Privacy Policy
This policy explains what information Infinity Learning collects, how we use it, and the choices you have.
Last updated: 24 Oct 2026
1. Who we are
Infinity Learning ("we", "us", "the Platform") is an education-management platform used by schools, teachers, students and parents.
Because the Platform supports two different ways of using it, the responsibility for your personal data depends on how you joined:
If you joined through a school
Your school is the data controller. Infinity Learning acts as a data processor on the school's behalf. Requests to access, correct or delete your data should go to your school admin first.
If you joined independently
If you registered without a school (or under the "Independent / AIVERSE" tier), Infinity Learning is the data controller for your account and is responsible for its protection.
2. What we collect
We collect only what is necessary to run the Platform:
Account & identity
- Full name, email address, phone number
- Password (stored only as a secure Argon2id hash — never in plain text)
- Role (student, teacher, or administrator)
- School affiliation (if any)
Student profile (for students)
- Age, gender, current class, academic year
- School board, city, state
- Parent / guardian name, phone, email, occupation
- Interests (self-declared)
Teacher profile (for teachers)
- Expert field, years of experience, additional expertise
- Short biography (optional)
Activity on the Platform
- Lessons viewed and progress through them
- Attendance records (marked by teachers)
- Activity registrations and results
- Certificates earned
- Counseling requests and counselor notes
- Notifications received
- Uploaded files (profile pictures, lesson attachments)
Technical data
- IP address, browser type, session identifiers
- Audit logs of administrative actions
3. Why we collect it
- To create and manage your account
- To deliver lessons, activities and certificates
- To keep attendance and progress records for the school
- To enable counseling between students and teachers
- To send you transactional emails (OTP, password resets, approvals, notifications)
- To protect against fraud and abuse
- To improve the Platform
4. Who can see your information
If you joined through a school
- Your school admin — sees all information about you within the school
- Your teachers — see your name, class, attendance, submissions and results in batches they teach
- Yourself — can see your own profile, lessons, attendance, certificates and counseling
- Infinity Learning platform administrators — access only for technical support and security
- Your parent/guardian — if you're a student, we may share your progress with them via email summaries
If you joined independently
Only you and Infinity Learning platform administrators can see your information. No school or teacher has access.
We do not sell your personal data. We do not share it with advertisers.
5. Children's data
Many of our users are students under 18. We take this responsibility seriously.
- Students under 18 must register under a school or with verifiable parental/guardian consent
- We collect only the minimum information needed to deliver the educational service
- We do not use children's data for behavioural advertising or tracking
- Parents and guardians may request access to, correction of, or deletion of their child's data by contacting us or the school admin
- Schools act as the primary guardian of their students' educational data
6. How long we keep your data
- Active accounts: as long as your account remains active
- Suspended or rejected accounts: retained for a reasonable period to prevent re-registration abuse
- Attendance and academic records: retained for the duration of the school relationship plus a reasonable period afterwards, as required for educational record-keeping
- Audit logs: retained for a minimum of 12 months for security and accountability purposes
- Certificates: retained permanently as they are part of a student's academic record
When data is no longer needed, we securely delete or anonymise it.
7. Your rights
Subject to applicable law, you have the right to:
- Access — ask what data we hold about you
- Correct — fix inaccurate data
- Delete — request deletion of your account and data (subject to legal retention requirements)
- Object — object to certain processing
- Portability — request a copy of your data in a portable format
- Withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise these rights, email privacy@infintylearning.net or contact your school admin. We aim to respond within 30 days.
8. Third-party services
We use the following third-party services to operate the Platform:
- Hosting provider — for servers and storage
- Email delivery (SMTP) — to send transactional emails
- SMS provider — to send OTP codes (when configured)
- Database infrastructure — for storing structured data
Each provider is bound by its own privacy and security commitments.
9. Security
We protect your data with:
- Encrypted transport (HTTPS) across the Platform
- Argon2id password hashing
- CSRF protection on all forms
- Rate limiting on sensitive endpoints
- Audit logging of administrative actions
- Role-based access control
No system is perfectly secure. If you believe your account has been compromised, email privacy@infintylearning.net immediately.
10. Cookies & sessions
We use a single session cookie to keep you logged in. It is HTTP-only, secure (when served over HTTPS), and does not track you across other websites. We do not use third-party advertising cookies.
11. Changes to this policy
We may update this policy from time to time. Material changes will be announced on the Platform. Continued use after changes means you accept the updated policy.
12. Contact us
For any privacy-related question:
Email: privacy@infintylearning.net
Website: infintylearning.net