Last updated: 28 June 2026 · Main Privacy Policy
This notice explains how the ABC Learning Hub handles your data. It supplements the main privacy policy, please read both.
Minimum age
The Learning Hub is for users aged 16 and over. If you are a teacher using the Hub with younger students, you hold the account and are responsible for supervising their use, informing students and their guardians about data processing, and obtaining any parental consent required by your school’s data protection policy. If you believe a student under 16 has created their own account, contact kyle@abcwebsites.org and the account will be removed.
What we collect
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Email address, display name | Account identity and login via Google | Contract (Art. 6(1)(b)) | Until you delete your account |
| Subscription plan and tier | To show the right tools for your plan | Contract (Art. 6(1)(b)) | Duration of subscription + 12 months |
| Login timestamps | Security and account management | Legitimate interests (Art. 6(1)(f)) | 90 days rolling |
| Tool usage counts | To enforce fair-use limits on free tools | Contract (Art. 6(1)(b)) | 35 days rolling |
| Messages sent to Otto | To generate AI tutor responses | Contract / consent (Art. 6(1)(b/a)) | Session only on our server; AI provider retains up to 30 days |
Otto AI and third-party processing
When you use Otto inside the Hub, your messages are sent to an external AI language model (Anthropic API, US-based). Do not send Otto sensitive personal information. Messages are not stored on our server beyond the session. The AI provider may retain inputs for up to 30 days for safety purposes under their own terms.
Login via Google
Sign-in is handled by Google/Firebase. Google’s own privacy policy applies to the authentication step. We receive only your verified email address and display name. Two session cookies are set on successful login (abc_sess, 30 days, HttpOnly; abc_ctx, 30 days).
Your rights
You can request access to, correction of, or deletion of your Hub data at any time by emailing kyle@abcwebsites.org. Deletion removes your account, usage records, and member entry. Google sign-in data held by Google must be managed via your Google account settings.
Questions
kyle@abcwebsites.org · Kyle Atkins, Sliema, Malta · IDPC (Malta DPA)