Privacy Policy

Effective Date: July 17, 2026

Gogy is a curriculum tool for teachers. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

Summary

• The Gogy platform is used only by teachers. Students do not create accounts, log in, or interact with the Gogy platform in any way.
• We do not collect, store, or process any student data. Teachers type instructional topics (e.g., "photosynthesis"), never student names, grades, IDs, or any other student information.
• We do not sell your data, ever. We do not use your data for targeted advertising or to build marketing profiles.
• Your inputs are not used to train AI models. We have no AI model of our own, and our AI providers do not train on your inputs.
• Your account and lesson data are stored in the United States. Limited operational logs are processed by a monitoring provider in the European Union.

1. Who uses Gogy, and who does not

Gogy is a teacher-facing tool. The only people who hold accounts and use the platform are teachers.

Students never interact with the Gogy platform. They do not create accounts, log in, submit information, or use the platform in any form. A student's only contact with Gogy is receiving a printed handout that their teacher chose to use. Because of this:

• We do not collect, store, or process student personal information of any kind.
• We do not collect, store, or process student education records as defined by the Family Educational Rights and Privacy Act (FERPA).
• We do not collect directory information (such as student names, addresses, or grade levels).
• We perform no monitoring, tracking, or surveillance of students.

If you believe any student information has reached us, contact us at [email protected] and we will delete it.

2. Information we collect

We collect only what we need to run the service. We collect three categories of information.

2.1 Information you provide

• Account information: your name, email address, state of residence, and years teaching.
• School information (optional): the name and location of your school or district and the grade levels and subjects you teach.
• Topic inputs: the grade, subject, and instructional topics you type to generate a lesson (e.g., "the water cycle"). These are subject-matter topics, not personal information.
• Lesson edits: any changes you make to a generated lesson are saved to your account.
• Communications: messages you send us (support requests, feedback).

2.2 Information from Google or Microsoft Sign-In

By signing in with Google or Microsoft, we receive your name, the email address on your account, your profile picture (if available), and a unique account identifier used to recognize your account. We never receive your password, and we do not access anything in your account beyond what is needed to create and manage your Gogy account.

2.3 Information collected automatically

When you use Gogy, we automatically collect limited technical information:

• IP address and approximate (city/region-level) location
• Browser type and version, device type, and operating system
• Pages visited, actions taken, and timestamps
• Cookies and similar technologies (see Section 7)
• Session activity, including recordings of your interactions with the platform (such as clicks and navigation), collected through our analytics provider to understand and improve usage.

2.4 Information we do not collect

Gogy does not collect any of the following from anyone:

• Student personal information or education records (of any kind)
• Government-issued identification numbers
• Biometric identifiers (fingerprints, voiceprints, retina/iris patterns, facial geometry, genetic data)
• Financial account numbers or full payment card numbers (payments are handled by Stripe — see Section 6)

3. How we use information

We use the information above to:

• Create, authenticate, and manage your account
• Generate the lessons you request and save the lessons and edits in your account
• Provide support and respond to your messages
• Send you account, security, and product-update notifications
• Send you marketing or promotional emails only where you have not opted out (you can opt out of marketing at any time — see Section 8)
• Understand how teachers use Gogy so we can improve it (using the analytics described in Section 7)
• Maintain the security and integrity of the service and detect and prevent fraud or abuse
• Comply with our legal obligations
• Enforce our Terms of Service, including our usage limits and the individual-educator license (Terms Section 3), and investigate suspected account sharing or use on behalf of other educators

We do not:

• Sell your personal information
• Use your information for targeted or cross-context behavioral advertising
• Build profiles of you for marketing, advertising, or any non-educational purpose
• Use your inputs to train AI models (see Section 5)

4. How lessons and inputs are handled

When you generate a lesson, your topic input is sent from Gogy's servers to our AI providers, either through OpenRouter or directly, which return text and images. Gogy assembles these into a finished lesson and returns it to you. A full description of this flow, including every provider involved, is in our AI Transparency document.

• Your topic inputs are not used to train any AI model. Gogy has no model of its own, and our AI providers do not use your inputs to train theirs. Providers process your inputs to generate the requested output and for safety and abuse monitoring, and may retain them for a limited period for those purposes, consistent with each provider's API terms, or longer where required by law. We also use an AI monitoring service, Langfuse, to track the quality and reliability of our AI features. Langfuse retains the prompts and responses exchanged with our AI providers — including your topic and the date and time of the request, but not your name or email. These traces are disconnected from your account identity and are retained indefinitely for troubleshooting and quality control.
• We retain the original generated copy of every lesson in our lesson library detached from the teacher who generated it. We use the de-identified copies to operate and improve the service. We will never attempt to re-identify de-identified data, and we will never connect it back to your identity once it has been de-identified. Any de-identification follows recognized standards.
• Your edits stay yours. Any changes you make to a lesson are saved in your account.

5. Artificial intelligence and your data

Gogy uses AI to generate lesson materials. We want to be clear about what that does and does not mean for your data:

• We use third-party AI providers — Anthropic, OpenAI, Google Gemini, and Nomic — typically accessed through OpenRouter. We do not operate our own AI model.
• No student data is ever sent to any AI provider. Only your curriculum topic inputs are.
• Your inputs are not used to train any AI model, ours or our providers'.
• We do not share data for advertising, for monetary or other compensation, or for AI model training.

The full AI Transparency document describes the models, the data flow, our quality controls, and the limitations of AI-generated content.

6. How we share information

We share information only in these limited situations. We never sell your personal information.

6.1 Sub-processors

We use a limited set of trusted service providers ("sub-processors") to run Gogy. Each receives only the information needed for its function and is contractually required to protect it and use it only as we direct.

We will update this list when our sub-processors change. Where a change involves the AI providers used to generate lessons, we will also notify registered users as described in our Terms.

6.2 Legal requirements and compelled disclosure

We may disclose information if required by law, court order, subpoena, or governmental authority, or where we believe in good faith it is necessary to protect the rights, property, or safety of Gogy, our users, or others. If we receive a compelled request (such as a subpoena or court order) for data, we will notify the user and/or their school or district before disclosing, unless we are legally prohibited from doing so.

6.3 Business transfers and change of control

If Gogy is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We will give you notice by email and on the platform. Your data-deletion rights (Section 9) continue to apply.

7. Cookies and analytics

We use cookies and similar technologies for three purposes:

• Essential cookies — required for the platform to function, including sign-in and session management.
• Analytics cookies — to understand how teachers use Gogy so we can improve it. This includes session replay, which records your on-screen interactions so we can diagnose issues and improve usability. This analytics data is not used for advertising and is not sold or shared for cross-context behavioral advertising.
• Preference cookies — to remember your settings.

You can control cookies through your browser settings. Disabling some cookies may affect functionality, including staying signed in.

8. Your rights and choices

You can exercise the following rights regarding your information:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we fix inaccurate or incomplete data.
• Deletion — request deletion of your account and associated data, including analytics.
• Export / portability — request a machine-readable export of your data.
• Opt out of marketing — unsubscribe from any marketing email (every marketing email includes an unsubscribe link), or email us. You will still receive essential account and security messages.
• Withdraw consent — where processing is based on consent.

To exercise any of these, email [email protected]. If we decline a request you make under this section, we will tell you why. You may appeal that decision by replying to our response or emailing [email protected], and we will respond in writing within 45 days.

9. Data retention and deletion

We keep your personal information only as long as we need it:

• While your account is active, we retain your account data, your saved lessons, and your edits.
• Deleting your account. You can delete your account at any time in your profile settings. When you do:
  • Your saved lessons, edits, and lesson materials are permanently deleted. Download any lessons you want to keep first. You keep the right to use lessons you have already downloaded (see Terms Section 4.2), but we no longer store them for you.
  • Shared links stop working immediately, including for people you shared them with.
  • Your teaching profile is deleted (state, grades, subjects, years teaching).
  • Your sign-in connections are removed and all active sessions are ended. Google or Microsoft receives no notice; we simply discard the connection on our side.
  • Your name, email address, and profile picture are erased from our records.
• What we keep after deletion:
  • De-identified lesson copies. The original generated copy of each lesson in our lesson library (Section 4), which was never linked to your identity.
  • Usage records, disconnected from your identity. We keep records of how much lesson generation an account performed to prevent abuse of the service. After deletion these records are no longer connected to your name or email.
  • Your analytics profile and session recordings in our analytics provider (Mixpanel). See Section 8 for requesting deletion of this data.
  • Operational records. Error reports and security logs age out of our providers' systems on their retention schedules. AI-quality traces (Section 4) are retained indefinitely, but contain only your topic inputs and timestamps, disconnected from your name and email.
  • Legal obligations. We may retain limited information longer where required by law (for example, tax or billing records) or to resolve disputes and enforce our agreements.

Deleting your account is permanent.

10. How we protect information

We use technical and organizational measures appropriate to the sensitivity of the data we hold:

• Encryption in transit using TLS 1.2 or higher (all traffic runs over HTTPS).
• Encryption at rest for stored data.
• Access controls limiting internal access to authorized personnel only, under confidentiality obligations.
• Account and lesson data stored within the United States; limited operational logs processed in the EU (see Section 12).

No system is perfectly secure, and we cannot guarantee absolute security. But our data footprint is deliberately small — no student data and minimal teacher data — which limits exposure by design.

If a data breach affects your personal information, we will notify affected users without undue delay after confirming the breach, unless a law enforcement agency requests a delay or applicable law requires otherwise. Where we cannot yet provide full details, we will tell you what we know and follow up as our investigation progresses. Our security contact is [email protected].

11. Children's privacy

The Gogy platform is a tool for teachers and other adult educators. It is not directed to children, and children do not use it.

• Students never access the Gogy platform — no accounts, no logins, no interaction with the platform.
• We do not knowingly collect personal information from anyone under 18.
• Although Gogy's generated lessons serve grades 3–8, the platform itself is designed for, marketed to, and used exclusively by teachers. (A fuller analysis of why Gogy is "directed to teachers" rather than "directed to children" under the FTC's multifactor test is included in our AI Transparency document.)

If you believe a child has provided us information, contact us at [email protected] and we will delete it.

12. Where your data is stored

Gogy account and lesson data are stored and processed in the United States. Limited operational and diagnostic logs — such as IP addresses and error data used for monitoring and reliability — are processed by our logging provider (Better Stack) in the European Union, which offers a comparable level of data protection.

We are a U.S. company serving U.S. educators. We do not currently target users in the European Union or other regions with separate data-transfer requirements.

13. Third-party links

Gogy may link to third-party sites or services. We are not responsible for their privacy practices. Please review their policies before sharing information with them.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version here with a new effective date. Your continued use of Gogy after changes take effect constitutes acceptance of the revised policy.

15. Contact us

For questions, concerns, or requests about this policy or your data, email [email protected].

© 2026 Gogy Lesson PBC

www.gogylesson.com