Legal

Privacy Notice

Written for schools and parents, not just lawyers. This notice explains exactly what ARASH stores, for how long, and who can see it.

Last updated: January 2026

1. Who we are

ARASH (Adaptive Responsive AI for Speaking Hub) is an English speaking practice and assessment platform for junior high school. Schools are the data controllers for student records; we act as the processor on their instruction.

2. What we collect

Account data: name, email, role, school, grade level, language and timezone.

Learning data: task attempts, transcripts, six-dimension scores, feedback and progress history.

Voice data: audio recordings submitted by the student for analysis.

Technical data: device type, browser, and error diagnostics needed to keep the service reliable.

3. How we use it

To transcribe and analyse speaking attempts and generate feedback.

To show progress to the student, their teacher and — where consent allows — their parent or guardian.

To operate, secure and improve the platform, including calibrating scoring against teacher ratings.

4. Consent for minors

AI analysis of a minor's voice requires parental or guardian consent. Consent is scoped, recorded and revocable at any time from the parent portal. Withdrawing consent stops further AI analysis and removes the affected data from research datasets.

5. Retention

Voice recordings are kept for a short window tied to the consent scope, then deleted. Transcripts and scores are retained for the school's stated academic retention period. Account data is deleted or anonymised when the school ends its agreement.

6. Sharing

We do not sell personal data. AI processing is performed through contracted providers under data-processing agreements, and research datasets are pseudonymised before release.

7. Security

Access is deny-by-default: role, tenant, ownership, class membership and consent scope all have to agree. Data is encrypted in transit and at rest, and every access to student records is logged.

8. Your rights

Students, parents and staff may request access, correction, export or deletion of personal data. Requests from a school community are handled through the school administrator; you can also write to us directly.

9. Contact

Questions about this notice: support@arash.example.