.

Contributions to the Dominican Penal Code section and Challenge drafts. The contribution form of the Dominican Penal Code section (/penal/rd/) stores what you send: the type of contribution, your message, the page and article it is about and, only if you give them, your name, e-mail, role and school or district, with the language, your anonymous identifier and the time. We use it to review and correct the section, and the e-mail only to answer you about that contribution; the basis is our legitimate interest in keeping the material accurate. Saving a draft in the Challenge generator stores the draft and the choices you made in the form (topic, level, difficulty, duration, group size, context and notes), with the language, your anonymous identifier and the time, so the team can see what schools design and improve the generator; the basis is the step you ask us to take. Neither can be read back from the site. Do not include names or details of students, families or staff in either.

We do not sell or share your personal data for advertising, we do not build advertising profiles, and we do not make decisions that have legal or similarly significant effects on you by automated means.

3. The AI tools

The site offers several tools that answer with artificial intelligence: the learning tutors (for example the French brevet tutor), the site guide, the Learning Advisory Panel conversation, the prompt builder, the Challenge generator, the help desk and scenarios of the Dominican Penal Code section, and assistants inside private areas we prepare for institutions.

• Which AI. All of them use Gemini, Google’s model, through the Gemini API, called only from our server in our Google Cloud project. Our project is on Google’s paid terms, under which Google does not use what you send to train its models. No other AI provider receives data from this site.
• Where it goes. Your browser sends what you type to CEMI’s server (a function in our Google Cloud project), which passes it to Gemini and returns the answer to you. Our server stores no text: neither what you write nor the answer is saved in our database or in our logs. For each request it records usage figures only (the identifier of your account, anonymous or signed in, the time, the tool, the model, the size of the request and of the answer in tokens, and its estimated cost) to apply the daily limits and to account for what the service costs. These records are deleted after 12 months, and the daily counters after 3 days. Google processes what it receives under its Gemini API terms, which say how long Google keeps it. The only text we keep is a tutor conversation that a signed-in user chooses to save (below).
• Daily limits. Each browser or account can send a limited number of AI messages a day, and signing in raises the limit. When a limit is reached the tool says so, and it is available again the next day. The service as a whole also has a daily and a monthly spending limit: when either is reached, the AI tools are paused for everyone until the next day or the next month.
• What is sent. What you type, the earlier messages of the same conversation, and our instructions for the tool. Do not type personal data, and never type personal data about someone else, especially a minor.
• What is kept, and where.
  • Not signed in: the conversation stays in your browser tab and is deleted when you close it. A tutor offers an option to keep your conversations in your own browser (local storage); they stay there until you delete them or clear your browser data. We do not receive them.
  • Signed in: a tutor can save your conversations in our database (Google Cloud Firestore) if you leave the save option on. Through the site only you can read them, and you can delete each one from the tutor; we keep them until you delete them or your account. Before the first save, the tutor asks your age range (13 to 15, 16 to 17, or 18 and over; never your date of birth) and, if you are under 18, confirmation that a parent or legal representative agrees, given by you or by them. We record the range, the confirmation, who gave it and when, on your account; without that record our database refuses to save. Conversations cannot be saved by anyone under 13.
  • All other tools keep nothing on our side.
• Accuracy. AI answers can be wrong. They are learning aids, not professional, legal or medical advice; see the Terms of Use.

4. Who processes data for us

We use these providers, under terms that oblige them to protect the data and use it only to provide their service:

• Google (Firebase, Google Cloud): anonymous accounts and sign-in (Firebase Authentication), our database (Cloud Firestore), functions (Cloud Functions), file storage and media delivery (Cloud Storage), Gemini (the Gemini API, called from our Cloud Functions), reCAPTCHA through Firebase App Check, Google Analytics (until you switch it off), Google Fonts, and Google Workspace, the e-mail service behind our @ailearning.global addresses.
• GitHub (GitHub Pages): hosting of the site.
• Resend: e-mails each contact-form message to our inbox (contact@ailearning.global, on Google Workspace) so our team sees it and can reply, and sends the newsletter’s confirmation e-mail and, later, the newsletter itself; it handles each message only to deliver it.
• xAId, CEMI’s own sign-in service, runs on Google Firebase; it holds your account and sends the verification and password-reset e-mails.

Within CEMI, only authorised team members can read contact messages (which reach them by e-mail as well as in the database), newsletter subscriptions and accounts, through the Google Cloud console. We disclose data to authorities only when the law requires it.

5. International transfers

Our providers process data in the United States and other countries, and our two companies are in the United States and the Dominican Republic. We transfer data there because it is necessary to provide what you ask for. Google and GitHub state that they participate in the EU-US Data Privacy Framework; where it does not apply, we rely on standard contractual clauses or on the necessity of the transfer for the service you request.

6. How long we keep it

• Analytics: at most 14 months, the longest retention Google Analytics offers for this data.
• AI conversations: not kept by us, except tutor conversations you save while signed in, which we keep until you delete them or your account.
• AI usage records: 12 months (account identifier, time, tool, model, size and estimated cost of each request; never the text). The daily counters behind the limits: 3 days.
• Accounts: while the account exists. You can ask us to delete it at any time.
• Anonymous accounts: a random identifier with no name or e-mail, kept while it may be needed to link your requests to your browser.
• Contact messages and e-mails: as long as needed to answer and follow up, and no longer than 3 years unless they become part of an agreement.
• Newsletter: an unconfirmed request, 7 days; a subscription, until you unsubscribe or ask us to delete it. When you unsubscribe we delete your address and keep only a one-way code (a hash) derived from it, as a record that the subscription ended.
• Penal Code contributions and Challenge drafts: as long as needed to review them, and no longer than 3 years.
• Age range and consent for saved conversations: while your account exists, or until you ask us to delete them (new conversations are then no longer saved).
• Agreements and invoices, if you contract a service: 10 years, as Dominican tax law requires for accounting records (and at least as long as US tax rules require for the US company).

7. Cookies and storage in your browser

• Necessary, kept in your browser’s local or session storage: your theme and style (ailearning-theme, ailearning-flavor), the image style of some sections (hs-estilo, ailearning-penal-image-style), your «Cookie settings» choice (cemiConsent), the progress ticks of some activities, drafts you are writing in an editor, the current conversation of an AI tool, and, if you sign in, the name, e-mail and photo of your account (ailearning-xaid-profile) and the sign-in session kept by Firebase. They make the site work as you asked and need no consent.
• Analytics (Google Analytics): set by default, so we can understand how the site is used. You can switch them off at any time through «Cookie settings» at the bottom of any page; from then on Google Analytics is switched off in your browser and collects nothing from it. Advertising storage is always off.
• reCAPTCHA: when you use a tool that needs it (section 2), Google’s reCAPTCHA runs to protect it from abuse and may set its own cookies.
• Do Not Track: we do not track you across other sites. Because there is no common standard for «Do Not Track» signals, the site does not respond to them; your «Cookie settings» choice controls analytics.

8. Your rights

You can ask us to:

• access the data we hold about you and know how it is used;
• correct it if it is wrong or incomplete;
• delete it, or object to a use of it;
• switch off analytics at any time, through «Cookie settings» at the bottom of any page, unsubscribe from the newsletter and withdraw any consent you have given us;
• and, if you are in the European Union or the United Kingdom, restrict its use and receive it in a portable format.

Write to privacy@ailearning.global from the e-mail you used, and tell us what you need. We answer requests to access your data within 5 business days, and requests to correct or delete it within 10 business days. We may ask you to confirm your identity. We keep records the law requires us to keep even if you ask us to delete them, and we tell you when that is the case. A parent or legal representative can exercise these rights for a minor (section 9).

If you are not satisfied: in the Dominican Republic you may bring a habeas data action before the courts (Constitution, Art. 70; Ley 172-13). In the European Union or the United Kingdom you may complain to your data-protection authority. In the United States you may contact your state attorney general.

9. Minors, schools and families

aiLearning is about learning, and some of what we publish is used by young people: learning tutors, materials for participants of school programs, and the aiLearning Challenge for schools. This is how we handle it.

Children under 13. The site is not directed to children under 13, and we do not knowingly collect personal data from them. A child under 13 must not create an account, write to us or use the AI tools. The site asks for an age range only before saving a conversation (section 3), and does not let anyone under 13 save one; if we learn that we have collected personal data from a child under 13, we delete it. A parent or legal representative who believes this has happened can write to privacy@ailearning.global.

Young people from 13 to 17. They can read the site and use the learning tools. We collect from them only what section 2 describes, and we ask them not to type personal data into any tool. To create an account, a young person needs the permission of a parent or legal representative where the law of their country requires it. A parent or legal representative can ask us at any time to access or delete the data of their minor child. Saving a conversation also requires that a parent or legal representative agrees, as section 3 describes.

School programs («Grow with AI»). In «Grow with AI», the learning program for participants of 15 to 17 (formerly «Hacer con IA»; it comprises Program A «Create with AI» and Program B «Learn with AI — no shortcuts»), the school is the consenting party towards families: it hands out, collects and keeps the consent forms, signed by each participant’s legal representative (the parent or the adult who legally represents the student). The forms follow the program’s own instruments:

• participation in the program, with an optional authorization to play a piece within the classroom;
• a separate addendum before any voice is recorded; a recorded voice is never uploaded to an AI tool or used to imitate or clone it;
• a separate addendum for accounts, project memory and publication;
• a separate written consent for each piece before anything is shown outside the classroom or published, which can be withdrawn at any time.

The program’s rule is that no personal data goes into any instruction given to an AI tool. On this website, the program’s pages collect nothing about participants: ticks and drafts stay in the participant’s browser. The project area of the «Create with AI» cohort shows each project without the participant’s name, is protected by a password that the program’s team gives to the cohort and decrypted in the browser; once opened, the password is kept in that browser tab until it is closed. No participant data from the cohort area is sent to us.

The aiLearning Challenge. Schools register for the Challenge and are responsible for the participation of their students. This website does not collect registrations of schools or students. If a school shares data about its students with us for the event, we use it only to run the event, under this policy.

Images of minors. We publish photos, voices or names of identifiable minors on this site only with the written consent of their legal representative and, as the program’s instruments require, the participant’s own assent.

10. Security

We protect data with access rules in our database (each person can read only what is theirs; contact messages and subscriptions cannot be read from the site at all), encrypted connections, access control on private areas, and providers with recognised security practices. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

11. Changes

When this policy changes, we update the version and date at the top and, for significant changes, announce it on the site. The version in force when we collected your data tells you how we used it until the change.

12. Language

This policy is published in English, Spanish and French. For users in the Dominican Republic the Spanish version prevails; in every other case, the English version prevails.