Privacy Policy

Overview

Weyd ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our learning strategy platform.

By using Weyd, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect your email address and any profile information you choose to provide. If you sign up using a third-party service (like Google), we receive basic profile information from that service.

Conversation Data

We store your conversations with Weyd to provide personalized learning recommendations and maintain continuity across sessions. This includes messages you send, learning plans we generate, and progress you report.

Progress Data

When you log progress or upload screenshots from learning tools (like Duolingo, Anki, Simply Piano, or Yousician), we store the extracted data to help track your learning journey. We do not access your accounts on these third-party tools.

Institutional Data

When you are enrolled in a class or organization, we also collect: your enrollment status, cohort assignment, assessment results (baseline and exit assessments), and your relationship to the educational institution.

Your instructor or organization administrator can see: your name, email, learning plans, practice data (minutes, skills, streaks), assessment scores, and AI coaching conversations.

Student Data in Educational Settings

When Weyd is used by a school or educational institution, student data is treated as "education records" under the Family Educational Rights and Privacy Act (FERPA) for U.S. institutions.

We collect only data necessary for the educational service. For students under 13, the school provides consent for data collection under COPPA's school consent exception.

Usage Data

We collect information about how you interact with Weyd, including features used, time spent, and actions taken. This helps us improve the product.

How We Use Your Information

We use your information to:

• Provide personalized learning strategy recommendations
• Track your progress across learning tools
• Maintain and improve our services
• Send important account and service updates
• Process payments and manage subscriptions
• Respond to your requests and support inquiries

We do not sell your personal information to third parties.

Data Sharing Within Organizations

When you join a class or organization, specific data becomes visible to your instructor and organization administrators. This includes: your name, email, learning plans, progress data (practice minutes, skills, streaks, activity dates), skill assessments, CEFR benchmark scores, and AI coaching conversations.

This data sharing is necessary to provide the educational service and enable instructor oversight. Teachers can export student progress data as CSV for institutional reporting purposes.

Students are notified of this data sharing at the time of enrollment.

Organization administrators may have access to aggregated and individual student data for their institution.

AI and Data Processing

Weyd uses AI (powered by Anthropic's Claude) to analyze your goals, provide recommendations, and generate learning plans. Your conversation data is sent to Anthropic's API for processing but is not used to train their models.

We may use aggregated, anonymized data to improve our AI prompts and overall service quality. This data cannot be used to identify individual users.

Data Storage and Security

Your data is stored securely using Supabase, which provides encryption at rest and in transit. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, or destruction.

Payment information is processed securely by Stripe and is never stored on our servers.

Data Retention

We retain your data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

For institutional accounts, student data is retained for the duration of enrollment plus 30 days for data portability. Upon institutional request, student data will be deleted within 30 days.

Education records are not retained longer than necessary to provide the educational service unless required by law.

You can request deletion of your account and data at any time from your account settings or by contacting us.

Children's Privacy & COPPA Compliance

Weyd does not knowingly collect personal information from children under 13 without verifiable parental consent or school authorization.

School Context

When used by a school, the school may consent to data collection on behalf of parents under COPPA's school consent exception (16 CFR § 312.5(c)(3)). Schools must: (1) provide parents with notice of Weyd's data practices, (2) ensure consent is obtained as required by law, and (3) allow parents to review and request deletion of their child's data through the school.

Non-School Context

Individual accounts require users to be at least 13 years old. If we learn we have collected data from a child under 13 without proper consent, we will delete it promptly.

Data Minimization

For under-13 users, we collect only data necessary for the educational service. We do not serve behavioral advertising to any users and do not sell children's data.

Parental Rights

Parents may contact their child's school or contact us directly at privacy@weyd.io to: review their child's personal information, request deletion, or withdraw consent for further collection.

Retention

Student data collected in educational settings is retained only as long as the student's enrollment in the institution is active, plus 30 days for data portability, unless the institution requests otherwise.

FERPA Compliance

When Weyd is used by an educational institution in the United States, student data may constitute "education records" under the Family Educational Rights and Privacy Act (FERPA).

Weyd acts as a "school official" under FERPA (34 CFR § 99.31(a)(1)), with a legitimate educational interest in student data necessary to provide the contracted service.

We will not disclose education records to third parties except: (1) as directed by the educational institution, (2) as required by law, or (3) to our sub-processors for service delivery (listed in the Third-Party Services section below).

Educational institutions retain ownership and control of education records. Institutions may request access to, correction of, or deletion of student education records at any time.

In the event of a data breach involving education records, Weyd will notify the affected educational institution within 72 hours.

Third-Party Services

We use the following third-party services:

• Supabase — Database and authentication
• Anthropic — AI processing (Claude)
• Stripe — Payment processing
• Vercel — Hosting and infrastructure
• Resend — Email delivery

Each of these services has their own privacy policy governing how they handle your data.

When used in educational settings, student data shared with these sub-processors is governed by our obligations under FERPA and COPPA. Anthropic processes AI coaching conversations; in institutional settings, this data is treated as education records. Anthropic's API terms state that API data is not used for model training.

International Data Transfers

Weyd's services are hosted in the United States (via Vercel and Supabase). If you are located outside the U.S., your data is transferred to and processed in the United States.

For users in the European Union or European Economic Area, data transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission.

For institutional customers, specific data transfer terms can be included in a Data Processing Agreement (DPA) upon request.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

To exercise these rights, contact us at privacy@weyd.io or use the account settings in your dashboard.

Cookies

We use essential cookies to maintain your session and remember your preferences. We do not use tracking cookies or third-party advertising cookies.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by email or through the service. Your continued use of Weyd after changes become effective constitutes acceptance of the revised policy.

Contact Us

If you have questions about this privacy policy or our data practices, contact us at:

Email: privacy@weyd.io