Last updated: 22 October 2026
The data controller for personal data collected through this Service is Robert Yates, trading as LearnWithOtti, a sole trader based in England. If you have any questions about this Privacy Policy or how we handle your data, contact us at rob@learnwithotti.co.uk.
This policy covers the personal data we collect when you use LearnWithOtti, including access to Otti, our AI tutor. LearnWithOtti currently supports A-Level students across the subjects and exam boards listed as available on our website. This policy applies to all users of the Service regardless of your chosen A-Level subject and exam board.
It also covers the limited contact information we hold about schools and colleges we email about our free teaching resources — see section 15.
The Service is available to users aged 16 and over. We do not knowingly collect data from users under 16. If we discover that a user under 16 has created an account, we will immediately suspend and delete that account and any associated data. See our Age Verification & Children’s Privacy Statement for full details.
When you register, we collect your full name, email address, chosen subject and exam board, sign-up method, and account creation date.
As you use the Service, we record your messages to Otti and Otti’s responses, assessment submissions and scores, topics and sessions accessed, token usage per session, and session timestamps.
We collect your IP address, browser type and version, device type, and the pages you visit within the Service. This data is used for security, performance monitoring, and analytics.
Payments are processed by Stripe. We store only your Stripe customer ID — we never hold your card number, CVV, or full billing details. See Stripe’s privacy policy at stripe.com/gb/privacy.
We do not collect gender, ethnicity, or other demographic data. We collect your date of birth at registration and retain it as part of your account so that we can verify our 16+ age requirement and, where relevant, apply the Otti Tutors safeguards described in section 5.5 below.
If you photograph a handwritten answer for Otti Assess to mark, we store the photo in our database provider’s storage (Supabase, in the EU). We use it only to mark your answer: we send it to Anthropic, which powers Otti, so that Otti can mark it, and we keep it with your assessment record. We do not use your photos to train AI models. We keep your photos with your assessment record while your account is open. When your account is deleted, they are permanently deleted. The legal basis is the performance of our contract with you.
Otti Classroom is our free set of classroom tools for teachers. It does not need an account. When it is used, we collect:
Class lists entered into the utility tools stay in your browser and are never sent to us. The legal basis for this processing is our legitimate interests in providing the tools.
We process your account and interaction data to operate your account, deliver tutoring sessions, track your progress, and manage your subscription. The legal basis is the performance of a contract between you and us.
We use anonymised and aggregated interaction data to identify common learning gaps, improve Otti’s responses, and develop new features. The legal basis is our legitimate interests in improving the Service.
We may use anonymised interaction data to produce educational content, blog posts, or SEO materials. No personal data is ever included in publicly published content.
If you have an account, we will send you transactional emails (such as account confirmation and password resets) as necessary for the performance of your contract. Payment receipts and billing emails come from Stripe. Emails to schools and colleges about our free resources are covered separately in section 15. If you sign up for the Otti Memo, see section 17.
We only send you marketing emails, like the Otti Memo, if you have clearly said yes to them. There is one exception. If you start buying an Otti plan but don’t finish, we may send you one reminder about Otti plans a couple of days later. We only do this if you didn’t tick “Don’t email me about Otti plans or offers” when you signed up, and we never send it to a parent or carer. You can stop it with the unsubscribe link in the email, or by replying to it. Either way, you’ll still get emails about your account. We do this because it’s in our legitimate interests to remind you once about something you started, and it doesn’t override your rights because you can stop it at any time.
LearnWithOtti’s AI tutor, Otti, is available on a self-declared age basis, as described in our Age Verification & Children’s Privacy Statement. Where a student instead books a live session with a human tutor through Otti Tutors, we apply stronger safeguards because a real person is interacting with the student directly.
Otti Tutors sessions may be recorded (audio and/or video). Sessions take place in a classroom provided by Lessonspace, which makes and holds the recording; we keep a text transcript of the session in our own database. We use recordings and transcripts for safeguarding purposes — so that a session can be reviewed if a concern is ever raised — and, in anonymised form, to build up a picture of how a subject is being taught so we can improve tutor training and the quality of the Service. Anonymised recordings and transcripts cannot reasonably be linked back to any individual student or tutor.
Routine recordings and transcripts are scheduled for deletion 90 days after they are made, and are deleted at our next monthly clean-up after that date. A recording flagged for a safeguarding concern is kept until the concern is resolved and any legal requirement to keep it has ended.
Where a student is under 18, we require verifiable consent from a parent or guardian before that student can be recorded during human tutoring. We collect the guardian’s full name, email address, and relationship to the student, and we keep a record of when and how that consent was given (or, for students aged 18 and over, a record of the student’s own consent). A guardian can withdraw consent at any time by contacting rob@learnwithotti.co.uk.
The legal basis for recording and using this data is consent (for the recording itself) and our legitimate interest in operating a safe tutoring service and improving how we teach the subject.
If a student asks a parent or guardian to pay for their plan, we email that person once with a payment link. We use their email address only for that request and, if they choose to pay, for the resulting Stripe payment. It is never added to any marketing list. If they don’t pay, we delete their email address 30 days after the link expires.
Where data has been fully anonymised so that it cannot reasonably be linked back to any individual, it is no longer personal data under UK GDPR. Anonymised data may be used for any lawful purpose, including AI model improvement, analytics, SEO, and educational research, without restriction.
Our database and authentication is hosted by Supabase (EU — Ireland). Supabase is GDPR-compliant and processes data under a Data Processing Agreement with us.
Otti’s AI responses are powered by Anthropic’s Claude models. We transmit the content of your messages to Anthropic to generate responses. We do not transmit your name, email, or other personally identifying information to Anthropic. See Anthropic’s privacy policy at anthropic.com/privacy.
Stripe processes your subscription payments. Their privacy policy is available at stripe.com/gb/privacy.
Transactional emails (such as account confirmation) and, where you have signed up for them, the Otti Memo and other marketing emails are sent via Resend. Resend processes only the email address and message content necessary to deliver these emails. Their privacy policy is available at resend.com/legal/privacy-policy.
The Service is hosted on Vercel. Vercel is GDPR-compliant and processes data under a Data Processing Agreement with us.
We use Google Analytics to understand how users navigate the Service. Google Analytics is only loaded with your explicit consent via the cookie banner.
Emails to schools and colleges are sent from our Google Workspace account using Mailmeteor, a mail-merge tool. These services process the recipient’s email address and the message content only to deliver the email. Open tracking and per-recipient click tracking are switched off.
With your consent via the cookie banner, we use PostHog (EU hosting) to understand how visitors use our pages, such as which pages lead teachers to sign up for the Otti Memo. We do not record your screen or keystrokes, and we never send PostHog your name or email address.
Live Otti Tutors sessions take place in a classroom provided by Lessonspace, which is used only when a tutoring session is joined. Lessonspace processes the session, including its audio and video recording, on our behalf. See section 5.5 for how long recordings are kept.
Your data is primarily stored in the EU (Ireland) via Supabase. Some of our third-party processors (Anthropic, Vercel) may process data in the United States. Where data is transferred outside the UK or EU, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as required by UK GDPR.
| Data | How long we keep it |
|---|---|
| Account data | While your account is open; deleted within 30 days of a deletion request |
| Parent or guardian payment requests | If they pay: kept with the billing records. If they don’t: the email address is deleted 30 days after the link expires (see section 5.6) |
| Chat and assessment history | While your account is open. When your account is deleted, your messages (including questions asked in Otti Ask), written answers, photos and feedback are deleted. We keep anonymous usage records (such as topics studied, scores, timings and usage) that can no longer be linked to you. |
| Photos of handwritten answers | While your account is open; deleted with your account |
| Otti Tutors recordings and transcripts | Deleted at our monthly clean-up after 90 days; recordings flagged for a safeguarding concern are kept until the concern is resolved and any legal requirement has ended (see section 5.5) |
| Marketing contacts (such as the Otti Memo) | While you are subscribed, and up to 2 years after you unsubscribe; after that only a one-way hashed suppression record is kept (see section 17). If you delete your account, we keep only a scrambled (hashed) copy of your email address so we never email you again. If you ever gave marketing consent, we also keep the record of that consent (when and how it was given) as evidence that we had it. |
| Technical logs | 90 days |
| Billing records | 7 years, as required by UK tax law |
| School outreach records | 2 years after our last contact with the school; if you opt out, we keep only your email address and the date (see section 15) |
If you ask us to delete your account, we remove your personal data within 30 days of your request, except where this table or the law requires us to keep something for longer.
All data in transit is encrypted via HTTPS. Access to personal data is restricted to authorised personnel only. Our database uses Supabase Row Level Security (RLS) to enforce data access controls at the database level, and we conduct periodic audits of RLS policies to ensure controls remain correctly configured. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware.
You have the right to:
To exercise any of these rights, contact us at rob@learnwithotti.co.uk. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
We use essential cookies for authentication and, with your consent, analytics cookies via Google Analytics and PostHog. You can manage your cookie preferences at any time via the “Cookie settings” link in the footer. For full details, see our Cookie Policy.
The Service is for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. We do not create profiles on users under 18 for commercial or advertising purposes. For users under 18, we apply additional data minimisation measures in line with the ICO’s Children’s Code. See our Age Verification & Children’s Privacy Statement.
We may update this Privacy Policy from time to time. We will notify you of material changes by email before the changes take effect. The “Last updated” date at the top of this page indicates when the policy was last revised.
We email state-funded schools and colleges in England to tell their Economics departments about our free teaching resources. This section explains how we handle the contact details involved.
The school or college’s name, address, telephone number and website; the contact email address published for it, which is usually a general office address but sometimes names a member of staff; the head’s job title (not their name); publicly available information about the institution, such as whether it enters students for A-Level Economics; and a record of when we emailed, whether the email was delivered, and any reply or opt-out.
Department for Education establishment records, and Department for Education school and college performance data published under the Open Government Licence. We may also look at a school’s own public website to see whether it teaches Economics. We record only the result and the page address — never staff names or contact details.
Our lawful basis is legitimate interests: letting schools know about free, relevant resources for their students. We have assessed this against the interests of the staff involved. The emails go to addresses schools publish for exactly this kind of contact, are sent infrequently, and are easy to stop. We do not sell or share this information.
Reply to any of our emails, or email rob@learnwithotti.co.uk, and we will stop straight away. We keep only your email address and the date you opted out, so that you are never contacted again. Your other rights are set out in section 11.
For any privacy-related questions or to exercise your rights, contact us at rob@learnwithotti.co.uk.
The Otti Memo is a free weekly email for A-Level Economics teachers. You do not need an account to receive it.
What we hold: your email address; optionally your school’s name and the exam board you teach; a record of your consent (the exact wording you agreed to, the date and time, and the IP address and browser used); and a record of the emails we send you and whether they were delivered, bounced or marked as spam.
Why: our lawful basis is your consent. We ask you to confirm your email address before we send anything.
Unsubscribing: every email has a one-click unsubscribe link, and you can also email rob@learnwithotti.co.uk. If you unsubscribe, we stop straight away. So that we never email you again by mistake, we keep a scrambled (one-way hashed) version of your email address that cannot be turned back into the address.
How long we keep it: while you are subscribed, and for up to 2 years after you unsubscribe so we can show we had your permission. After that it is anonymised, apart from the scrambled suppression record above.
Otti Masterclasses are free online lessons for A-Level students. You can read the teaching without giving us anything. To get your written answers marked, you give us your email address. This section explains what happens to your data when you do. The data controller is Robert Yates, trading as LearnWithOtti (see section 1).
We do not ask for your name, school or date of birth. Please don’t put your name in your answers.
We do not profile you, and we do not make any decisions about you that have legal or similarly significant effects. You can ask for a human check of any AI mark, and Rob Yates, a Senior Examiner, will review it within 7 days.
Your written answers, together with the question, are sent to Anthropic’s Claude, which marks them against a marking guide calibrated by an examiner. Your email address and any ID linked to you are not sent. Under Anthropic’s commercial terms, your answers are not used to train its models and are not kept by default. The exception is content flagged by Anthropic’s automated safety systems, which may be kept for up to 2 years.
Vercel, Resend and Anthropic are based in the US. These transfers are covered by the UK Addendum to the EU Standard Contractual Clauses, and for Resend also by the UK Extension to the EU-US Data Privacy Framework. Our emails are sent with open and click tracking turned off.
You can ask to see the data we hold about you, correct it, or delete it. You can also object to how we use it, and withdraw your consent at any time. To do any of these, email rob@learnwithotti.co.uk. Section 11 has more detail. If you are not happy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.