Your workspace. Your information.

Privacy notice · updated 29 October 2026, revision 1.

Lessoncairn is operated by James Lindsay, trading as Lessoncairn, 13 Victoria Terrace, Jarrow, NE32 5SF, United Kingdom. James Lindsay is responsible for privacy enquiries at support@teachflow-ai.com. Lessoncairn is intended for educators aged 18 and over. It is not a pupil account or student records service. Do not enter identifiable pupil information, health or safeguarding records, or confidential school information. General class context must not identify individual people.

Account and workspace information. We process your account email, display name, authentication information, teaching profile, class preferences, saved resources, shopping lists and support messages to provide and support your account. Signed-in workspaces are stored in Supabase with access restricted to the account owner. Netlify hosts the application. Uploaded examples and export requests are processed on the server; original uploaded files are discarded rather than stored in a document vault. Extracted text and preferences you save may remain in your workspace.

Browser storage. Anonymous workspaces and your selected display theme are stored in this browser’s local storage until removed. Session cookies maintain your sign-in. A pending complimentary invitation is held temporarily in session storage until redemption; the server records the account, redemption and access expiry. Clearing browser storage removes local work and preferences, but does not delete cloud data or cancel subscriptions. No advertising pixels or optional analytics are included in the current application.

Billing and account email. Stripe processes card and billing information through its hosted checkout and customer portal. Lessoncairn stores customer and subscription identifiers, status and relevant billing events, not card numbers. Paid checkout remains closed during launch checks. Supabase and Resend deliver account confirmation and reset emails. Support messages pass through ImprovMX to the operator’s monitored Gmail inbox. Email providers process the recipients, message contents and delivery information needed for those functions.

AI generation. Requests send the lesson topic, objectives, instructions, general teaching and class context, preferences, supplied scheme or example text, and relevant lesson or unit content to OpenAI. It does not mean your entire workspace is sent with each request. Our generation code does not add your account email, display name, billing details or class name to the prompt. Information you type into free-text fields can nevertheless be included.

Optional AI sharing. Private processing is the default for new and existing accounts without a current opt-in. Private requests use a separate OpenAI project with training sharing disabled. If you choose the optional sharing checkbox at signup or in Account & Settings, generation inputs and outputs may instead be shared with OpenAI to develop and improve its services, including training models. This is additional to producing your requested resource. Lessoncairn receives an associated complimentary-token benefit, which helps fund the service. Your price, model, AI allowance, editing and export features are the same with either choice.

Changing your choice and provider retention. The signup sharing box is unchecked by default. We record the notice version and your choice with your account; saved settings also record the time of the change. Turn sharing off in Account & Settings to route future requests privately. A request already sent cannot be recalled. Private processing does not mean zero retention: normal provider security and abuse-monitoring retention can still apply. Our request not to retain retrievable Responses API application state does not override a sharing opt-in. Deleting your workspace or account does not necessarily remove material already shared or reverse its use in model training.

Material you submit. Use AI generation only for non-personal, non-confidential material you have the necessary rights and authority to share for model improvement. Do not submit information identifying yourself, pupils, parents or colleagues, health or safeguarding information, or confidential school resources. Removing names alone does not necessarily anonymise data. Permission to teach from material may not include permission to share it for model development. Contact support before submitting material if you are unsure. Agreeing to our terms does not waive your rights or transfer Lessoncairn’s own responsibilities to you.

Earlier sharing on 26 October 2026. Before these optional-choice controls were introduced, Lessoncairn’s generation project had voluntary input/output sharing enabled for all requests. The new default and choices apply prospectively; they do not retrospectively authorise earlier disclosures or recall earlier submissions. Contact support@teachflow-ai.com about material you submitted before the change.

Why we process account information. For UK data-protection purposes, core account, workspace and requested billing operations are needed to provide the service under our contract with you. Necessary security, fraud prevention and troubleshooting serve our legitimate interests in protecting and operating the service. Records required by tax or other law are kept to meet those legal obligations. Optional AI sharing is a separate choice; where personal information is involved, that additional use relies on your consent, not on calling model training necessary to provide a lesson. Declining or withdrawing sharing does not remove access to AI generation. This does not authorise sharing other people’s personal information or resources you lack the necessary rights to share.

Storage and international processing. Workspace data is retained while your account is active unless you delete individual resources or request account deletion. Billing, security, generation-usage and support records may need to be retained to administer allowances, investigate incidents, resolve disputes or meet legal record-keeping duties. Deletion requests are handled manually, with exceptions explained where records must be retained. Provider backups and logs can persist for their applicable retention periods; we cannot promise immediate removal from every backup. Providers may process information outside the UK, including in the United States. Contact support for information about the relevant provider arrangements and safeguards.

Your choices and rights. Export your workspace from Account & Settings and edit your profile and resources there. Email support@teachflow-ai.com to request access, correction, deletion, portability, restriction or objection where applicable, or to raise a concern about data already shared. We may request proportionate information to verify your identity. We will explain any applicable exception or refusal and how to challenge it. You can complain to the UK Information Commissioner’s Office, Canada’s Office of the Privacy Commissioner or the appropriate provincial or US state regulator, as applicable. Your rights depend on the law applying to your situation. Do not place private material or account secrets in public issue trackers.

Retailer links. Shop links send a product search term to the selected retailer without a Lessoncairn account identifier. The retailer applies its own privacy policy and terms. No affiliate tracking code is currently added. Lessoncairn does not operate a behavioural advertising network or use your teaching material for advertising; the separate OpenAI model-improvement sharing and complimentary-token benefit are described above.