Privacy Policy

IamSelen, trading as FITinAI, operates and designed fitinai.com and is the data controller for FITinAI. Contact us at hello@fitinai.com with privacy questions or requests.

• Newsletter email addresses, subscription status, source and subscription dates.
• Account identifiers, email address, authentication records and optional profile information.
• Learning progress, quiz answers and results, certificate details, feedback, child first name and age band when these features are used through an adult-managed account.
• Questions submitted to FIA, together with its answer, page path and a randomly generated browser session identifier. Voice input is converted to text by your browser’s speech-recognition service; FITinAI receives the resulting text, not an audio recording.
• Device and usage information through Google Analytics only after you consent.

• Contract: to provide adult-managed accounts, learning progress, quizzes and certificates requested by the account holder.
• Consent: to send newsletter updates, use optional analytics, and process child information where parental authorisation is legally required. Consent may be withdrawn at any time.
• Legitimate interests: to secure FITinAI, prevent misuse, review FIA interactions for child safety, diagnose technical errors and improve educational content. Our interests are a safe, reliable and useful service, balanced against users’ rights and the heightened protections children require.
• Legal obligations: to respond to lawful requests, protect rights and comply with applicable law.

FITinAI is parent-led: a parent or guardian should remain involved and use the programme together with their child. Accounts, newsletters, cookie choices and child profiles are for parents or guardians to manage. Children under 13 must not create an account, subscribe to marketing or accept analytics themselves. Parents should enter only a child’s first name or nickname and age band. Neither adults nor children should put surnames, school details, contact details, addresses, precise locations, photos, health information or other identifying, sensitive or confidential information into FIA or the safe AI demos.

If United States law applies, we handle personal information from children under 13 in accordance with the Children’s Online Privacy Protection Act (COPPA). Where verifiable parental consent is required, we will obtain it before collecting personal information unless a legal exception applies. A parent may review, correct or delete their child’s information, revoke consent, or prevent further collection by emailing us. We do not require more information than is reasonably necessary, sell children’s information, use it for behavioural advertising or allow it to be publicly posted.

If you believe a child provided personal information without appropriate parental involvement, email us with the subject “Child privacy request”. We will investigate promptly, stop further collection where appropriate, and delete the information where required. Read our dedicated Children’s Privacy & COPPA Policy.

Where the UK GDPR applies, IamSelen acts as controller and processes personal data under the UK GDPR and Data Protection Act 2018. Where the EU GDPR applies, we process personal data under the EU GDPR. We apply data minimisation, privacy by default, age-appropriate transparency and children’s best interests. A parent or guardian controls the account and data choices, but data-protection rights belong to the child and may be exercised on their behalf when appropriate.

Our legal bases are: performance of a contract when providing requested adult-managed account and learning features; consent for newsletters, optional analytics and processing that requires parental authorisation; legitimate interests in securing and improving the service where those interests do not override individual rights; and compliance with legal obligations. We do not use solely automated decision-making that produces legal or similarly significant effects. Read our dedicated UK & EU GDPR Policy.

Questions entered into FIA and the safe AI demos, together with recent conversation context where applicable, are sent through our AI service provider to a Google Gemini model to generate a response. FIA questions and answers are also stored for safety review and service improvement; safe-demo conversations are not intentionally saved by FITinAI after the response is returned. Do not enter personal, confidential or sensitive information. We also use providers for website hosting, database, authentication, email operations, operational error reporting, Google-hosted fonts and, only with consent, Google Analytics.

These providers may receive technical information such as an IP address, browser details, request time, page path and technical error details. They act under their own terms or our service arrangements. We do not sell personal information or use children’s information for behavioural advertising.

Information is available only to authorised administrators and providers that need it to operate, secure or support FITinAI, or where disclosure is required by law. Some providers may process information outside the UK or European Economic Area. Where required, we rely on an adequacy decision, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, or another recognised safeguard. You may contact us for more information about the safeguard used.

We keep account, child, learning, quiz, certificate and feedback records while the adult-managed account remains active or until deletion is requested, unless a longer period is needed for security, disputes or law. Removing a child profile also removes its linked attempts, certificates and feedback. Newsletter records are kept until you unsubscribe or ask for deletion, with minimal suppression information retained where needed to honour that choice. FIA questions are reviewed and removed when no longer reasonably needed for safety and improvement. Provider logs and backups may remain for a limited period under provider retention cycles.

Under UK and EU data-protection law, where applicable, you may ask to access, correct or erase your personal data; restrict its use; receive portable data; or object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. You may also complain to the UK Information Commissioner’s Office if you are in the UK, or to the data-protection authority in the EU country where you live, work or believe an infringement occurred.

Email hello@fitinai.com to exercise a right, unsubscribe from the newsletter, or request account closure. We may need to verify your identity and, for a child’s request, the requester’s parental or guardian authority. We normally respond within one month where UK or EU law applies.

You can contact the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or contact the data-protection authority in the EU country where you live or work. If a personal-data breach is likely to create a high risk to affected people, we will notify them without undue delay and notify the appropriate regulator within the period required by law.

Report a suspected privacy or security incident to hello@fitinai.com. Do not include unnecessary personal information.

See our Cookie Policy for browser storage and analytics details. We use access controls and technical safeguards, but no online service can guarantee absolute security.

We may update this policy as the service or law changes. The effective date above shows the latest revision.