LessonLab

Privacy Policy

Last updated: Friday, January 2nd 2026

This Privacy Policy explains how LessonLab AI (“LessonLab”, “we”, “us”, “our”) collects, uses, stores, and protects personal data when you access or use our platform, including LessonLab tools and ATLAS analytics (the “Service”).

This Policy should be read alongside our Terms and Conditions.

1. Who We Are

LessonLab AI provides AI-powered educational tools and analytics for teachers, educational institutions, parents acting on behalf of students, and learners.

For the purposes of UK data protection law:

  • LessonLab may act as a data controller when providing accounts and platform access to individual users.
  • LessonLab acts as a data processor when processing personal data on behalf of schools or educational institutions.
  • Third-party service providers may act as sub-processors.

2. The Personal Data We Process

Teacher and Account Data

We may process:

  • Name
  • Email address
  • Account credentials
  • Subscription and billing history
  • Communication preferences
  • School or organisation name (where provided)

Student Data (ATLAS and Educational Tools)

Depending on how the Service is used, we may process:

  • Student first names
  • Optional student surnames
  • Student login identifiers created within the platform
  • Attainment data and assessment scores
  • Learning objectives and progress records
  • Teacher-entered comments related to learning objectives
  • Group labels created by teachers for reporting or filtering purposes
  • Technical flags (for example, blocking AI access following inappropriate usage)

We do not require:

  • Dates of birth
  • Contact details
  • Addresses
  • Government identifiers

3. Special Category Data

LessonLab does not require or intentionally collect special category personal data.

Some optional teacher-created group labels or comments (for example, labels such as SEN, ELL, or similar) may reference educational needs. These are:

  • Optional
  • Defined entirely by the teacher or school
  • Used only for internal reporting and filtering

LessonLab processes such data solely on the instructions of the teacher or educational institution and does not analyse or infer additional characteristics.

4. How We Use Personal Data

We use personal data to:

  • Create and manage user accounts
  • Provide access to LessonLab and ATLAS features
  • Generate AI-powered educational content and summaries
  • Produce analytics, reports, and insights to support teaching
  • Manage subscriptions and payments
  • Communicate service updates and, where opted in, marketing communications
  • Maintain platform security and integrity

5. LessonLab Tools (Non-ATLAS)

LessonLab tools allow users to generate educational content using AI.

AI Processing

  • User prompts and generated outputs may be processed by third-party AI providers.
  • We do not use personal data submitted to AI tools to train our own models.

Retention

  • AI prompts and generated outputs are retained for up to 28 days to allow review, reuse, and moderation.
  • After this period, AI-generated content is deleted.
  • Account and subscription data is retained while the account remains active.

6. ATLAS Analytics

ATLAS provides analytics, dashboards, summaries, and reports based on student attainment and progress data.

AI Use in ATLAS

  • Student attainment data, names, and related educational information may be sent to AI service providers to generate summaries, insights, and reports.
  • AI outputs are provided to support professional judgement only.
  • LessonLab does not use AI to make automated decisions about students.

Retention

  • ATLAS data is retained while the user or school account exists.
  • Teachers can manually delete individual students, classes, or records.
  • Bulk deletion is supported on request.
  • When an account is deleted, all associated ATLAS data is permanently deleted.

ATLAS data is not deleted automatically due to missed or cancelled payments to avoid accidental data loss.

7. AI Providers and Third-Party Services

We use the following third-party providers:

  • OpenAI – AI text generation and analysis
  • Google (Gemini) – AI image generation
  • Stripe – payment processing
  • SendGrid – transactional and marketing emails

These providers act as processors or sub-processors and process data only on our instructions.

We do not allow personal data processed through these services to be used for model training.

8. International Data Transfers

Some of our service providers may process personal data outside the United Kingdom or European Economic Area.

Where international transfers occur, we rely on appropriate safeguards, including Standard Contractual Clauses, to protect personal data in accordance with UK GDPR.

9. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract – to provide access to the Service
  • Legitimate interests – to operate, secure, and improve the platform
  • Legal obligation – where required by law
  • Consent – for optional communications such as marketing emails

10. Marketing and Communications

We may send:

  • Service and product updates
  • Marketing communications where users have opted in

Users can:

  • Unsubscribe via email links
  • Manage preferences within the platform

11. Data Security

We use appropriate technical and organisational measures to protect personal data, including:

  • Access controls
  • Secure hosting environments
  • Limited internal access to personal data

12. Data Subject Rights

Under UK data protection law, individuals have the right to:

  • Access their personal data
  • Request rectification
  • Request erasure
  • Restrict processing
  • Object to processing
  • Request data portability

Requests can be made by contacting us using the details below. We will respond within one month.

13. Children and Student Data

LessonLab is not intended for unsupervised use by children.

Where students use the Service:

  • Access is authorised and supervised by a teacher or responsible adult
  • Students should not submit unnecessary personal data into free-text fields
  • Any personal information voluntarily included in prompts is provided at the user’s discretion

14. Data Processing Agreements

Where LessonLab processes personal data on behalf of a school or educational institution, such processing is governed by a Data Processing Agreement between LessonLab and the institution.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes take effect immediately upon publication.

Users are encouraged to review this Policy periodically. Continued use of the Service constitutes acceptance of the updated Policy.

16. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or personal data:

Email: info@lessonlabai.com