Back to home
Legal

Privacy Policy

Eduzuma is a worksheet studio for educators. This policy explains what we collect when you create word searches, reading sheets, and math PDFs — and what we never do with your data.

Last updated: 11 July 2026

Short version: we collect only what's needed to run your account and tools. We never sell your data. Student content you type into worksheets stays yours. AI prompts are not used to train public models. You can export or delete your account anytime.

1. Who we are

Eduzuma ("we", "us") operates the Eduzuma worksheet studio — 49+ tools for puzzles, English, and math with optional AI assistance. We are the data controller for information processed through our services. Contact privacy@eduzuma.app for privacy requests.

2. Information we collect

Account data

  • Email address, hashed password, and optional display name.
  • Plan tier, AI word balance, billing cycle, and school team membership.
  • Payment metadata from Paddle (we never store full card numbers).

Worksheet content

  • Words, clues, prompts, and text you enter into any Eduzuma tool.
  • Saved favourites, recent tools, and download activity.
  • School team shared assets (titles and metadata you save to the library).

Automatic data

  • Browser, device type, and approximate region (from IP) for security and fraud prevention.
  • Hashed IP for one-time free-trial eligibility (see our free plan policy).
  • Tool usage events and error logs to fix bugs and improve features.
  • AI word transaction history (credits used, boosters purchased).

3. How we use your information

  • Provide worksheet tools, AI generation, PDF downloads, and account features.
  • Process subscriptions and booster purchases through Paddle.
  • Enforce plan limits (daily sheets, watermarks, word credits) fairly.
  • Link school team invites to the correct educator accounts.
  • Send transactional email (receipts, password resets, security alerts).
  • Improve tools based on aggregate, anonymised usage patterns.
  • Comply with law and enforce our Terms of Service.

4. AI processing

When you use AI-assisted tools, your prompt is sent to our AI provider (currently Google Gemini) to generate worksheet content. We use API configurations where your prompts are not used to train third-party models. Prompts are retained only as long as needed to deliver results and maintain safety, then removed from our systems within 30 days.

5. Children

Eduzuma is for educators aged 18+. Students do not create accounts. Worksheets you make may be used with children of any age, but we do not knowingly collect personal data from children under 13. Contact us to request deletion if you believe a child submitted personal information.

6. Service providers

We share data only with processors that help us operate Eduzuma, under strict agreements:

  • Hosting: Vercel, Cloudflare, Supabase (EU/US regions).
  • Payments: Paddle.com (merchant of record, PCI-compliant).
  • AI: Google Gemini API for worksheet generation.
  • Email: Transactional email delivery for account messages.

We never sell personal data and do not use advertising trackers.

7. Security

TLS encryption in transit, encrypted storage at rest, hashed passwords, row-level database security, and role-based admin access. No system is perfect, but we treat educator trust as a core responsibility.

8. Retention

  • Active accounts: data kept while your account exists.
  • Deleted accounts: profile removed within 30 days; billing records kept 7 years for tax law.
  • Free-grant IP hashes: kept to prevent trial abuse; no raw IP stored long-term.
  • Logs: typically 30 days.

9. Your rights

Depending on your location (GDPR, CCPA, and similar laws), you may:

  • Access, correct, or delete your personal data.
  • Export your data (available from account settings).
  • Object to certain processing or withdraw consent.
  • Complain to your local data-protection authority.

Email privacy@eduzuma.app — we respond within 30 days.

10. Cookies & local storage

We use essential cookies and local storage for login sessions, plan caching (sheet limits/watermarks), and preferences. No third-party ad cookies. Clearing browser data logs you out but does not delete your cloud account.

11. International transfers

Educators use Eduzuma globally. Cross-border transfers use Standard Contractual Clauses and equivalent safeguards where required.

12. Policy updates

Material changes are announced by email or in-app notice at least 30 days before taking effect. The date at the top of this page shows the current version.

13. Contact

Privacy: privacy@eduzuma.app. General: contact page. Also see Terms and Refund Policy.