Privacy Policy

Lingjo (“we”, “us”, “our”) is a trading name of AureyaTech Ltd and provides learning and assessment tools for teachers and students. We are the data controller for most processing described here. Where we act strictly on behalf of a school/institution under contract, we may act as a data processor.

Registered business name: AureyaTech Ltd. ICO Registration Number: ZC089084. See Section 17 for contact details.

This policy covers personal data processed via Lingjo’s websites, apps, and related services. During our initial launch we focus on private teachers and their invited/linked students.

• Performance of a contract: account access, classroom features, assessment, account administration.
• Legitimate interests: platform security, service improvement, preventing abuse, learning analytics consistent with user expectations.
• Consent: optional communications and non-essential cookies; parental consent for under-13s where required.
• Public task: when we process on behalf of schools fulfilling educational duties.

We do not intentionally collect special category data. If such data is shared inadvertently, we will minimise, delete, or protect it appropriately.

• Operate and secure accounts, classes, and assessments.
• Authenticate users and protect sessions.
• Provide teacher dashboards and student progress tracking.
• Detect/prevent fraud and misuse.
• Improve performance and user experience.
• Provide support and service communications.
• Use aggregated/anonymised data to inform improvements.

We use strictly necessary cookies (e.g., authentication). With your consent, we may use analytics cookies to understand usage. Manage preferences via your browser or in-product controls (where available).

We do not sell personal data. We use vetted service providers under UK GDPR-compliant terms, limited to what’s necessary.

Disclosures may occur where required by law, to protect users, or to defend our legal rights, following due process.

• No direct identifiers by default: we remove or pseudonymise names, emails, IDs before requests.
• Minimum necessary: only the text needed to fulfil a feature (e.g., paragraph of an essay) is sent.
• Provider controls: where available, we disable provider training on your data and request minimal retention.
• Regional processing & safeguards: UK/EU preferred; otherwise adequacy/SCCs with additional measures.
• School/teacher controls: AI features can be disabled or limited on request.

• We retain personal data only as long as necessary for the purposes described or as required by law/contract.
• Teacher deletion: when a private teacher deletes their account, Lingjo deletes the student data linked to that teacher (assignments, feedback, scores, and linkage). The student’s account remains; students may delete their account separately at any time.
• Backups are encrypted and retained for limited periods before secure deletion.

• High-privacy defaults for under-18 users.
• Clear, age-appropriate explanations of settings and features.
• Parental consent for under-13 account creation where required.
• Geolocation/social features off unless strictly needed.

We prefer UK/EU processing and storage. Where transfers/access occur outside the UK/EU, we rely on adequacy regulations or Standard Contractual Clauses with appropriate safeguards.

Under UK GDPR, you can request access, rectification, erasure, restriction, portability, or object to processing. When processing is based on consent, you can withdraw consent at any time. To exercise your rights, contact us via Section 17. Where we act as a processor for a school, we may redirect your request to the controller.

We investigate all personal data incidents. Where required, we notify the ICO within 72 hours and affected users without undue delay if there is a high risk to their rights and freedoms.

We may update this policy to reflect changes in the law, guidance, or our services. We will post updates here and, where appropriate, provide in-app or email notices.