Privacy Policy

The Drawing Board company, trading as DanskAI ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Danish language learning platform, available at danskai.co.uk (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our Danish learning platform
• Personalization: To customize your learning experience and track your progress
• Communication: To send you updates, newsletters, and respond to inquiries (with your consent)
• Analytics: To understand usage patterns and improve our services
• Security: To protect against fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations

We use cookies and similar tracking technologies to enhance your experience:

• Essential cookies: Required for authentication, session management, and security. These are set without consent as they are strictly necessary.
• Analytics cookies: Help us understand how you use our service so we can improve it. Only set with your explicit consent via the cookie banner.
• Preference cookies: Remember your language, theme, and other settings. Set after consent or when you save preferences.

When you first visit DanskAI we ask for your consent to non-essential cookies via a banner at the bottom of the page. You may choose "Essential only" to reject analytics and preference cookies, or "Accept all" to enable them. You can withdraw consent at any time by clearing your browser storage or contacting privacy@danskai.co.uk.

We do not sell, trade, or rent your personal information. We may share your information only in these limited circumstances:

• Service Providers (subprocessors): With trusted third-party providers who help us operate our service. Key subprocessors include Supabase (database and auth), OpenAI (AI features - with your consent), Stripe (payments), and Daily.co (video calling). See our full Subprocessor List.
• Legal Requirements: When required by law or to protect our rights
• Business Transfer: In the event of a merger, acquisition, or asset sale
• Consent: With your explicit consent for specific purposes

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure server hosting, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing of your data
• Restriction: Request limitation of processing

To exercise these rights, contact us at the information provided below. We will respond to your request within 30 days.

Your information may be transferred to and processed in countries outside the UK or EEA, including the United States (via Supabase and OpenAI). Where we transfer personal data internationally, we rely on Standard Contractual Clauses approved by the UK ICO or EU Commission, or other recognised transfer mechanisms, to ensure your data receives equivalent protection.

We keep your learning data for as long as you have an account, and no longer than the periods below. Deleting your account erases it.

• Notes, vocabulary, mistakes, progress, results, transcripts and chat history you can see: while you have an account.
• Recordings you add to a note, such as a lesson: 90 days, because they can include other people's voices. The transcript is kept. Recordings you add to "Danish in the wild" are kept until you remove them. Your own voice notes and speaking practice are kept with your account.
• Internal records of AI requests: 12 months.
• AI usage records: 13 months linked to you, then kept only as totals that do not identify you.
• Unused accounts: if you have not used DanskAI for 24 months, we email you, and delete the account 30 days later unless you sign in. This does not apply to accounts provided by a school, or while a subscription is running.
• School accounts: as the school's agreement with us says; by default deleted within 30 days of the agreement ending.
• Records that we carried out a privacy request (for example, a deletion): 5 years.
• Payment records: kept by our payment provider for as long as bookkeeping law requires (5 years in Denmark).

Our Service is not intended for children under 13 years of age for self-service use. We ask for date of birth during account creation or classroom enrollment so we can apply age-appropriate protections. Under-13 self-service accounts are blocked unless and until DanskAI implements a reviewed, compliant school or parent/guardian consent path.

For classroom pilots, teachers or school administrators must confirm parent/guardian or school-authorised consent before inviting or activating 13-17 student accounts. Consent records may include the student's email, date of birth, consenting adult or school official, consent source, verification timestamp, and revocation status. If consent is withdrawn, the student account or school seat is deactivated for the relevant pilot features.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.