Privacy Policy — Brain Biscuit

1. Who We Are

Brain Biscuit Learning is an online Danish school. This policy explains what personal data we collect, why we collect it, and what rights you have over it.

2. Data We Collect

Account details (name, email), student details (name, age, time zone, level), scheduling preferences, learning progress, and payment records. Card details are handled by our payment provider and never stored on our servers.

3. Why We Use It

To create and manage your account, match students to classes, deliver live and recorded lessons, track progress and certificates, issue invoices, and send service emails about your classes.

4. Children's Data

Accounts are created and managed by a parent or guardian. We only collect the minimum information needed to place a child in the right class and keep parents informed.

5. Sharing

We share data only with the providers needed to run the school — hosting, database, video delivery, email and payments. We never sell personal data.

6. Storage and Security

Data is stored securely, access is restricted to your own account, and invoices and documents are encrypted. We strongly recommend enabling two-factor authentication on your account.

7. Your Rights

You can request access to, correction of, or deletion of your personal data at any time. Deleting your account removes your personal data, except records we must keep for accounting purposes.

8. Contact

Questions about this policy can be sent to jn@brainbiscuitlearning.com.