Child Safety & Privacy

1. Our commitment under UK law

Bot Geniuses Limited (Company No. 15715951), trading as Go2LearnAI, is a UK company. We design our service around the safety and privacy of children first. We comply with:

• The UK Age Appropriate Design Code (the Children's Code), enforced by the ICO
• The Online Safety Act 2023 (OSA) — child-safety duties
• UK GDPR and the Data Protection Act 2018
• Department for Education (DfE) guidance, including Keeping Children Safe in Education, for school use

Children's best interests are the primary consideration in how the service is designed — privacy is the default, not a setting a parent has to find and switch on.

2. Age assurance & parental authority

A child never signs up alone. An adult — a parent, guardian or teacher — creates and holds the account. Before any child uses the service we apply age-appropriate assurance and obtain verifiable parental authority, with consent at the UK boundaries:

• Under 13: full parental account control and oversight
• 13–15 and 16–17: age-banded experience, with the adult still the account holder and payer
• Email verification of the adult and confirmation of their relationship to the child
• A clear, plain-language explanation of what is collected and why, before anything is collected

3. Information we collect from children

We practise data minimisation — we collect only what is needed to teach, and nothing more:

4. What we never do

• We never show advertising to children
• We never sell or trade a family's data
• We never train our AI on a child's data without a lawful basis and consent
• We never collect precise location, photos, or social-media accounts
• We are not a companion: the tutor teaches a subject and is designed to stop, not to court an emotional bond

5. Safeguarding

Every interaction passes through an always-on child-safety layer that cannot be turned off. Where a child shows signs of distress, we follow a tiered safeguarding pathway:

• At home, the guardian is the safeguarding recipient
• In a school, signals are routed to the school's Designated Safeguarding Lead (DSL), with time-bound routing
• No child-to-child messaging; no open social features
• Guardian- and teacher-set usage limits and break reminders that a child cannot bypass

6. Your rights (UK GDPR)

As a parent, guardian or the responsible adult, you can exercise the data-subject rights on the child's behalf:

• Access — review the child's personal information
• Rectification — correct anything that is wrong
• Erasure — delete the child's account and data
• Restriction and objection — limit or stop further processing
• Portability — download a copy of the child's data
• Withdraw consent at any time, and lodge a complaint

You can complain to us directly, and you also have the right to complain to the Information Commissioner's Office (ICO), the UK data-protection regulator.

7. Data security & residency

• Each learner's data is sealed in a per-learner encrypted vault
• Encryption in transit and at rest; strict, role-based access controls
• Tenant isolation, with data residency honoured to the strictest applicable standard
• Deletion is a real cryptographic erasure (crypto-shred), not just a flag

8. US families — COPPA & FERPA overlay

For families and schools in the United States, the protections above are supplemented by the US framework. We apply the Children's Online Privacy Protection Act (COPPA) for children under 13, and, where a US school deploys Go2LearnAI, the relevant FERPA provisions for education records. These are an overlay on top of — never a replacement for — our UK-first child-safety standard.

9. Contact

• Data Protection Officer: dpo@go2learnai.com
• Safety & privacy queries: our contact form
• Company: Bot Geniuses Limited, registered in England and Wales (Company No. 15715951)

We respond to rights requests within one month, as required by UK GDPR.