Privacy Policy

BranchAI (“BranchAI”, “we”, “us”) turns dense documents into calm, colour-coded study notes built for dyslexic students. This policy explains what personal data we collect when you use BranchAI, why we collect it, who helps us process it, and the rights you have over it.

We are the data controller for the personal data described here. For any privacy question, or to exercise the rights set out below, contact us at info@learningwithbranch.com.

We keep what we collect to what BranchAI actually needs to work:

• Account details.The email address and password you use to sign in. Passwords are stored only in hashed form by our authentication provider — we never see them.
• Documents you upload. The PDFs, images, and Word documents you add, and the study notes, keyword tiles, and quizzes generated from them.
• How you use your notes. Light usage signals such as whether you marked a quiz question easy or hard, used to make your study notes more useful over time.
• Basic technical data. Standard information your browser sends (such as IP address and device type) and aggregate, cookieless metrics about which pages load, used to keep the service secure and fast.

We do not ask for and do not want any special-category data beyond what may incidentally appear in a document you choose to upload. Please upload only material you are comfortable processing for study.

Under the GDPR we only process personal data where we have a lawful basis to do so:

• To provide BranchAI— creating your account, storing your documents, and generating your study notes. Basis: performance of our contract with you.
• To keep the service secure and reliable— preventing abuse, diagnosing faults, and understanding aggregate usage. Basis: our legitimate interests in a safe, working product.
• To improve how notes are presented— using quiz feedback to refine the study experience. Basis: our legitimate interests, balanced against your privacy.
• Where the law requires it— for example, responding to a valid legal request. Basis: compliance with a legal obligation.

We do not sell your personal data, and we do not use your documents to advertise to you.

We use a small set of trusted service providers ( “processors”) to run BranchAI. They act on our instructions under data-processing agreements and may only use your data to provide their service to us:

Your document content is sent to Google’s Gemini API solely to generate your study notes. It is processed under Google’s data-protection terms and is not used to train Google’s models.

We aim to keep personal data within the European Union wherever possible. Some of our providers may process limited data outside the EU. Where that happens, the transfer is protected by appropriate safeguards — in practice the European Commission’s Standard Contractual Clauses — so your data keeps an equivalent level of protection.

We keep your account and documents for as long as your account is active, so your study notes are there when you come back.

• You can delete any document at any time. Deleting it removes the uploaded file and the generated notes from our systems.
• You can permanently delete your account yourself at any time from your settings page. It happens immediately: your uploaded files, your study notes, and your account are removed, and there is no restore. We keep limited records only where a legal obligation requires it.
• Backups are kept on a short rotation and overwritten in the normal course of operation.

BranchAI is designed for dyslexic students, including those under 18. We take particular care with younger users.

• Where a student is below the age of digital consent in their country (between 13 and 16 across the EU), BranchAI should be set up and supervised by a parent, guardian, or the student’s school, which provides consent on the student’s behalf.
• When a school or teacher uses BranchAI with their students, the school is responsible for having the appropriate basis to do so, and we act as their processor for that student data.
• We collect only what is needed for studying, never more, and we never use a student’s documents for advertising or profiling.

If you believe a child has given us personal data without the proper consent, contact us at info@learningwithbranch.com and we will delete it promptly.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify data that is inaccurate or incomplete.
• Eraseyour data (“the right to be forgotten”).
• Restrict or object to certain processing, including anything based on our legitimate interests.
• Portyour data — receive it in a portable format.
• Withdraw consent at any time, where processing is based on consent.

You can exercise the right to erasure yourself, straight away, from your settings page— deleting your account removes your documents and study notes immediately, with no waiting period. To exercise any of the others, email info@learningwithbranch.com and we will respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have mishandled your data.

Security is built into how BranchAI works, not bolted on:

• Every record is scoped to its owner by row-level security, so you can only ever see your own documents and notes.
• Uploaded files live in private storage, reachable only by the account that uploaded them.
• Data is encrypted in transit, and access to our systems is limited to what is needed to operate the service.

No system is perfectly secure, but we work to protect your data and to respond quickly if anything goes wrong.

We keep cookies to a minimum. We use a small number of essential cookies to keep you signed in and to keep the service secure — these are required for BranchAI to work and cannot be turned off.

For analytics we use a privacy-friendly, cookieless approach that measures aggregate page performance and usage without tracking you across the web or building an advertising profile.

As BranchAI grows we may update this policy. When we make a meaningful change we will update the date at the top of this page and, where appropriate, let you know directly. The version published here is always the current one.

For any question about this policy or your personal data, reach us at info@learningwithbranch.com. We read every message and aim to reply quickly.