Version of 10 November 2026

Privacy at AI Learner

AI Learner helps you use AI well. To do that, we need some of your data. This page explains which data, why we need it, how long we keep it and who else sees it.

Who is responsible

AI Learner is a product by Dirck Mulder. He decides what happens to your data and is responsible for it.

What we keep

Your account

What: Your name, your email address and your password. We keep the password only as a hash, a code nobody can turn back into your password.
Why: So you can sign in.
Legal basis: Needed for the service you use (GDPR article 6(1)(b)).
How long: Until you delete your account.

Your profile and preferences

What: Your job, your company, your AI level, your goals, your interests and your language. You fill these in yourself.
Why: To fit the lessons to you.
Legal basis: Needed for the service (article 6(1)(b)).
How long: Until you delete your account. You can change it any time under Settings.

Your progress

What: Which lessons you did, your scores, your exercise answers, your certificates and your badges. We first take email addresses, phone numbers, bank account numbers and BSN (Dutch citizen service numbers) out of your answers. Of a pasted result we keep at most 2000 characters.
Why: So you can pick up where you left off, and for your certificate.
Legal basis: Needed for the service (article 6(1)(b)).
How long: Until you delete your account.

Your questions to the AI mentor

What: Your questions to the mentor, with email addresses, phone numbers, bank account numbers and BSN (Dutch citizen service numbers) taken out first. We do not keep the mentor's answers.
Why: To answer you and to count how many questions you ask per day.
Legal basis: Needed for the service (article 6(1)(b)).
How long: 30 days.

Coaching in the browser extension, only when you turn it on

What: The prompt you type into an AI tool, encrypted. The tip you got. And an embedding: a list of numbers that describes what your prompt means, so the coach can see which kinds of questions you ask often. We first take email addresses, phone numbers, bank account numbers and BSN (Dutch citizen service numbers) out of the prompt.
Why: To give you tips for better prompts.
Legal basis: Your consent (article 6(1)(a)). It is off by default. Turn it on or off under Settings.
How long: 90 days. When you turn it off, we delete everything at once.

Sign-in and security

What: Your session, with the IP address and browser you signed in with.
Why: To keep you signed in and to spot misuse of your account.
Legal basis: Needed for the service, and our interest in a secure service (article 6(1)(b) and (f)).
How long: Until the session expires, 30 days after your last visit. Signing out ends it at once. Expired sessions are deleted every day.

Statistics

What: Which pages are visited, without the search text in the address. From which country and on which kind of device. For a few actions also which lesson it was and the score. We use no cookies. Your IP address and browser become a code that changes every day. We never store your IP address itself. Never your name, your email address or what you type.
Why: To see which lessons work and what needs to get better.
Legal basis: Our interest in improving the service (article 6(1)(f)). We cannot link them to your name or account.
How long: 90 days. After that only daily totals.

Error reports

What: When something goes wrong: the error message, the page and the kind of browser. We take email addresses, phone numbers, bank account numbers and BSN (Dutch citizen service numbers), codes and search text out before the report is sent.
Why: To find and fix errors.
Legal basis: Our interest in a service that works (article 6(1)(f)).
How long: 90 days. Technical log lines 14 days.

The server log

What: Technical lines, such as the time, an error code and which part of the app did something. No messages, prompts or answers.
Why: To keep the service running.
Legal basis: Our interest in a service that works (article 6(1)(f)).
How long: Short. The log starts over with every new version of the app.

Who else sees your data

Two companies process data for us. They may only use it to help us, never for themselves.

Hetzner Online GmbH (Germany)
Runs the server with the app and the database. Hetzner Online GmbH, Germany, hosts our own analytics and error logs.
OpenAI (United States)
Writes the mentor's answers, the coach's tips and the feedback on exercises. OpenAI only gets the text it needs for that, plus your AI level, role, goals and interests. Never your name or your email address. We first take email addresses, phone numbers, bank account numbers and BSN (Dutch citizen service numbers) out of the text. OpenAI does not use this text to train AI and keeps it at most 30 days to detect misuse.
Because OpenAI is in the United States, this text leaves the EU. That transfer is covered by OpenAI's data processing agreement, with the European Commission's standard contractual clauses.

We do not sell your data and we do not use it for advertising.

AI in AI Learner

The mentor's answers, the coach's tips and the feedback on exercises are written by AI. Every answer says so. AI can make mistakes, so check what matters.

AI gives you a score on exercises. That score is only there to help you learn. No decision about you depends on it.

Your rights

It is your data. You can always:

See and take it with you. Download all your data in one file under Settings, Privacy.
Correct it. Change your profile and preferences under Settings.
Delete it. Delete your account under Settings, Privacy. We delete everything at once. It leaves the server’s backup copy within 7 days.
Withdraw consent. Turn off coaching in the extension under Settings, Privacy. Your stored prompts are deleted.
Object or restrict. Email us. We answer within one month.

Go to your privacy settings

Not happy with how we handle your data? You can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

How we protect your data

Every connection is encrypted (https).
Prompts from the extension are stored encrypted, with a key tied to your session.
Passwords are stored as a hash.
Personal data such as email addresses and BSN is taken out of text before it goes to AI or into the database.

Contact

Questions about your privacy, or want to use one of your rights? Email [email address to follow].

Changes

When we change this text, we update the date at the top. For a big change we tell you before it takes effect.