This policy explains how AI Homework Mate handles account details, student homework, conversations, uploaded files, AI processing, billing records, parent controls, and deletion requests.
Last updated: 20 May 2026
AI Homework Mate is a guided homework support service. We use student homework, chat messages, uploaded files, and learning settings to provide tutoring support, parent controls, safety features, and account access.
We do not sell personal information. We do not use student content for targeted advertising. We share data only when needed to run the service, process payments, provide AI tutor responses, keep accounts secure, meet legal duties, or respond to privacy and safety requests.
Parents and eligible students can ask to access, correct, delete, or restrict personal information by contacting [email protected].
We use your account and homework information to help you with schoolwork. This can include what you type, files you upload, your chat history, your grade level if it is added, and settings chosen by you or your parent.
Your parent or guardian may be able to see parts of your account, homework progress, practice tasks, and requests for full solutions. If your account was created by a parent, they can manage that child account.
Please do not type private things you do not need for homework, such as your home address, phone number, passwords, health information, or secrets about other people.
If you are under 13, a parent or guardian must create and manage your child account. If something in your account looks wrong or you want information deleted, ask your parent or contact [email protected].
AI Homework Mate is operated through the website at aihomeworkmate.com. For privacy requests, child-safety questions, or data protection concerns, contact [email protected].
For UK GDPR and EU GDPR purposes, the controller is the business operating AI Homework Mate unless a school, employer, or other organisation has separately agreed to act as controller for its own users. Where we process data for a school or organisation under a written agreement, we may act as their processor for that organisation-controlled use.
Account and profile data: email address, password credentials, login method, parent, student or teacher role, display name, profile details, language, timezone, theme, school or organisation details, grade level, accessibility preferences, and account status.
Student learning content: homework text, chat messages, conversation history, corrections, generated practice tasks, parent notes for tutoring, solution requests and decisions, uploaded images or PDFs, file names, file types, file sizes, and attachment metadata.
Parent and family controls: parent-child links, relationship labels, access permissions, quick-login codes, mobile login sessions, QR login challenges, approval decisions, progress visibility, and child-account management settings.
Billing and access data: plan, subscription status, Stripe and Apple identifiers, checkout status, invoices, payment amounts, billing market, tax or invoice details where required, company plan and invite-code records, extra usage purchases, and webhook audit records.
Technical and security data: IP address, device and browser information, cookies or similar session technology, authentication tokens, app install identifiers, logs, rate-limit signals, error reports, OpenAI request identifiers, model usage and cost records, and abuse-prevention signals.
We use personal information to create and secure accounts, verify email addresses, provide guided tutor conversations, parse homework uploads, generate practice tasks, maintain parent controls, manage subscriptions and usage limits, provide customer support, prevent fraud and abuse, troubleshoot the service, and comply with legal obligations.
We may use homework content, uploaded files, and conversation context with AI service providers, including OpenAI, to create tutor responses, parse homework, assess whether a student has tried enough before showing final answers, generate practice, and support safety controls. We limit this sharing to what is needed for the feature.
We may use de-identified, aggregated, or operational metrics to understand reliability, usage, model cost, safety, and product performance. We do not use student personal information to serve targeted advertising.
Contract: to provide the account, tutoring features, uploads, subscriptions, support, and requested app functionality.
Legitimate interests: to keep the service secure, prevent abuse, improve reliability, understand usage, provide family safety features, manage internal records, and defend legal claims, balanced against the rights of students, parents, and other users.
Legal obligation: to keep billing, tax, accounting, fraud-prevention, consumer, and regulatory records where required.
Consent: where required for optional settings, communications, cookies that are not strictly necessary, or child consent rules for online services. Consent can be withdrawn where it is the legal basis for processing.
The service is designed for homework support and may be used by children and teenagers with parent, guardian, school, or account-holder involvement. We aim to collect only what is needed for learning support, safety, account access, and billing.
For users in the United States, if COPPA applies because a child is under 13, we require parent or guardian involvement before collecting personal information from that child, including any direct parent notice and verifiable parental consent required by law. Direct student signup requires students to confirm they are at least 13; students under 13 must use a parent-managed child account created by a signed-in parent or guardian. Parents can review, correct, stop further collection or use of, or request deletion of their child's personal information by contacting us.
For users in the United Kingdom, where we rely on consent for an online service offered directly to a child, a child generally must be at least 13 to provide that consent. For users in Hungary and the EU, where we rely on consent for an online service offered directly to a child, a child generally must be at least 16 unless a different local rule applies. Below those ages, consent must come from a holder of parental responsibility.
Parents may be able to see child account status, homework context, progress signals, approval queues, practice tasks, and account controls. Students should avoid sharing unnecessary sensitive information in homework chats or uploads.
AI features may produce tutor replies, extract homework text from uploaded files, create practice questions, summarise progress, or make support recommendations. AI output can be imperfect and should not replace a teacher, parent, professional adviser, or emergency support.
Some product decisions, such as whether a final solution can be shown automatically, may use AI-assisted signals about effort and understanding. These are learning-support decisions, not legal or similarly significant decisions. Parents or users can contact us to ask for review or correction.
Service providers: hosting, database, storage, email delivery, security, analytics if enabled, support tooling, and infrastructure providers.
AI providers: providers such as OpenAI that process homework, uploaded files, prompts, and conversation context to generate or support tutor responses.
Payment and app-store providers: Stripe, Apple, banks, card networks, tax and invoice systems, and related payment processors for checkout, subscription management, receipts, refunds, taxes, and fraud prevention.
Parents, guardians, schools, and organisations: where accounts are linked, managed, paid for, or invited through family, school, corporate, or organisation access features.
Legal and safety recipients: courts, regulators, law enforcement, professional advisers, or other parties where required by law or needed to protect users, the service, or the public.
We use trusted service providers to operate, secure, bill, support, and improve the service. These providers process personal information only where needed for the purposes described in this Privacy Policy.
| Provider | Purpose | Data involved | Role |
|---|---|---|---|
| OVHcloud | Hosting and infrastructure services, including server infrastructure, database or storage services, backups, and operational reliability where used. | Account data, homework content, uploaded files, technical logs, service records, and related operational data. | Processor / infrastructure provider. |
| Cloudflare | DNS, security, traffic routing, performance, abuse prevention, proxy/CDN, and storage services where used. | IP address, device and browser information, request metadata, security events, related logs, and uploaded files or related content if Cloudflare storage services are used. | Processor / security and infrastructure provider. |
| OpenAI | AI tutor responses, homework parsing, uploaded file analysis, practice generation, safety support, reliability, debugging, and abuse prevention. | Prompts, homework text, uploaded content, conversation context, usage metadata, and related feature data. | Processor / AI service provider. |
| Microsoft 365 | Business email, mailbox hosting, support, privacy and legal communications, and transactional email where used. | Email addresses, message content, attachments, delivery metadata, and related account or security information. | Processor / email and communications provider. |
| Stripe | Checkout, payment processing, subscriptions, invoices, billing portal access, receipts, fraud prevention, refunds, and payment disputes. | Billing details, payment identifiers, invoice details, subscription status, tax or invoice data, and fraud-prevention information. | Payment processor; independent controller for some payment, fraud, compliance, and legal-obligation processing. |
| Apple | In-app purchases, subscriptions, app-store purchase processing, refunds, and subscription management where users buy through Apple services. | App-store purchase identifiers, subscription status, transaction records, refund or subscription data, and entitlement information. We do not receive full card details from Apple. | Independent platform and payment provider. |
Where we use OpenAI through business or API services, we do not opt in to OpenAI using student personal information or uploaded homework to train general AI models unless we separately tell you and obtain any required consent.
More information about these providers' privacy and security practices is available from their own privacy notices, security pages, and data processing terms. We do not publish detailed infrastructure, security, server, database, API, or system configuration information for safety reasons.
We may process and store personal information in the United Kingdom, European Economic Area, United States, and other countries where our providers operate. Where UK or EU data protection law requires transfer safeguards, we use appropriate mechanisms such as adequacy decisions, the EU-U.S. Data Privacy Framework and UK Extension where available, Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, and provider data processing terms.
We keep account, homework, conversation, upload, and parent-control records while an account is active and for as long as needed to provide the service, maintain safety and security, resolve disputes, enforce terms, and meet legal duties. We do not keep child personal information indefinitely when there is no continuing business, safety, legal, or account need.
Uploaded files may be pruned or deleted to manage storage limits. Mobile sessions, quick-login codes, QR challenges, and tokens expire or can be revoked. Billing, invoice, tax, fraud-prevention, and audit records may be retained longer where law or legitimate operational needs require this.
Logged-in users can request account deletion from the account area. Deletion erases or anonymises personal account content where appropriate, disables login, removes stored uploads where possible, and attempts to delete associated AI upload files. Some billing, tax, webhook, purchase, and audit records may be retained where legally or operationally required. Deleting an account does not automatically cancel a Stripe, Apple, app-store, bank, or other payment-provider subscription.
We use only essential cookies and similar technologies needed to keep the service working. These support secure login, keeping you signed in as you move between pages, protecting forms from misuse, remembering necessary account settings, and maintaining service reliability. We do not use analytics, advertising, or tracking cookies.
Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing of your personal information, withdraw consent, complain to a regulator, or appeal a decision about your request.
California and certain other US state residents may have rights to know, access, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and not be discriminated against for exercising privacy rights. We do not sell personal information or share it for cross-context behavioural advertising.
UK users can complain to the Information Commissioner's Office. Hungarian users can complain to the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH). EU users may also contact their local data protection authority.
To exercise rights, contact [email protected]. We may need to verify your identity or your authority to act for a child before fulfilling a request.
We may update this policy when the service, providers, law, or data practices change. If a change is material, we will take reasonable steps to notify users, parents, schools, or account holders where appropriate.