Privacy and Data Security
Limudi is committed to protecting student and teacher privacy. This guide explains what data we collect, how we use it, and the rights you have over your information.
What Data Limudi Collects
Account Data
- Full name and email address
- Profile photo (if you have one)
- School affiliation and role
- Registration date and last login
Educational Data
- Assignment submissions and drafts
- Grades and teacher feedback
- AI conversation history
- Class enrollment records
Behavioral Data (Authenticity Verification)
Limudi collects typing cadence data to verify that assignments are authentically written by the registered student. This includes:
- Typing patterns: Speed, rhythm, and key-by-key timing
- Editing behavior: Corrections, deletions, and rewrites
- Paste events: Detection of content pasted from outside the editor
- Content progression: How the text developed over the writing session
This data is used only for authenticity scoring and is not shared outside of your school.
Cadence data is collected only while you type in Limudi's writing editor: in an assignment, or in the Writing Warm-Up if your school uses it. It is not collected during AI conversations or in other parts of the platform.
Usage Data
- Pages visited and features used
- Error logs and performance metrics
- Device type and browser version (anonymized)
How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account management | Account data | Contractual necessity |
| Assignment submission | Educational data | Contractual necessity |
| Authenticity verification | Behavioral data | Legitimate educational interest |
| AI writing assistance | Conversation content | Contractual necessity (your school's agreement with Limudi) |
| School reporting | Aggregated educational data | Legitimate institutional interest |
| Platform improvement | Anonymized usage data | Consent |
Your Privacy Rights (GDPR)
If you are located in the European Union or a jurisdiction with similar data protection laws, you have the following rights.
To find these options, open the account menu, choose Settings, then Privacy & Data Settings, and open the Your Data Rights tab.
Right to Access
Get a copy of the personal data Limudi holds about you:
- Go to Settings > Privacy & Data Settings > Your Data Rights
- Click Download everything we hold
- A JSON file downloads right away
The file includes your account details, your submissions with any grades and feedback your teacher has returned, your messages in AI conversations, and your class memberships. For teachers it also lists the assignments you created.
Right to Rectification
Correct inaccurate personal data:
- On your Profile page you can change your Preferred Name and your password
- Your first name, last name and username are marked Read-only there. So is your email, unless it was created for you automatically, in which case you can replace it with your own. To correct a read-only field, ask your school administrator or contact support
Right to Erasure ("Right to Be Forgotten")
Delete your account:
- Go to Settings > Privacy & Data Settings > Your Data Rights
- Click Delete My Account
- Read the warning, enter your password, and confirm
Your personal data is anonymized as soon as you confirm.
Students at a K-12 school do not see this button. The school looks after student accounts, so ask your teacher or school administrator and they can request deletion for you. Teachers need to delete or transfer their assignments before they can delete their account.
Account deletion is permanent and cannot be undone. Download your data first if you want a copy. Grades and submissions shared with your school may be kept in anonymized form.
Right to Data Portability
Click Download for another service on the Your Data Rights tab. You get a JSON file of your work and messages, arranged so another service can read it.
Right to Object
Object to data processing for specific purposes:
- If you are not a student, you can turn Marketing Communications on or off in the How We Use Your Data tab
- There is no AI switch in your own settings. Your school can turn off AI for a student, a class or the whole school. To object to AI processing, ask your school or email privacy@limudi.com
Right to Restrict Processing
Request that we pause processing your data during a dispute:
- Email our Data Protection Officer at privacy@limudi.com
Data Retention
How long Limudi keeps data is described in our Privacy Policy.
Data Security Measures
Limudi uses industry-standard security practices:
- Encryption in transit: All data is transmitted over HTTPS/TLS
- Encryption at rest: Database and file storage are encrypted
- Access controls: Role-based permissions ensure teachers only see their students' data
- Regular security audits: Ongoing security assessments and updates
- Incident response: We notify affected users without undue delay if a data breach affects them
Where Your Data is Stored
Our Privacy Policy lists where Limudi and its service providers store and process data.
Third-Party Data Sharing
Limudi may share data with:
| Third Party | What We Share | Why |
|---|---|---|
| AI providers (OpenAI, Google Gemini, Anthropic, Mistral AI) | Submission content and assignment rubrics | To provide AI features |
| Cloud hosting provider | All data (encrypted) | Infrastructure |
| Email service | Email address only | To send notifications |
We do not sell personal data to advertisers or third parties.
Our agreements with AI providers do not allow them to use your content to train their models.
Parental Consent
Schools collect parental consent where their local law requires it. Teachers and Administrators can download printable consent forms in English, Hebrew and Arabic from Settings > Parental Consent Forms.
Data Breach Notification
In the event of a data breach affecting your personal data:
- Limudi will notify affected users without undue delay
- We will notify the relevant data protection authority within 72 hours
- The notification will describe what data was affected, what we're doing about it, and how to protect yourself
Contact Our Data Protection Officer
For privacy questions, data requests, or complaints:
If you believe we have handled your data incorrectly, you also have the right to lodge a complaint with your national data protection authority.
Related Articles: