ExpertPrivacy Policy
Last Updated: December 29, 2025
Contents
1. Introduction
TinyHive Labs Limited ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered educational platform that provides tutoring services to students and families, and enables educators and institutions to build interactive AI tutors (the "Service").
2. Information We Collect
2.1 Individual Account Holder Information
For individual subscribers, we collect:
- Name and email address
- Password
- Payment and billing information (processed via Stripe)
- Subscription and trial status
- Profile information of sub accounts (first name, last name)
- Conversation history with AI tutors for each profile
- Learning progress and engagement metrics per profile
- Message usage statistics
2.2 Educator Information
For educators, course creators and institutions, we collect:
- Name and email address
- Organization or institution name
- Password
- Payment and billing information (processed via Stripe)
- Course materials (PDFs, videos, documents)
- Custom AI tutor configurations and prompts
2.3 Student Information
For students accessing educator-created courses, we collect:
- Email address
- Name
- Conversation history with AI tutors
- Learning progress and engagement metrics
2.4 Automatically Collected Information
We automatically collect certain information when you use the Service:
- Usage data and analytics
- Log data and error information
- Device information
- IP address
- Browser type and version
- Time zone setting
- Operating system and platform
- Cookie data and local storage information
3. How We Use Your Information
We use the information we collect to:
- Provide and maintain our Service
- Deliver personalized AI tutoring
- Track learning progress and generate subject-specific recommendations
- Process payments and manage subscriptions
- Improve and personalize user experience
- Analyze and monitor usage patterns
- Detect, prevent, and address technical issues
- Communicate with you about Service-related matters, including trial expiry and subscription updates
- Comply with legal obligations
- Send marketing communications
- Enhance our services
4. Data Storage and Security
We implement industry-standard security measures to protect your information:
- Encryption of data in transit using HTTPS
- Database encryption at rest
- Secure authentication processes
- Regular security updates and monitoring
Course content and AI tutoring interactions are processed through OpenAI's, Anthropic's and Google's APIs. These providers do not train on API inputs as per their data usage policies.
6. Data Retention
We retain data for different periods based on its type and purpose:
- Account information: Kept while account is active and as required for legal purposes
- Conversation history: Retained for Service functionality
- Learning progress: Retained for Service functionality
- Course content: Retained for Service functionality
- AI embeddings: Stored until course creator deletes or updates content
- Analytics data: Retained for Service functionality
7. Your Privacy Rights
Residents of the European Economic Area and United Kingdom
TinyHive Labs Limited is considered the "data controller" of the "personal data" (as defined under the General Data Protection Regulation) we handle under this Policy. In other words, TinyHive Labs Limited is responsible for deciding how to collect, use, and disclose personal data, subject to applicable law. The laws of the European Economic Area and the United Kingdom require data controllers to tell you about the legal ground that they rely on for using, sharing, or disclosing your personal data. To the extent those laws apply, our legal grounds are as follows:
Contractual Commitments: We may use, share, or disclose personal data to honor our contractual commitments to you. For example, we will process your personal data to comply with our agreements with you, and to honor our commitments in any contracts that we have with you.
With Your Consent: Where required by law, and in some other cases, we use, share, or disclose personal data on the basis of your consent.
Legitimate Interests: In many cases, we use, share, or disclose personal data on the ground that it furthers our legitimate business interests in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals, such as customer service, certain promotional activities, analyzing and improving our business, providing security for the Services, preventing fraud, and managing legal issues.
Legal Compliance: We need to use and disclose personal data in certain ways to comply with our legal obligations.
In addition to those rights described herein, you have the right to lodge a complaint with the relevant supervisory authority. However, we encourage you to contact us first, and we will do our very best to resolve your concern.
Residents of Nevada
If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to unaffiliated parties. You can exercise this right by contacting us as described in the "Contact Us" section below with the subject line "Nevada Do Not Sell Request" and providing us with your name and the email address. We do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A.
Residents of California
Under the California Consumer Privacy Act ("CCPA"), we also have to provide you with the "categories" of personal information and sensitive personal information we collect and disclose for business or commercial purposes.
The categories of personal information are: identifiers, financial information (such as payment information), commercial or transactional information, internet or other electronic network activity information, general geolocation data, audio or video information (such as pictures and videos you submit), other information about you that you may provide to us voluntarily, such as through User Content, other information that may identify you, and inferences drawn from the information we collect.
We also collect the following categories of "sensitive personal information," as defined under the CCPA: (i) account log-in and password or other credentials that allow access to your account; and (ii) other sensitive personal information you may voluntarily provide to us in your capacity as an individual user of the Services.
We collect the categories of personal information identified above from the following sources: (1) directly from you; (2) through your use of the Services; and (3) other parties such as other users and through unaffiliated parties.
"Sale" and "sharing" of personal information
The CCPA sets forth certain obligations for businesses that "sell" or "share" personal information. Where we refer to "sell" or "share" (or their variants) in quotes, we are referring to those terms as uniquely defined in the CCPA.
We may use third-party analytics services and online advertising services that may result in the "sharing" of online identifiers (e.g., cookie data, IP addresses, device identifiers, general location information, and usage information) with advertising partners to advertise the Services on other websites.
We do not knowingly "sell" or "share" the personal information of children under 16.
Do-Not-Track disclosure
We do not respond to browser-initiated Do Not Track signals, as the Internet industry is currently still working on Do Not Track standards, implementations, and solutions.
CCPA rights
The CCPA also allows you to limit the use or disclosure of your "sensitive personal information" if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for purposes for which you cannot opt out under the CCPA.
8. International Data Transfers
Our services are global and your information may be stored and processed in the United States and other countries outside the United Kingdom that may have data protection laws that differ from the laws in your country, and data may be accessible to law enforcement and national security authorities under certain circumstances.
By using the Services, or providing us with any information, you consent to the collection, processing, maintenance, and transfer of such information in and to the United States and other applicable countries in which the privacy laws may not be as comprehensive as, or equivalent to, those in the country where you reside and/or are a citizen.
9. Children's Privacy
9.1 Account Creation and Family Profiles
Our individual subscription service allows parents and legal guardians to create supervised learning profiles for family members, including children under the age of 18, for educational purposes. Only individuals aged 18 or over may create ExpertMinds accounts. Children cannot independently create accounts or profiles.
By creating a profile for a child under 18, you represent that you are the parent or legal guardian of that child and consent to our collection and use of their information as described in this Privacy Policy.
9.2 Information We Collect About Children
When a parent or guardian creates a profile for a child, we collect and process:
- Profile Information: First name, last name (for identification within the family account)
- Educational Data: Conversation history with AI tutors, learning progress, subjects accessed, lessons viewed
- Usage Data: Message counts, session timestamps, time spent on subjects
We do NOT collect from child profiles:
- Phone numbers
- Birthdates or precise ages
- Biometric data
- Social media information
9.3 How We Use Children's Information
Children's information is used solely to:
- Provide personalized AI tutoring
- Track learning progress within the family account
- Generate subject-specific learning recommendations
- Allow parents to monitor their child's educational progress
- Improve our educational content and AI tutoring quality
9.4 Parental Rights and Controls
Parents and guardians have full control over their children's profiles and can:
- View all conversation history and learning activity
- Review learning progress and subject access
To exercise these rights, parents can access their account dashboard or contact us directly at support@expertminds.ai.
9.5 Third-Party Services and Children's Data
Children's data is only shared with essential service providers:
- OpenAI/Anthropic/Google: For AI tutoring functionality
- Database Hosting: For secure data storage
9.6 Compliance with Children's Privacy Laws
We comply with the Children's Online Privacy Protection Act (COPPA) in the United States, UK GDPR requirements for processing children's data, and other applicable children's privacy laws.
For users in different jurisdictions:
- UK: Parental consent required for children under 13
- US: COPPA compliance for children under 13
- EU: Parental consent required for children under 16
9.7 Contact Us About Children's Privacy
If you have questions or concerns about children's privacy, or wish to:
- Review your child's personal information
- Request deletion of your child's data
- Withdraw consent for your child's profile
- Report a privacy concern
Please contact us at support@expertminds.ai
10. Changes to Privacy Policy
We reserve the right to update or change our Privacy Policy at any time. Your continued use of the Service after we post any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.
11. Contact Us
For privacy-related questions, to exercise your rights, or for concerns about children's privacy, please contact:
Support: support@expertminds.ai