Privacy Policy
This policy explains how Techiea collects, uses, and protects personal information — including information about children and students — and the rights you have under the GDPR and the CCPA/CPRA.
The short version
- We collect only what we need to run Techiea: account details, learning activity, assessment results, and basic technical data.
- We do not sell your personal information. We do not share it for cross‑context behavioural advertising.
- For children under 13 (COPPA) and under 16 (GDPR‑K), we rely on verifiable parental or school consent where required.
- You can access, correct, delete, or port your data — and parents/guardians can do the same for their child’s account.
1. Who we are
Techiea (“Techiea”, “we”, “us”, “our”) operates an adaptive eLearning platform for learners from Kindergarten through College. For the purposes of the GDPR, Techiea is the data controller for personal data processed through the Techiea website and learning services, unless we act as a processor on behalf of a school or institution.
Data controller contact:
Techiea Privacy Office
Email: privacy@techiea.com
Data Protection Officer (DPO):
dpo@techiea.com
If you are located in the EU/EEA and we are required to appoint an EU representative under Article 27 GDPR, their contact details will be published here.
2. Children and students — our approach
Because Techiea is used by learners of all ages, protecting children’s privacy is central to how we design the service.
2.1 Learners under 13 (COPPA)
Where Techiea is directed to children under 13, or where we have actual knowledge that we are collecting personal information from a child under 13, we obtain verifiable parental consent before collection, use, or disclosure of that child’s personal information, except where a permitted school‑consent exception applies. We limit collection from children to what is reasonably necessary to provide the learning service.
2.2 Learners under 16 (GDPR‑K)
Under Article 8 GDPR, where consent is our legal basis for processing a child’s personal data, consent must be given or authorised by the holder of parental responsibility. The default age is 16, but some EU member states have lowered it to 13. We apply the age threshold of the learner’s country and use appropriate age‑verification and parental‑consent mechanisms.
2.3 School and educator accounts
When a school, district, or educator creates student accounts, the school or educator is responsible for obtaining any required parental consents and for authorising Techiea to process student data for educational purposes. In these contexts, Techiea may act as a processor or a service provider under applicable law, including FERPA where relevant. Student data is used solely to provide the contracted educational service and is not used for commercial advertising.
2.4 Parents’ and guardians’ rights
A parent or legal guardian may review their child’s personal information, request correction or deletion, and refuse further collection or use — subject to legal and safety exceptions. Contact us at privacy@techiea.com.
3. Personal information we collect
Depending on how you use Techiea, we may collect:
| Category | Examples |
|---|---|
| Account & identity | Name, email address, username, password, role (learner, parent, educator) |
| Learner profile | Age/grade level, stage (K–College), subject preferences, learning goals |
| Learning activity | Lessons viewed, time on task, answers, attempts, progress, adaptive difficulty data |
| Assessment & scorecard | Test responses, scores, topic‑level mastery, streaks, performance trends |
| Communications | Messages to support, feedback, survey responses |
| Technical & device | IP address, browser type, device identifiers, approximate location, log data |
| Cookies & similar tech | Session cookies, preference cookies, analytics identifiers (see §13) |
We do not intentionally collect sensitive personal information (as defined by the CPRA) such as government IDs, precise geolocation, health data, or biometric data, except where strictly necessary for account security or as required by law.
4. How we collect information
- Directly from you — when you create an account, complete a test, contact support, or set preferences.
- Automatically — through cookies, log files, and similar technologies as you use the platform.
- From schools or educators — when a teacher or institution enrols learners or provides roster information.
- From parents or guardians — when consent or account information is provided on behalf of a child.
5. Why we use personal information
We use personal information to:
- Create and manage accounts and provide the Techiea learning service.
- Deliver adaptive lessons, practice, and assessments tailored to the learner’s ability.
- Generate scorecards, track performance, and recommend next steps.
- Communicate about the service, respond to support requests, and send administrative notices.
- Maintain security, prevent fraud and abuse, and debug technical issues.
- Comply with legal obligations and enforce our terms.
- Improve the service through aggregated, de‑identified analytics.
We do not use student personal information for targeted advertising, and we do not sell personal information.
6. Legal basis for processing (GDPR)
| Purpose | Legal basis |
|---|---|
| Providing the learning service and account administration | Performance of a contract (Art. 6(1)(b)) |
| Personalising learning and adaptive assessments | Contract; legitimate interests (Art. 6(1)(f)) |
| Communications and support | Contract; legitimate interests |
| Security, fraud prevention, and legal compliance | Legal obligation (Art. 6(1)(c)); legitimate interests |
| Optional analytics and non‑essential cookies | Consent (Art. 6(1)(a)) — withdrawable at any time |
Where we rely on legitimate interests, we have carried out a balancing test and implemented safeguards to protect your rights. You may object to processing based on legitimate interests.
8. International transfers
Techiea may process and store personal information in countries outside the EU/EEA, including the United States. Where we transfer personal data from the EU/EEA to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and, where required, supplementary measures.
9. Data retention
We retain personal information only as long as necessary for the purposes described in this policy, including to provide the service, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of data and the context — for example, active‑account data is kept while the account exists, and learning records may be kept for the academic year plus a reasonable period. When data is no longer needed, we delete or anonymise it.
10. Your rights under the GDPR
If you are in the EU/EEA (or the UK), you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase data in certain circumstances (right to be forgotten).
- Restrict processing in certain circumstances.
- Data portability — receive your data in a structured, machine‑readable format.
- Object to processing based on legitimate interests or direct marketing.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
- Lodge a complaint with your local supervisory authority. We ask that you contact us first so we can try to resolve your concern.
For children, these rights can be exercised by a parent or legal guardian.
11. Your rights under the CCPA/CPRA
If you are a California resident, you have the right to:
- Know what categories and specific pieces of personal information we have collected, used, shared, or sold about you in the past 12 months.
- Delete personal information we collected from you, subject to exceptions.
- Correct inaccurate personal information.
- Opt out of sale or sharing. We do not sell or share your personal information as those terms are defined by the CCPA/CPRA. Because we do not sell or share, there is no opt‑out link required — but you may still contact us with any questions.
- Limit use and disclosure of sensitive personal information — we do not use sensitive personal information beyond permitted purposes.
- Non‑discrimination — we will not deny services, charge different prices, or provide a lower quality of service because you exercised your privacy rights.
- Use an authorised agent to submit a request on your behalf, subject to verification.
For consumers under 16, the CCPA requires opt‑in consent before any sale or sharing; for children under 13, a parent or guardian must opt in. Techiea does not sell or share minors’ personal information.
12. How to exercise your rights
To submit a GDPR or CCPA request, contact us at privacy@techiea.com. Please include enough information for us to verify your identity and locate your records. For requests relating to a child, we will verify that you are the parent or legal guardian.
- We respond to GDPR requests without undue delay and generally within one month.
- We respond to CCPA requests within 45 days, with a possible 45‑day extension where reasonably necessary.
- There is no charge for exercising your rights, unless a request is manifestly unfounded or excessive.
14. Security
We use administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, or alteration — including encryption in transit, access controls, and regular reviews. No method of transmission or storage is completely secure, but we work to protect your data proportionately to its sensitivity.
15. Automated decision‑making and adaptive learning
Techiea uses adaptive algorithms to adjust question difficulty, recommend lessons, and build personalised learning paths. This is not used to make decisions that produce legal or similarly significant effects about you. The logic uses your responses and performance to estimate mastery and select appropriate practice; you can request human review or object where required by law. Scorecards are provided for transparency.
16. Changes to this policy
We may update this policy from time to time. We will post the revised version with a new “last updated” date and, where changes are material, provide additional notice (for example, by email or an in‑product notice). Continued use of Techiea after the effective date means you accept the updated policy.
17. Contact us
Questions, concerns, or requests about privacy can be sent to:
Techiea Privacy Office
Email: privacy@techiea.com
DPO: dpo@techiea.com
If you are in the EU/EEA, you also have the right to complain to your local data protection authority. If you are a California resident, you may contact the California Privacy Protection Agency (CPPA) or the California Attorney General.