Privacy Policy

Last Updated: August 2026

1. Introduction

Welcome to PhysoClick ("Service", "Platform", "we", "our", or "us").

We respect your privacy and are committed to protecting information collected through the use of our educational platform.

By creating an account, accessing, or using the Service, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

2. Early Access Notice

The Service is currently provided as an Early Access release.

Features, content, functionality, lesson materials, educational resources, AI-generated content, user interfaces, account features, and other aspects of the Service may be modified, updated, suspended, replaced, or removed at any time without prior notice.

Users acknowledge that Early Access software may contain errors, inaccuracies, interruptions, incomplete features, or unexpected behavior.

The Service is provided on an "AS IS" and "AS AVAILABLE" basis, and users assume all risks associated with participation in the Early Access program.

3. Information We Collect

We may collect information including:

• Name, username, display name, and account information;
• Email address and authentication-related information;
• Educational information voluntarily provided by users;
• Lesson progress, achievements, scores, and learning activity;
• Feedback, bug reports, support requests, and communications;
• Device information, browser information, operating system information, and technical diagnostics;
• IP address, log data, and usage analytics;
• Subscription and billing information processed through third-party payment providers (we do not store payment card details directly);
• Cookies essential for authentication, session management, and Service operation. With your consent, we also use third-party analytics cookies (see Section 7 below);
• Friend connections and friend codes used to link users within the platform;
• Information necessary to maintain security, prevent abuse, and operate the Service.

4. How We Use Information

We may use collected information to:

• Provide, operate, and maintain the Service;
• Deliver educational content and learning experiences;
• Personalize lessons and platform functionality;
• Improve platform performance and user experience;
• Analyze usage and identify technical issues;
• Respond to support requests and user feedback;
• Detect abuse, fraud, security threats, or policy violations;
• Develop new features and improvements;
• Comply with legal obligations.

Legal basis for processing (GDPR Article 6):

• Contract performance: processing necessary to provide your account and the learning platform (registration, lesson tracking, progress).
• Consent: analytics cookies (Google Analytics, Microsoft Clarity) are only activated after your explicit consent.
• Legitimate interest: we use analytics data to improve platform stability and educational quality, and AI features to enhance learning. We have assessed that these interests do not override your rights, particularly because analytics data is aggregated and AI features do not process personal identifiers.
• Legal obligation: retention of certain records as required by applicable law.

5. AI Features

Certain features of the Service may utilize artificial intelligence technologies to generate educational content, explanations, recommendations, feedback, hints, assessments, or learning assistance.

AI-generated content is provided for informational and educational purposes only.

Such content may contain inaccuracies, omissions, outdated information, incomplete explanations, or other errors.

Users remain responsible for independently evaluating and verifying information before relying upon it.

AI-generated content should not be considered professional, legal, medical, scientific, educational, or other professional advice.

When you use AI features (such as the AI Teacher or AI help on the contact page), the following information may be sent to our AI provider for processing: your current lesson context, grade level, preferred language, and your question or the content being explained. Your name, email, and other personal identifiers are not sent to the AI provider.

We use OpenRouter (OpenRouter, Inc.) as our AI routing service, which may process requests through third-party language models. OpenRouter's privacy policy is available at openrouter.ai/privacy. We do not use AI to make automated decisions that produce legal or similarly significant effects on users.

6. User Content

Users are solely responsible for any information, content, files, messages, feedback, comments, submissions, or other materials they provide to the Service.

Users represent that they have the necessary rights and permissions to submit such content.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to operate our platform and, with your consent, to understand how you use our Service.

Essential Cookies (always active):

These cookies are necessary for the platform to function and cannot be disabled.

• physo-click-session — authentication and session management (30 days, PhysoClick);
• XSRF-TOKEN — security protection against cross-site request forgery (session, PhysoClick);
• remember_web_* — "Remember me" auto-login functionality (60 days, PhysoClick);
• cookie_consent — stores your cookie preferences (1 year, PhysoClick).

Analytics Cookies (require your consent):

These cookies are only set after you give consent via the cookie banner. They help us understand how visitors interact with the platform. No personal data is sold or shared with advertisers.

• _ga, _ga_*, _gid — page views and usage analytics (up to 2 years, Google Analytics);
• _clid, _clck — session recordings and heatmaps (up to 1 year, Microsoft Clarity).

Managing your preferences:

On your first visit, a cookie banner allows you to accept or reject analytics cookies. You can change your preferences at any time using the "Cookie settings" link in the footer. If your browser sends a Do Not Track signal, analytics cookies are defaulted to off.

You may also manage cookies through your browser settings. Note that disabling essential cookies may prevent the platform from functioning properly.

8. Data Storage and Security

We implement reasonable technical and organizational measures intended to protect user information.

However, no method of electronic transmission, storage, or processing is completely secure.

Accordingly, we cannot guarantee absolute security, availability, or integrity of information stored within the Service.

Users acknowledge and accept these risks when using the Service.

9. Data Retention

We may retain information for as long as reasonably necessary to:

• Provide and improve the Service;
• Maintain user accounts and educational records;
• Comply with legal obligations;
• Resolve disputes;
• Enforce agreements and policies;
• Protect the security and integrity of the Service.

10. Account and Data Management

We reserve the right, at our sole discretion, to suspend, restrict, disable, remove, or terminate accounts, content, educational records, or stored information where reasonably necessary to:

• Protect the Service;
• Investigate abuse or misconduct;
• Enforce policies and agreements;
• Maintain platform security;
• Comply with legal obligations;
• Protect other users or the platform infrastructure.

11. Data Deletion

You may delete your account and all associated data directly from your Profile page. You may also export your data before deletion.

Upon deletion, we will remove your account and personal data immediately, except where retention is required by law or necessary to resolve disputes or enforce our agreements.

12. Children's Privacy

The Service may be used by students, schools, teachers, parents, guardians, and educational institutions.

If required by applicable law, users under the age of majority must use the Service with the consent, supervision, or authorization of a parent, guardian, teacher, school, or educational institution.

Parents, guardians, schools, and educational institutions are responsible for ensuring compliance with applicable laws and obtaining any permissions required for student participation.

Students may optionally add up to two parent or guardian email addresses on their Profile. Each parent email receives a verification link. Verified parent emails may be used in the future to provide parents with access to their child's learning progress. No marketing communications are sent to parent email addresses.

12a. Teacher Access to Student Data

When a student links to a teacher using a Teacher Code, the teacher gains access to the following student data:

• Display name and avatar;
• Grade level;
• Total XP earned and current level;
• Lesson completion history (domains, topics, stars, XP per lesson);
• Achievement badges earned.

Teachers cannot access student email addresses, passwords, parent emails, or detailed answer history. The teacher-student link can be changed by the student at any time by entering a different Teacher Code.

12b. Friends Feature

Users may connect with other users through the Friends feature using a personal friend code or invite link. When two users become friends, each can view the other's:

• Display name and avatar;
• Current level and total XP (students only);
• Achievement badges earned (students only);
• Premium or supporter status.

Friends cannot access each other's email addresses, passwords, grade details, parent emails, lesson answers, or any other account information. Either user can remove the friendship at any time, which immediately revokes access to the above data.

Friend codes are unique identifiers assigned to each user. They do not contain personal information and can be shared at the user's discretion.

12c. Achievement Sharing

Users may generate temporary shareable links to their achievements page. These links:

• Expire after 7 days and cannot be extended;
• Are cryptographically signed and cannot be forged or tampered with;
• Can be viewed by anyone with the link, including users without an account;
• Display only: display name, current level, total XP, lessons completed count, and earned achievement badges.

No email addresses, passwords, grade details, lesson answers, or other personal information are exposed through shared links. Users can generate new links at any time; previously generated links cannot be revoked but will expire naturally.

13. Third-Party Services

The Service may rely on or integrate with third-party providers, including but not limited to:

• Hosting providers;
• Payment processors;
• Authentication providers;
• Analytics providers;
• Artificial intelligence providers;
• Educational and communication services.

We are not responsible for the privacy practices, content, availability, or security of third-party services.

Users should review the policies of such third parties where applicable.

14. Data Loss Disclaimer

To the maximum extent permitted by law, we are not responsible for any loss, corruption, deletion, inaccessibility, unavailability, or modification of:

• User accounts;
• Educational records;
• Lesson progress;
• Achievements;
• Scores;
• Uploaded content;
• Messages;
• User-generated content;
• Any other information stored within the Service.

Users are responsible for maintaining any copies or records they consider important.

15. Limitation of Liability

To the maximum extent permitted by applicable law, the Service is provided on an "AS IS" and "AS AVAILABLE" basis.

We make no warranties, representations, or guarantees regarding:

• Accuracy of educational content;
• Accuracy of AI-generated content;
• Availability of the Service;
• Suitability for any particular purpose;
• Educational outcomes or learning results;
• Continuous, uninterrupted, secure, or error-free operation.

We shall not be liable for any direct, indirect, incidental, consequential, special, exemplary, punitive, or other damages arising from or relating to the use of the Service.

16. International Users

Users are responsible for ensuring that their use of the Service complies with applicable local laws, regulations, and requirements in their jurisdiction.

17. Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access your personal data — use the data export feature in your profile, or contact us;
• Rectify inaccurate data — edit your profile at any time;
• Erase your data — use the account deletion feature in your profile;
• Data portability — download your data in JSON format via your profile;
• Object to processing based on legitimate interest — contact us;
• Withdraw consent for analytics — update your cookie preferences at any time via the "Cookie Settings" link in the footer.

If you do not have an account or cannot log in, you may submit a Subject Access Request through our Contact & Support page. We will verify your identity and respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

18. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant data protection authority within 72 hours of becoming aware of the breach;
• Notify affected users without undue delay if the breach is likely to result in a high risk to their rights and freedoms;
• Document the breach, its effects, and the remedial actions taken.

19. Data Processing Agreement

A summary of our data processing arrangements with third-party subprocessors is available on our Data Processing Agreement page.

20. Changes to This Privacy Policy

We may modify or update this Privacy Policy at any time.

Updated versions become effective upon publication within the Service or on the website.

Continued use of the Service following publication of changes constitutes acceptance of the revised Privacy Policy.

21. Contact

Questions, concerns, feedback, or requests relating to this Privacy Policy may be submitted through the contact methods provided within the Service.

By continuing to use the Service, you acknowledge and agree to the practices described in this Privacy Policy.

← Back home