Card details stay with Stripe
YourLessonHub does not receive or store card numbers, bank details or security codes.
Privacy, security
and recordings.
Plain-language information about what YourLessonHub holds, why it is needed and how private lesson information is protected.
Private lessons stay private
Private lesson and account records are not shared with advertisers. Optional public-page marketing measurement is explained below.
Teacher-controlled publication
Teachers check and publish lesson follow-up. Optional Lesson Coach responses are AI-generated, not individually teacher-approved.
Optional public website analytics
From 23 October 2026, if you accept optional cookies, we use Google Analytics 4 to understand visits to our signed-out public marketing and teacher-signup pages, campaign sources and selected signup, demo and invitation clicks. Google receives technical information such as your IP address, browser/device information, cookie identifiers, approved public page/referrer URLs and campaign tags. This is not anonymous browsing. We do not send names, email addresses, form entries, account identifiers or private lesson content. Private workspaces, lesson hubs, login pages, lesson demos and the outcome-confirmation page do not load Google Analytics.
Automatic enhanced measurement, Google Signals and advertising personalisation are off. We do not link this property to Google Ads or send completed registration, trial or purchase events to Google Analytics in this initial setup; those outcomes remain in our restricted business-event reporting and consented Meta measurement described below. Analytics cookies named _ga and _ga_… are configured for up to 180 days, with renewal on activity. User/event-level Analytics retention is two months; aggregated reports may remain longer. See how Google uses information from sites using its services. Processing may occur outside the UK.
The existing Accept/Reject optional-cookie choices control both Analytics and Meta. We ask again when adding Google Analytics rather than treating an earlier Meta-only acceptance as permission for Google. Withdrawal disables future Analytics collection and removes accessible Analytics cookies, but cannot undo information already sent. Necessary service use is unaffected.
Lesson hub activity
When a signed-in pupil account opens its lesson hub or a published lesson, we record the day for that studio’s pupil profile. The authorised teacher can see a seven-day overview and the last 30 days. These records contain dates, not visit times, time spent, or a page-by-page browsing history. They are retained with the pupil’s teaching record and removed if that pupil record is deleted. A visit may be made by the pupil or someone using their account; it does not confirm practice or lesson completion.
Who is responsible for the information?
YourLessonHub is operated by YourLessonHub Ltd, which is the data controller for platform accounts, security, support and subscription administration. For privacy enquiries, use our contact form. Our registered company details are available in the Terms of Service.
The teaching studio is responsible for deciding what pupil and lesson information belongs in its teaching records. YourLessonHub provides the private platform and processes that teaching information to deliver the service.
Teachers must use learning information appropriately, tell pupils or parents how lessons are recorded and obtain any consent required for their circumstances.
Only what the service needs.
Name, adult email or pupil login name, password in securely hashed form, studio and account-holder relationships, membership and access status.
Lesson notes and summaries, practice plans, teacher feedback, attached recordings, files and links, and pupil work submitted when a teacher enables it.
Necessary Zoom account identifiers, encrypted connection tokens and meeting-summary references when a teacher connects Zoom.
Invitations, publication status, AI permission and age confirmations, saved Lesson Coach activity, support messages and limited usage, technical or security records needed to operate and protect the service.
Your card details go directly to Stripe.
Subscription checkout and payment management are handled on Stripe’s secure pages. Card numbers, bank details and card security codes go directly to Stripe and are not received or stored by YourLessonHub.
YourLessonHub keeps billing-administration information needed for membership and access, including Stripe customer and subscription references, the chosen plan and billing period, subscription status and relevant billing or access dates. Teacher and pupil memberships are separate; see the current plan and trial terms.
Teacher Companion recordings
Teacher Companion is our iPhone recording app for eligible teacher accounts. It can record an in-person lesson, microphone audio beside an online lesson, or a short teacher recap. The app stores your restricted sign-in token in the iPhone Keychain and retrieves the pupil names and identifiers needed to associate a recording with your private studio. These are not the phone’s address-book contacts.
Recordings are saved on your phone and sent to YourLessonHub with the selected pupil association, recording time and a random capture reference. YourLessonHub sends the audio to Cloudflare Workers AI to generate a transcript. The audio may itself contain voices, names or other personal information spoken in the room; recording a teacher’s microphone does not guarantee that only the teacher is audible. Pupil account records are not automatically attached to the Cloudflare transcription request. Teachers must inform people being recorded and obtain any permission required for their circumstances.
Local and server audio are temporary recovery copies. Original audio and prepared upload files stay on the phone until the complete private-queue receipt has been saved. Successfully transcribed server sections have their temporary encrypted audio removed after an encrypted transcript is durable. Incomplete or failed server uploads are cleaned up after seven days without further activity. A failed delivery can leave the phone’s original audio available for recovery; it is not automatically deleted merely because processing failed. Completed phone history can be dismissed without deleting the studio record.
The transcript and lesson are separate records. The complete transcript is saved privately in the studio. The release app can automatically request a private lesson draft after transcription, using the pupil and subject selected for the recording. This sends the teaching text, chosen subject, pupil level and studio teaching preferences to OpenAI as described below. If preparation fails or eligibility needs attention, the transcript remains available for review and retry. The teacher must explicitly publish before the pupil can see the lesson. Removing audio, withdrawing new transcription permission or dismissing a phone receipt does not erase existing studio transcripts, drafts or published lessons. Ask through our contact page about data deletion and applicable retention.
The release app’s AI processing permission screen explains Cloudflare transcription and OpenAI draft preparation before new uploads and provides a withdrawal choice. Withdrawal stops new submissions from that phone and further queued processing associated with it; requests already sent to a provider cannot be recalled. This permission is distinct from a studio’s recording responsibilities and from optional pupil Lesson Coach permission. The current invited pilot and release availability are explained on the Teacher Companion page.
Cloudflare’s service terms and Workers AI data-usage information describe provider processing. We do not promise immediate provider deletion or UK-only processing. Deleting our temporary files does not establish those provider guarantees. The native companion contains no advertising or marketing-analytics SDK. If you open a public website page from it, that page’s separate cookie choices still apply.
How Lesson Coach uses AI.
With eligible Enhanced access and adult AI permission, Test me, Explain this, Practice this and Flashcards use relevant parts of the published, teacher-approved lesson as their source. The request to OpenAI can include lesson subject, learning level, selected topic or action and, where needed, recent questions and answer classifications. A pseudonymous pupil safety identifier is also sent. The application removes known names and common contact details from this study material where possible; that is a safeguard, not a guarantee of anonymity. Do not add personal or sensitive information.
These tools are designed to stay within the published lesson, not retrieve private source transcripts, browse the web or provide open chat. Their responses are not individually checked or approved by the teacher and can be wrong. Ask the teacher about uncertain guidance.
Saved study records. YourLessonHub saves lesson evidence snapshots, generated questions and explanations, practice routines, Flashcards, selected multiple-choice answers, answer feedback and session/revision state so the tools can resume and reuse material. Permission records include the adult account reference, confirmation times, age-13-plus confirmation and permission version. Limited AI usage records include operation, model, token/cost information and failure categories for allowances, reliability and spending controls.
Writing Check is different. Where available, the pupil’s written response, selected task and relevant published material are sent to OpenAI for brief feedback. YourLessonHub does not save the response or feedback as part of the lesson record. Limited usage information is kept to enforce the two-check limit and spending controls. This does not apply to an ordinary pupil work submission: files and notes deliberately submitted to the teacher are saved for that purpose.
Saved Coach records are not automatically deleted when permission is withdrawn. To ask about access, export or deletion, use the contact form; requests are assessed alongside the applicable record-retention responsibilities. This notice does not promise a fixed Coach-record deletion period that has not yet been established.
What is sent for a lesson draft?
Teacher notes or the incoming lesson-summary text are sent to OpenAI with the subject, drafting preferences and the pupil’s learning level where recorded. Forwarded summary emails are queued and matched locally without an OpenAI classification request. AI draft preparation starts only after the pupil’s account is accepted and eligibility is established through adult registration or a recorded parent or guardian 13-plus confirmation. These inputs can contain a first name, other names, learning observations or any other personal information included in the supplied text. We do not promise that incoming material is anonymous or that names are automatically removed before draft preparation.
The draft generator does not automatically attach the pupil’s account record, stored name, account ID, email address, parent details or age. A name or personal detail already present in the submitted text is still included. Pupil matching and remembered recurring-meeting associations are maintained separately within YourLessonHub. Teachers must keep submissions relevant to teaching and leave out unnecessary personal or sensitive details; removing unrelated conversation from the finished draft does not prevent the original input from being processed.
OpenAI processing and retention.
We use the OpenAI API, not a pupil’s personal ChatGPT account. OpenAI states that API data is not used to train its models by default unless a customer opts in. That provider policy is not a claim that every production account setting has been independently audited.
Our live OpenAI project currently uses standard retention, not Zero Data Retention. OpenAI’s standard controls may retain prompts and responses for abuse monitoring, normally for up to 30 days subject to its stated exceptions, and may store responses or other application state depending on the API feature and request settings. Not saving a response in YourLessonHub, or disabling API response storage, is not the same as Zero Data Retention. We do not claim that OpenAI immediately deletes all submitted content. See OpenAI’s API data controls.
OpenAI’s under-18 guidance requires Zero Data Retention before its services process personal data of children under 13 or the applicable age of digital consent. We have not established that safeguard for this project. A parent-managed Basic account, parental permission or this notice does not override that provider condition. Teachers must not submit under-13 personal information for OpenAI processing through the service while this safeguard is unresolved. See OpenAI’s under-18 guidance. Our AI Terms of Use explain the feature boundaries and responsibilities.
Original summaries and published lessons are different records.
We retain the incoming source text in the teacher-private intake record and a source-summary copy with the lesson. Group lessons can also hold source-summary copies. These records support source review, preparation and related teaching tools. There is currently no automatic deletion of source-summary text 30 days after publication. Deleting source text from YourLessonHub would not undo earlier OpenAI processing or automatically delete provider-held copies. Contact us about source-record deletion; the general retention and backup rules below apply.
Product help and human support.
Your submitted help question may be sent to OpenAI to select relevant approved guides. The assistant does not retrieve private lessons or account records. Do not enter pupil details, lesson content or passwords. Help chat history is kept in the current page, not automatically saved as a ticket.
If you choose to contact support, your submitted contact details and message are saved as an encrypted private support ticket and may be emailed to support. Access to the ticket queue is restricted to platform support administrators. The widget conversation is attached only if you choose to include it. A saved ticket does not itself prove delivery to an email inbox.
The raw material stays teacher-private.
Incoming summaries, transcripts and draft material are not automatically shown to pupils. They remain in the teacher workspace while the teacher confirms the pupil and prepares the follow-up. Uploaded recordings and resources are stored privately and require an authorised account.
AI output is a suggested first draft, not an automated teaching decision. The teacher must check it before publication and can edit, discard or withdraw lesson content.
Kept only while there is a reason to keep it.
Account and lesson information is retained while it is needed to provide the lesson record, support the teaching studio, manage access, investigate security or meet legal obligations. Uploaded lesson files and recordings are not automatically removed solely because of their age. Studios share one file allowance across the reusable Library, lesson attachments and pupil work: 6 GB on Basic or 11 GB on Pro, with optional paid storage packs. Exceeding the allowance blocks further uploads but does not itself delete existing files. Teachers can review and remove attachments; independently saved pupil copies remain subject to their own access and retention rules. See the Terms of Service for the file rules.
When a trial or subscription ends, pupil portal access ends after the access period shown in the billing area. Before then, pupils can view, download or print material available to them. Ending access does not automatically erase the studio’s appropriate historical teaching record.
Deletion requests are assessed against the teaching studio’s record responsibilities and any legal or security reason for retention. Where information is deleted from the live service, a residual copy may remain in a protected backup until that backup is overwritten through the normal backup cycle; it is not restored for ordinary use. Teachers can review lesson attachments in Manage storage and reusable files in the Library. Adult pupil account holders can check personal collection usage and request export or removal assistance. Backup retention and account-closure rules remain separate from ordinary file cleanup.
Your personal lesson collection
We keep a pupil-owned record of published lesson content and eligible hosted teacher files within the pupil’s storage allowance. It can remain available independently of the teacher’s account or ordinary teacher cleanup. It does not include private drafts, raw intake material or pupil work submissions. Shared files may use one privately stored object with separate authorised records; removing one record does not delete a file still required by another authorised record.
Adult account holders manage membership and see aggregate storage usage, without receiving access to a child’s private lesson content. Managed child logins do not have storage management or deletion controls. Contact support for help with export or removal of saved copies. After pupil membership ends, saved copies enter a 30-day export period; scheduled removal waits for an account-holder notice and at least 30 days after that notice. Renewal before removal retains them. Explicit lesson withdrawal and required privacy, safety or rights removal can override ordinary retention. External Zoom and YouTube links remain controlled by their providers.
Private by design.
- Separate studio records and role-based access controls.
- Pupils can access only their own published lessons.
- Drafts and original intake material remain teacher-only.
- Uploaded lesson files are kept in private storage and served only after authorisation.
- Zoom access and refresh tokens are encrypted at rest.
- Signed webhooks are checked before Zoom or Stripe events are accepted.
- Passwords are stored as secure hashes rather than readable passwords.
No online service can promise absolute security. Suspected loss, misuse or unauthorised access should be reported through the Contact page immediately.
A 13-plus service with adult-managed accounts.
YourLessonHub is for pupils aged 13 or over on all plans, including Basic. At registration, the parent or guardian confirms for a managed pupil; an adult learner identifies themselves as an adult when registering. For a managed pupil, we record the confirmation time and the confirming adult account, not a date of birth or identity document. This is a declaration, not independent proof of age. The recorded declaration is reused across teaching studios for the same pupil account. Existing adult learners are not asked to confirm again. For managed pupils, an existing recorded parent or guardian 13-plus confirmation is reused, including one previously given for Lesson Coach. Only managed pupils without a recorded confirmation need the parent or guardian to confirm once in My account.
Incoming summaries may wait privately before acceptance and age confirmation. Pupil matching and remembered meeting associations are kept, but new AI draft preparation and pupil lesson access wait for confirmation. Do not tick the box for an under-13 pupil; contact support about existing records or membership instead.
For a parent-managed pupil, the adult accepts the invitation, uses the adult email/password for billing and account settings, and creates a separate pupil username/password for My lessons. The pupil login cannot change billing or AI permissions. The parent’s account-management role does not automatically provide access to the pupil’s private lesson content. Adult learners manage their own account.
Lesson Coach currently requires an account user aged 13 or over, Enhanced access and adult AI permission. A new Enhanced checkout or upgrade asks the adult for separate optional AI permission before Stripe. The age declaration already recorded for the pupil is reused. Existing Enhanced users without permission can use Finish setting up Lesson Coach or My account → Lesson Coach · AI study permissions. We record the adult’s confirmation, not independent proof of the pupil’s age. Do not confirm 13-plus for a younger pupil: parental permission does not currently enable under-13 Lesson Coach.
The adult can withdraw permission in My account; future Coach access is disabled and active sessions are ended. Withdrawal does not cancel the paid membership, erase saved study records or undo processing already performed. Ask support about deletion separately. The 13-plus access boundary does not by itself establish completion of every other privacy or child-safety review.
Teachers must explain any recording or AI processing of lesson material, obtain any permission or consent required for their circumstances, and avoid unnecessary sensitive information. Lesson Coach permission is not permission for a teacher to record a lesson, nor a substitute for the studio’s wider data-protection responsibilities.
Ask, correct or raise a concern.
Delete your account: sign in and use the account deletion page, also linked from Teacher Companion’s account menu. Confirm with your current password; you do not need to email support to initiate deletion. We process requests manually, normally within one calendar month, and provide confirmation. This covers your account and associated personal data, with a review of studio ownership, pupil relationships, hosted files, integrations and subscriptions. Independent pupil accounts and other studios are not automatically erased. Any records that must lawfully remain are explained in the completion notice. A studio archive is not account deletion.
You can ask what personal information is held about you, request correction, raise an objection or ask for deletion or restriction where applicable. Some rights depend on why information is being used and whether the teaching studio must retain a record.
Start through the Contact page. We will identify whether YourLessonHub or the relevant teaching studio needs to respond. UK users may also complain to the Information Commissioner’s Office.
Kept under review as the service develops.
This notice identifies the current operator and describes the service as it operates now. The lawful-basis assessment, retention schedule, international-transfer information and subprocessor record should receive an appropriate UK data-protection review as the pilot broadens.