Loading your session...

Aller au contenu principal

Privacy Policy

Last Updated: December 31, 2025

In Plain Language

We respect your privacy and your children's privacy. Here's the essential:

  • β€’ Minimal data: We only collect what's necessary (name, birth month/year, email)
  • β€’ No selling: We NEVER sell your data to third parties
  • β€’ Parental control: Parents can view and delete their children's data
  • β€’ Security: All data is encrypted and protected
  • β€’ No advertising: No targeted advertising for minors
  • β€’ Right to be forgotten: You can request complete deletion at any time

1. Information We Collect

In brief

We collect your name, birth month and year, email, and learning activity. That's it!

1.1 Information You Provide Directly

Data CollectedWhyRequired?
Full nameTo identify you on the platform and allow teachers to recognize youβœ“ Yes
UsernameTo log into your accountβœ“ Yes
Birth month and yearTo determine age-appropriate permissionsβœ“ Yes
Email (14-17 years)For password recovery and notifications⚠️ Optional
Email (18+ years)For communication and account managementβœ“ Yes
Parental email (< 18 years)For approval, notifications, and account managementβœ“ Yes
PasswordTo secure your accountβœ“ Yes

Payment Data

Important: Correctia NEVER collects or stores your banking or credit card information.

Payments are processed entirely by Stripe, our PCI-DSS certified payment processor. Stripe collects and secures your payment data according to the strictest banking standards.

Correctia only receives a payment confirmation (without seeing your banking information).

1.2 Automatically Collected Information

When you use Correctia, we automatically collect:

  • Activity data: Exercises you complete, your scores, time spent
  • Technical data: Device type, browser, IP address

1.3 Temporary Processing (OCR and Audio Transcription)

Photos and Audio Files - Processing Without Storage

If you upload a photo of text or an audio file:

  • The file is temporarily sent to our servers (Google Cloud Canada)
  • Text is extracted (OCR) or transcribed (audio β†’ text)
  • Only the extracted TEXT is kept
  • The original photo/audio is DELETED immediately after processing (< 60 seconds)

Result: We never store your photos or audio files. Only the text extracted from them.

Important for Parents

We NEVER STORE:

  • ☐ Full physical address
  • ☐ Phone number
  • ☐ Precise geographic location
  • ☐ Uploaded photos or videos (temporarily processed for OCR/audio transcription, then immediately deleted)
  • ☐ Uploaded audio files (transcribed to text, then immediately deleted)
  • ☐ Social insurance number
  • ☐ Banking card information (managed by Stripe, never by Correctia)

2. How We Use Your Data

In brief

Your data is only used to operate the learning platform and send you important notifications.

2.1 Educational Use

  • ☐ Create and manage your account
  • ☐ Allow you to play learning activities
  • ☐ Track your progress and generate statistics
  • ☐ Enable teachers to create adapted activities
  • ☐ Improve exercise quality

2.2 Communication

  • ☐ Service emails: Registration confirmation, password recovery
  • ☐ Transaction emails: Top-up confirmation, receipts
  • ☐ Security emails: Suspicious activity alert, password change
  • ☐ Weekly reports (parents): Usage statistics (optional)

Advertising

We send NO advertising and do not share your data for marketing purposes.

3. Location and Data Sovereignty

In brief

Your data is stored in Canada (Quebec). Only certain AI analyses are processed in the United States, but your raw data stays here.

3.1 Data Storage

All your personal data is stored on servers located in Canada, primarily in Quebec.

Data TypeStorage Location
Account informationπŸ‡¨πŸ‡¦ Quebec, Canada
Activity dataπŸ‡¨πŸ‡¦ Quebec, Canada
Learning historyπŸ‡¨πŸ‡¦ Quebec, Canada
Uploaded photos/texts (OCR)πŸ‡¨πŸ‡¦ Quebec, Canada
Payment dataπŸ‡¨πŸ‡¦ Stripe Canada (PCI-DSS certified)

Data Sovereignty

Your personal data remains under Canadian and Quebec jurisdiction, ensuring maximum protection under Canadian privacy laws.

3.2 AI Inference Processing

For certain features using artificial intelligence, some processing is performed in the United States via our AI partners:

  • Anthropic (creator of Claude)
  • Google Gemini

Important to Understand

What is sent to the United States:

  • AI chatbot queries ("Create" feature, 18+ only)
  • Questions asked to AI to generate activities
  • Necessary context to respond to your requests

What STAYS in Canada:

  • [πŸ‡¨πŸ‡¦] All your personal data (name, email, date of birth)
  • [πŸ‡¨πŸ‡¦] Your complete learning history
  • [πŸ‡¨πŸ‡¦] Uploaded photos and documents
  • [πŸ‡¨πŸ‡¦] OCR transcription (text recognition on images)
  • [πŸ‡¨πŸ‡¦] Payment data

3.3 Protection Guarantees

For processing performed in the United States, we have implemented:

  • [πŸ”’] End-to-end encryption during transmission
  • [πŸ”’] Standard contractual clauses (SCC) with our AI partners
  • [πŸ”’] No permanent storage of queries in the United States
  • [πŸ”’] Anonymization of queries (no name/email sent)
  • [πŸ”’] GDPR compliance for international transfers

Why Some AI Processing in the United States?

Cutting-edge AI models (like Anthropic's Claude and Google's Gemini) require massive infrastructure currently available primarily in the United States. We are working to repatriate this processing to Canada as soon as technology permits.

4. Data Sharing

In brief

We NEVER sell your data. We only share it with our technical service providers (hosting, payment) who are bound by confidentiality.

4.1 Who Do We Share With?

ProviderServiceData Shared
StripePayment processingEmail, transaction amount
Google CloudServer hosting (Canada)All data (encrypted, stored in Quebec)
Anthropic / Google GeminiAI inferences ("Create" chatbot, 18+ only)Chatbot queries (anonymized, processed in US, not stored)

4.2 When Do We Share?

  • ☐ With your explicit consent
  • ☐ To comply with a legal obligation
  • ☐ To protect our rights or your safety
  • ☐ NEVER for advertising or marketing
  • ☐ NEVER sold to third parties

5. Protection of Minors (< 18 years)

In brief

We comply with COPPA and GDPR laws. Parents control minors' accounts.

5.1 Children Under 14

  • β˜‘ Parental approval required before account activation
  • β˜‘ Parent notified of any changes (password, etc.)
  • β˜‘ Password recovery sent only to parent
  • β˜‘ No direct payment access (parent only)
  • β˜‘ No personal email collection
  • ☐ No AI chatbot access ("Create" feature)

5.2 Teens 14-17 Years

  • β˜‘ Parental approval required after registration
  • β˜‘ Parent notified of important changes
  • β˜‘ Optional personal email for recovery
  • β˜‘ Terms acceptance by the teen themselves
  • β˜‘ Weekly report to parent (optional)
  • ☐ No AI chatbot access
  • ☐ No direct payment access

5.3 Parents' Rights

Parents of children under 18 can:

  • β˜‘ View their child's data (via info@correctia.ai)
  • β˜‘ Request correction of inaccurate data
  • β˜‘ Request complete account deletion
  • β˜‘ Temporarily suspend the account
  • β˜‘ Reset password
  • β˜‘ Receive weekly activity reports
  • β˜‘ Revoke their consent at any time

Transition at 18

When a user turns 18 (based on their birth month and year), their account is automatically upgraded with all adult permissions. The parent stops receiving notifications.

6. Data Security

In brief

We use industry best practices to protect your data: encryption, secure servers, restricted access.

6.1 Technical Measures

  • HTTPS encryption: All communications are encrypted
  • Hashed passwords: We never know your password
  • Secure servers: Hosted in certified data centers
  • Regular backups: Your data is backed up daily
  • Intrusion detection: 24/7 monitoring of suspicious activities

6.2 Organizational Measures

  • Restricted access: Only authorized employees access data
  • Training: Our team is trained in data protection
  • Regular audits: Quarterly security review

No System is Perfect

Despite our efforts, no transmission over the Internet is 100% secure. We recommend using a strong and unique password.

7. Data Retention

In brief

We keep your data as long as your account is active. After deletion, we erase it within 30 days (except legal obligations).

Data TypeRetention Period
Account dataAs long as account is active + 30 days after deletion
Activity dataAs long as account is active + 30 days after deletion
Payment data7 years (tax obligation)
Security logs90 days
Unapproved accounts14 days then automatic deletion

8. Your Rights

In brief

You have full control over your data: access, correction, deletion, download, opposition.

8.1 Under GDPR and Quebec Laws

RightDescriptionHow to Exercise
Right of accessObtain a copy of your dataEmail to info@correctia.ai
Right to rectificationCorrect inaccurate dataAccount settings or email
Right to erasureDelete your dataSettings β†’ Delete account
Right to portabilityDownload your dataEmail to info@correctia.ai
Right to objectObject to processingEmail to info@correctia.ai
Right to restrictionTemporarily limit useEmail to info@correctia.ai

8.2 Response Time

We commit to responding to your requests within 30 days maximum.

9. Cookies and Similar Technologies

In brief

We only use essential cookies to make the site work (login, security). No advertising cookies.

Cookie TypeUseRequired?
SessionKeep you logged inβœ“ Yes
SecurityProtection against attacksβœ“ Yes
PreferencesRemember your choices (language, etc.)βœ— No
AnalyticsUnderstand how the site is usedβœ— No
AdvertisingN/A - We do NOT use this typeβœ— Never

10. Changes to This Policy

In brief

If we modify this policy, we will notify you by email 30 days in advance.

We may modify this Privacy Policy from time to time. In case of significant changes:

  • β˜‘ We will send you an email 30 days before it takes effect
  • β˜‘ For minors, the email will be sent to the parent
  • ☐ The new version will be published on this page
  • ☐ The "Last Updated" date will be changed

Our Commitment

30 days notice is well beyond the industry standard (7-14 days). We believe you deserve ample time to review changes and make an informed decision.

Your continued use of the service after the effective date means you accept the new policy.

Contact Us

For any questions about this policy or to exercise your rights:

Email: info@correctia.ai

Response within: 48 hours maximum

Supervisory authority (in case of dispute):

Commission d'accès à l'information du Québec (CAI)

www.cai.gouv.qc.ca