Privacy Policy

Rebral Learn is a direct-to-consumer application. If you use it through a school, program, or employer, that organization is responsible for its own notices and consents; this notice covers your account with us.

Account details (name, email, sign-in provider, age or date of birth when required) — to create and secure your account and meet age-gating obligations. Legal basis: performance of our contract with you and compliance with laws such as COPPA.

Learning activity (practice responses, reflections, check-ins, progress) — to provide the service and show your own progress. Legal basis: contract.

Support messages and issue reports — to answer you and fix problems. Legal basis: contract and our legitimate interest in supporting users.

Usage and device information (pages used, device type, IP address, error logs) — for security, fraud prevention, and improving the product. Legal basis: legitimate interests.

Optional communications preferences — for reminders and updates you choose. Legal basis: consent, which you can withdraw at any time.

We do not collect clinical or diagnostic information, and the service is not designed to infer medical conditions.

Rebral Learn is not directed to children under 13, and we do not knowingly collect personal information from a child under 13 without verifiable parental consent. If we learn that an account is under 13 and consent has not been verified, we stop collecting personal data from that account and ask for parental consent or delete the account.

Parents and guardians can review their child's data, request correction, ask us to stop further collection, or request deletion by contacting us at support@rebral1.ai. We verify the requesting adult's relationship and identity before disclosing or deleting data.

Service providers who host, secure, and support the platform, and AI providers who process practice and coaching text to generate responses.

Professional advisers such as legal and accounting, where needed.

Authorities, where the law requires it.

Where a learner's school, program, or guardian has access, that access is explicitly consented to, limited in scope, and can be withdrawn.

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We keep account and learning data while your account is active and for a limited period afterwards to meet legal and accounting obligations, then delete or anonymise it. You can ask us to delete your account and data at any time.

Depending on where you live, you can ask for access to your data, correction, deletion, restriction, portability, or object to processing, and you can withdraw consent. We respond within one month. If you are in the UK or EEA you can also complain to your data protection supervisory authority.

We use appropriate technical and organisational measures, including encryption in transit, access controls, and row-level access rules that keep each learner's data separate.

We use essential cookies to keep you signed in and the service secure. We also use analytics and measurement cookies to understand how the product is used so we can improve it.

You can opt out of analytics and measurement at any time by emailing us at support@rebral1.ai, or by using your browser's cookie and tracking controls.