EruDesk uses data to provide access to the service, support students’ work and respond to your requests. This page explains which information is involved, how it is used and how you can manage it.
Your point of contact
For questions about your data or to exercise your rights, write to contact@erudesk.com. EruDesk is your point of contact for the processing described here.
This policy covers the website, My space and the devices used during sessions. An adult manages the household. A student’s information is provided by that adult or during the student’s exchanges with EruDesk.
The information we use
- Household access and preferences: sign-in email, household name if provided, country, languages, display preferences and information needed for authentication. The password is stored in a derived form rather than as plain text.
- Students and offered lessons: first name, school level, exchange language and the lessons offered to each student.
- Learning exchanges: questions, answers, voice transcripts and context needed to prepare or resume a lesson.
- Objective follow-up: the question asked, the student’s answer, its assessment and its date. EruDesk uses these to derive the three objective states: not started, practising and secure.
- Subscriptions and sessions: purchase and payment references, amounts, subscription states, access rights, balance and voice time charged to the household. Full card details and the security code are entered with Stripe; the EruDesk application does not retain them.
- Contact and feedback: information you enter in your request. Feedback is associated with the signed-in household, a website area and the device and operating-system type, without automatically attaching lesson exchanges.
Information requested to sign in, make a purchase or use a feature is needed for that feature. Fields marked optional may be left empty. A student’s full name, address, school or medical information are not needed to request an explanation: please avoid sharing them in exchanges.
Why the data is processed
Household access, purchases and service provision rely on performing the contractual relationship with the adult managing the household. Learning data supports the requested help and identifies objectives that need further practice.
Security, abuse prevention, handling requests and improving how the service works rely on the legitimate interest in providing a reliable service. Records required to meet legal obligations, including accounting obligations, are processed on that basis. Optional audience measurement relies on your consent.
Voice and work on paper
Voice is processed when you use the microphone. Transcription helps EruDesk understand the question; text and context needed for a response are sent to the technical service producing the explanations. Text to be spoken is also processed to generate EruDesk’s voice.
The application does not keep a permanent archive of audio recordings. A transcript may, however, become part of the conversation retained to resume a lesson or an answer used for objective follow-up.
Work written in the notebook stays on paper. Scanning an exercise code retrieves that exercise; the code does not transmit what the student wrote on the sheet. Follow-up provides learning indicators, without marks or rankings, and does not make decisions about the student’s educational placement.
Who is involved in processing
Household data is accessible to that household and to people authorised to operate EruDesk, according to their access rights. Some processing requires service providers:
- OpenAI, to produce explanations, transcribe speech and generate EruDesk’s voice when these features are used. Transmitted data includes messages, necessary learning context and, for transcription, the submitted recording.
- Stripe, for payments, subscriptions and billing information provided during payment.
- Cloudflare Turnstile, to verify website sign-in, registration and contact-form requests and limit automated actions, using technical browser and network information.
- Google Analytics, only after your agreement, for the website’s specified navigation and commercial statistics.
- Scaleway Mailbox, for the email service used by EruDesk and delivery of contact requests.
- Hosting services, to operate the website and retain the data needed to provide the service.
The application’s own rules are not a promise that these providers retain no data. Their service processing terms and the settings actually contracted also need to be taken into account.
For information about the website’s hosting provider, countries of storage and processing, and safeguards for any transfers outside the European Economic Area, contact contact@erudesk.com.
How long data remains in EruDesk
| Information | Retention in the application |
|---|---|
| Household and students | Until deletion. Deleting the household deletes its students. |
| A lesson’s conversation | One current, bounded conversation per student and lesson, until that lesson is restarted from the beginning or the student or household is deleted. |
| Answers used for follow-up | The last twelve answers per student and objective. They are deleted with the student or household; restarting a lesson does not erase them. |
| Lesson preparation | Temporary exchanges, forgotten after four hours of inactivity or a service restart. The validated brief may be retained in the chosen lesson’s conversation. |
| Audio | Temporary processing and caching needed for the session, without a permanent audio archive in the application. |
| Website sign-in | A session valid for a maximum of twelve hours. Signing out or changing the password revokes the corresponding access. |
| Feedback | Retained with its processing status until the household is deleted. |
| Cookie choices and measurement cookies | Choices retained for 180 days; measurement cookies limited to 180 days. |
Contact-form messages are delivered by email and are not archived in the application’s database. Retention in the email system is separate.
For the retention periods applied to support email, billing data and records, technical logs and backups, and the corresponding deletion procedures, contact contact@erudesk.com. Deletion in the application alone does not describe the lifecycle of copies held by service providers.
Cookies and statistics: your choice
The sign-in cookie maintains access to the household. Language preferences and some display choices may be remembered in the browser.
Audience measurement is optional. Google Analytics scripts are not loaded before you agree. Refusing or withdrawing consent leaves the service accessible. Permitted measurements concern navigation and certain purchase steps; they do not receive students’ first names, emails, messages, voice, answers or progress. Advertising features are disabled.
You can change your choice through Cookie settings. That page explains the uses and lifetimes of these technologies.
Correct, obtain or delete your data
My space lets you change student information and household preferences. To request a copy, correction, erasure or restriction of processing, write to contact@erudesk.com. Depending on the processing, you may also exercise your rights to object or to data portability, and withdraw consent previously given.
Identify the information concerned and the household’s email address. A minor student’s legal representative may submit the request. A proportionate check of the requester’s identity or authority may be necessary.
A response is normally provided within one month. If a complex request requires an extension, you are informed of the reasons within that period. A legal obligation may justify retaining certain information despite an erasure request; the response must explain this.
You may also lodge a complaint with the CNIL, the French data protection authority.
Questions about this policy?
Write to contact@erudesk.com or use the contact form.