Privacy Policy

BranchAI (“BranchAI”, “we”, “us”) turns dense documents into calm, colour-coded study notes built for dyslexic students. This policy explains what personal data we collect when you use BranchAI, why we collect it, who helps us process it, and the rights you have over it.

BranchAI is a product of LearningWithBranch Limited, a company registered in Ireland (no. 822234), with its registered office at Abington, 33 York Road, Dún Laoghaire, Dublin, A96 F223. LearningWithBranch Limited is the data controller for the personal data described here. For any privacy question, or to exercise the rights set out below, contact us at hello@learningwithbranch.com.

We keep what we collect to what BranchAI actually needs to work:

• Account details. The email address (and, if you choose to provide it, your name) from the Google account you sign in with. There are no BranchAI passwords - signing in happens with Google, and we never see or store a password.
• Documents you upload. The PDFs, images, and Word documents you add, and the study notes, keyword tiles, and quizzes generated from them.
• How you use your notes. Light usage signals such as whether you marked a quiz question easy or hard, used to make your study notes more useful over time.
• What you're studying. If you are a Leaving Cert student and choose to tell us, your subjects and the level you are taking each at. Only you can see them: not your school, not your teachers.
• Feedback. If you send feedback from the feedback page, your message, your school, your year group (or a wider group, such as Junior Cycle, when your year is small enough that it could point to you) and when you sent it. We do not store who sent it unless you tick the box to add your name so we can reply. Only the BranchAI team reads it; your school does not.
• School enquiries. If you use the form on our page for schools, the name, email address, school, role and message you give us. We do not ask for a phone number, and we do not record your IP address with it.
• Access requests. If you use the form on our access request page, the name, email address, role, school and message you give us, and your answers to its two questions about age: whether a parent is asking for their child, with their consent as parent or guardian, and whether a student asking for themselves is 16 or over. We use these to decide on your request and reply to you.
• Family trials. If you start a free trial for your child on our page for parents, your name and email address, the email address your child will sign in with if it is different, your child’s school, and your consent as their parent or guardian. Your card is saved by Stripe, not by us: we keep only Stripe’s reference to you and when the card was saved.
• Our mailing list. If you ask to hear from us, your email address, your name if you give it, whether you are a parent, a teacher or an organisation, and when and how you agreed.
• Basic technical data. Standard information your browser sends (such as IP address and device type) and aggregate, cookieless metrics about which pages load, used to keep the service secure and fast.

We do not ask for and do not want any special-category data beyond what may incidentally appear in a document you choose to upload. Please upload only material you are comfortable processing for study.

Under the GDPR we only process personal data where we have a lawful basis to do so:

• To provide BranchAI - creating your account, storing your documents, and generating your study notes. Basis: performance of our contract with you.
• To keep the service secure and reliable - preventing abuse, diagnosing faults, and understanding aggregate usage. Basis: our legitimate interests in a safe, working product.
• To improve how notes are presented - using quiz feedback to refine the study experience. Basis: our legitimate interests, balanced against your privacy.
• To reply to a school enquiry - answering you and arranging a conversation, because you asked us to. Basis: steps taken at your request before any agreement with your school. We do not add you to a mailing list.
• To run a family trial and bill for it - reviewing your request, giving your child access, and charging the saved card only if you tell us to continue after the free trial. Basis: performance of our contract with you, and steps taken at your request before it.
• To send you updates you asked for - occasional news about BranchAI, only if you have agreed to receive it. Every update has an unsubscribe link, and unsubscribing does not affect your account or the service emails above. Basis: your consent, which you can withdraw at any time.
• Where the law requires it - for example, responding to a valid legal request. Basis: compliance with a legal obligation.

We do not sell your personal data, and we do not use your documents to advertise to you.

We use a small set of trusted service providers ( “processors”) to run BranchAI. They act on our instructions under data-processing agreements and may only use your data to provide their service to us:

Your document content is sent to one AI service, Google’s Gemini API or Microsoft’s Azure OpenAI, solely to generate your study notes. It is processed under that provider’s data-protection terms, and neither uses it to train its models.

We aim to keep personal data within the European Union wherever possible. Some of our providers may process limited data outside the EU. Where that happens, the transfer is protected by appropriate safeguards - in practice the European Commission’s Standard Contractual Clauses - so your data keeps an equivalent level of protection.

We keep your account and documents for as long as your account is active, so your study notes are there when you come back.

• You can delete any document at any time. Deleting it removes the uploaded file and the generated notes from our systems.
• You can permanently delete your account yourself at any time from your settings page. It happens immediately: your uploaded files, your study notes, and your account are removed, and there is no restore. We keep limited records only where a legal obligation requires it. If your school manages your account, you ask for it to be deleted from the same page instead: your school and we are told, and once your school confirms, the account is deleted 20 days later, because the school is responsible for that data. Until then your school can undo it, and your settings page shows the date. We keep a note that a deletion was asked for and when, with nothing that identifies you.
• Records of payments are kept for as long as Irish tax law requires, even after an account is deleted.
• We keep backups so that BranchAI can be recovered if something goes wrong: Supabase keeps daily backups for seven days, and we keep our own encrypted copy for 30 days. Something you delete stays in those backups until they expire, about a month later. We only ever restore a backup to recover the service, and if we do, we delete again anything that had already been deleted.
• A school enquiry is kept while we are in conversation with you or your school about it, and deleted once it no longer serves that conversation. You can ask us to delete it sooner at any time.
• Your mailing list details are kept until you unsubscribe or ask us to remove them. After you unsubscribe we keep only your email address and the fact that you unsubscribed, so we never email you by mistake again.
• One thing is deliberately left in place: read-aloud audio. When a passage is read aloud, the resulting audio is stored under a hash of the voice and the text itself, never against your account, and is reused by anyone who asks to hear the same passage. It is not attributable to you and it is not ours alone to delete, so deleting your account leaves it where it is.

BranchAI is designed for dyslexic students, including those under 18. We take particular care with younger users.

• Where a student is below the age of digital consent in their country (between 13 and 16 across the EU), BranchAI should be set up and supervised by a parent, guardian, or the student’s school, which provides consent on the student’s behalf.
• When a school or teacher uses BranchAI with their students, the school is responsible for having the appropriate basis to do so, and we act as their processor for that student data.
• We collect only what is needed for studying, never more, and we never use a student’s documents for advertising or profiling.

If you believe a child has given us personal data without the proper consent, contact us at hello@learningwithbranch.com and we will delete it promptly.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify data that is inaccurate or incomplete.
• Erase your data (“the right to be forgotten”).
• Restrict or object to certain processing, including anything based on our legitimate interests.
• Port your data - receive it in a portable format.
• Withdraw consent at any time, where processing is based on consent.

You can exercise the right to erasure yourself, straight away, from your settings page - deleting your account removes your documents and study notes immediately, with no waiting period. If your school manages your account, the same page sends your request to your school and to us, and we delete the account 20 days after your school confirms. To exercise any of the others, email hello@learningwithbranch.com and we will respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have mishandled your data.

Security is built into how BranchAI works, not bolted on:

• Every record is scoped to its owner by row-level security, so you can only ever see your own documents and notes.
• Uploaded files live in private storage, reachable only by the account that uploaded them.
• Data is encrypted in transit, and access to our systems is limited to what is needed to operate the service.

No system is perfectly secure, but we work to protect your data and to respond quickly if anything goes wrong.

We keep cookies to a minimum. We use a small number of essential cookies to keep you signed in and to keep the service secure - these are required for BranchAI to work and cannot be turned off.

For analytics we use a privacy-friendly, cookieless approach that measures aggregate page performance and usage without tracking you across the web or building an advertising profile.

As BranchAI grows we may update this policy. When we make a meaningful change we will update the date at the top of this page and, where appropriate, let you know directly. The version published here is always the current one.

For any question about this policy or your personal data, reach us at hello@learningwithbranch.com. We read every message and aim to reply quickly.