UK & EU GDPR Policy

IamSelen, trading as FITinAI, operates and designed fitinai.com and is the controller of personal data processed by FITinAI. Email hello@fitinai.com for questions, requests or complaints. Our broader Privacy Policy explains the service’s data practices in more detail.

• We process personal data lawfully, fairly and transparently.
• We collect it for specified purposes and do not use it incompatibly.
• We limit collection to information reasonably needed for the service.
• We take reasonable steps to keep information accurate and up to date.
• We retain information only while it is needed or legally required.
• We use proportionate organisational and technical security measures.

• Accounts: email, authentication and optional profile information used to provide and secure adult-managed accounts.
• Learning: module progress, child first name or nickname, age band, quiz responses, results, certificates and feedback used to deliver learning features.
• AI interactions: prompts, FIA answers, page path and a random session identifier used to provide responses, support safety review and improve the service.
• Communications: newsletter email, status and subscription dates used to send requested updates.
• Technical data: device and usage data collected through optional analytics, plus limited operational logs used for security and error diagnosis.

• Contract: providing account, learning, quiz and certificate features requested by the adult account holder.
• Consent: newsletters, optional analytics and child-data processing where parental authorisation is required.
• Legitimate interests: service security, misuse prevention, child-safety review, technical diagnosis and proportionate improvement of educational content.
• Legal obligation: responding to lawful requests and meeting applicable regulatory duties.

Where we rely on consent, it can be withdrawn without affecting processing that was lawful before withdrawal. Where we rely on legitimate interests, we balance those interests against individual rights and give additional weight to children’s interests.

FITinAI is designed for a parent or guardian to use together with their child, not for a child to use independently. The parent or guardian manages accounts, newsletters, cookie choices, child profiles, quizzes and certificates. Children must not create accounts, join marketing or accept optional analytics themselves. Parents should provide only a child’s first name or nickname and broad age band.

We give particular weight to the child’s best interests, minimise collection, use privacy-protective defaults and explain practices in clear language. Neither adults nor children should enter surnames, school or contact details, precise location, photos, health information or other identifying, sensitive or confidential information into FIA or an AI demo.

Where UK or EU law requires parental authorisation because a child is below the applicable digital-consent age, the parent or guardian must ensure that authorisation is in place. A child’s data-protection rights belong to the child; a parent or guardian may exercise them on the child’s behalf where appropriate. We may verify the requester’s identity and authority. See our Children’s Privacy & COPPA Policy.

We use service providers for hosting, database and authentication, AI responses, email operations, operational error reporting, fonts and consented analytics. AI prompts may be sent through our AI service to a Google Gemini model. Providers receive only the information reasonably needed to perform their service.

Where personal data is transferred outside the UK or European Economic Area, we use an applicable adequacy decision, EU Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, or another legally recognised safeguard. Contact us for further information about the safeguard relevant to a transfer.

Account, child and learning records are retained while the adult-managed account is active or until deletion is requested, unless security, dispute or legal needs require longer retention. Removing a child profile removes its linked attempts, certificates and feedback. Newsletter information is retained until unsubscribe or deletion, with minimal suppression information retained where needed to honour the choice. FIA records, provider logs and backups are removed when no longer reasonably needed under operational and provider retention cycles.

• Access your personal data and receive information about its use.
• Correct inaccurate or incomplete personal data.
• Request erasure where the law provides that right.
• Restrict processing in qualifying circumstances.
• Receive portable data where the portability right applies.
• Object to processing based on legitimate interests.
• Withdraw consent at any time.
• Not be subject to solely automated decisions producing legal or similarly significant effects; FITinAI does not make such decisions.

Email hello@fitinai.com to exercise a right. We may verify your identity and normally respond within one month, subject to lawful extensions for complex or numerous requests.

You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or to the supervisory authority in the EU country where you live, work or believe an infringement occurred.

We assess personal-data incidents and notify the appropriate regulator and affected individuals when required by UK or EU GDPR. Report a suspected incident to hello@fitinai.com.

Read the Privacy Policy and Cookie Policy alongside this policy. We may update this document when the service, providers or applicable law changes. The effective date above identifies the current version.