This Privacy Policy explains how FutureDev Solutions ("we", "us", or "our") collects, uses, discloses, and protects information when you visit https://haidiai.com, create an account, or use HaidiAI (the "Service"). By using the Service, you acknowledge this policy. If you do not agree, do not use the Service.
1. Who we are
HaidiAI is an AI-powered learning platform operated by FutureDev Solutions. For privacy questions, contact [email protected] or [email protected].
In most school and organization deployments, FutureDev Solutions acts as a data processor for customer-controlled education data, and as a data controller for account, billing, support, and website analytics data. School administrators and organization owners remain responsible for the personal data they load into their tenant.
2. Scope
This policy covers:
- Visitors to our marketing website, including contact form submissions
- Registered users of HaidiAI, including administrators, teachers, students, and parents
- Business contacts who request a demo, support, or sales information
It does not cover third-party websites or independent processors that a customer chooses to connect unless those processors are listed below as our subprocessors.
3. Information we collect
Account and profile data. Name, email address, password hash, role, organization affiliation, avatar, phone number, notification preferences, and related profile fields.
Learning and organization data. Course enrollments, progress, submissions, AI tutoring sessions, flagged conversations, monitoring records, and other operational records that administrators choose to store.
Usage and security data. Login events, IP address, user agent, activity logs, device or session tokens, and diagnostic logs needed to operate and secure the Service.
Communications. Messages sent through the contact form, support correspondence, inbox messages, and any attachments or details you provide.
Payment and subscription data. Plan selection, limits, and billing status. If a payment processor is used, card numbers are handled by that processor and are not stored in our application database.
Automatically collected website data. Standard server logs, cookies or similar technologies needed for authentication, theme, and session security.
We do not intentionally collect special-category data beyond what is needed for educational delivery unless a customer stores it in their tenant.
4. How we use information
- Provide, maintain, and improve the Service, including AI tutoring and guardrails
- Authenticate users and enforce role-based and organization-based access
- Process subscriptions, plan limits, and related account administration
- Respond to contact, sales, and support requests
- Send transactional email such as password resets, invitations, and product notices you enable
- Detect, investigate, and prevent fraud, abuse, and security incidents
- Comply with law, enforce our Terms, and protect our rights and users
- Analyze aggregated product usage to improve reliability and features
We do not sell personal information.
5. Legal bases (EEA/UK and similar laws)
Where required, we process personal data on these bases:
- Contract: to create and operate your account and deliver the Service
- Legitimate interests: to secure the platform, prevent abuse, and improve the product, provided those interests are not overridden by your rights
- Consent: where you submit a contact form, enable optional communications, or we are required to obtain consent for cookies
- Legal obligation: where we must retain records or respond to lawful requests
6. Multi-tenant education data and customer responsibilities
HaidiAI is designed so administrators, teachers, students, and parents see only the data their role permits. Customers must:
- Only invite people who are authorized to access their organization
- Assign roles correctly and link parent/student relationships carefully
- Avoid placing unlawful or excessive personal data in free-text fields
- Provide their own notices to students, parents, or staff whose data they upload, and obtain any required parental consent for minors
- Promptly request deletion or export when a relationship ends, where the product does not already allow it
7. Sharing and subprocessors
We share information only as needed to operate the Service:
- Infrastructure: hosting, database, and cache providers used to run the application
- Email delivery: SMTP providers used to send transactional and contact emails
- AI providers: model providers used to power tutoring features, subject to our contracts and guardrails configuration
- Notifications: Firebase, if push notifications are enabled for your deployment
- Payment processors: when you purchase a paid plan
- Professional advisers and legal authorities: when required by law or to protect rights
- Business transfers: in connection with a merger, financing, or sale, subject to appropriate confidentiality
We do not share customer tenant data with other customers. Service providers are bound to use data only to perform services for us.
8. International transfers
The Service may be hosted or accessed from more than one country. Where data is transferred out of the EEA, UK, or another region with transfer restrictions, we use appropriate safeguards such as contractual clauses, adequacy decisions, or your explicit instructions as the customer.
9. Retention
We retain account and organization data for as long as the account is active and for a reasonable period afterward for backups, dispute resolution, security, and legal compliance. Contact-form messages are retained as long as needed to handle the inquiry and keep a business record. Audit and activity logs are kept for security and accountability and then deleted or anonymized according to our retention schedule. You may request earlier deletion subject to legal holds and backup cycles.
10. Security
We use administrative, technical, and organizational measures appropriate to an education SaaS product, including hashed passwords, authenticated sessions, route protection, role checks, and activity logging. No method of transmission or storage is completely secure. Customers should use strong unique passwords, limit admin roles, and report suspected incidents to [email protected] immediately.
11. Cookies and similar technologies
We use essential cookies and similar storage for sign-in sessions, auth protection, theme, and related preferences. These are required for the Service to function. If we introduce optional analytics or marketing cookies, we will update this policy and, where required, request consent.
12. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing, to data portability, and to withdraw consent. You may also lodge a complaint with a supervisory authority. To exercise rights, email [email protected]. We may need to verify your identity and, for tenant data, route the request through the administrator who controls that organization.
California residents: we do not sell or share personal information as those terms are commonly defined under the CCPA/CPRA for cross-context advertising. You may still request know, delete, and correct rights as described above.
13. Children and students
HaidiAI is used in educational settings and may include accounts for students under 16 when created and managed by a school, parent, or authorized organization. We do not knowingly collect children's personal information for marketing purposes. Schools and parents are responsible for obtaining any required consents before creating student accounts. If you believe a child's data was provided improperly, contact us and we will delete or restrict it as appropriate.
14. Automated decision-making and AI features
AI tutoring and monitoring features assist learning and safety workflows. They do not make legal or similarly significant decisions about individuals without human involvement. Subscription limits are applied according to the plan associated with an account.
15. Changes
We may update this policy from time to time. The effective date at the top of this page (August 21, 2026) will change when we do. Material changes will be posted on this page and, where appropriate, notified by email or in-product notice.
16. Contact
Privacy requests: [email protected]
Support: [email protected]
Or use our contact form.