Privacy Policy

1ClickLesson is an online service that helps teachers prepare lessons. It is operated by QurraAI (Pvt) Ltd, a private limited company registered in Sri Lanka, at 82, Peiris Road, Mount Lavinia, Sri Lanka.

For your account and the information you give us, we decide how it is used, so we are responsible for it under data protection law. For questions about this policy or your information, email hi@1clicklesson.com.

• Account information: your name, email address and password. Your password is stored only as a secure hash by our sign-in provider, so nobody at 1ClickLesson can read it.
• Information from Google or Microsoft, if you sign in with them: your name, email address, profile photo and account identifier. Nothing else.
• Lesson information: the topics, grades, subjects and curricula you choose, files you upload (such as presentations you ask us to check), and the lesson packs we generate for you.
• Student and parent information, if you choose to use features such as progress tracking, reports or parent emails: for example students' names or initials, class, marks and assessment results, progress and behaviour notes, and parents' names and email addresses.
• Marketplace information, once the 1ClickLesson Marketplace launches: the materials you list, your seller name and profile, and your sales, purchases and credits.
• Payment information, once paid plans launch: your plan, billing history and the last digits of your card. Card numbers are handled by our payment provider, not us.
• Usage information: how you use our website, collected with Microsoft Clarity (see below), and your IP address, browser and device type in our server logs.
• Messages you send us, such as support emails.

Please don't enter sensitive information, such as health details, unless a feature clearly asks for it.

• To create your account, sign you in and keep your account secure.
• To generate lesson packs and provide the other features you ask for.
• To send you service emails, such as sign-in codes, password resets, receipts and important changes to the service.
• To run the Marketplace, including showing your listings and keeping track of sales and credits.
• To answer your questions and give you support.
• To protect the service and its users, for example by detecting abuse and fraud.
• To understand how 1ClickLesson is used, so we can fix problems and improve it.
• To meet our legal obligations.

We do not sell your information, and we do not use your content or student information to train AI models.

If you sign in with Google, we request only the basic sign-in permissions (openid, email and profile). We receive your name, email address, profile photo and Google account identifier. We do not get access to your Gmail, Google Drive, Calendar, Contacts or any other Google data.

We use this information only to create your 1ClickLesson account, sign you in, and show your name and photo inside the app. We store it in our account database. We share it only with the service providers that run that database and our hosting, as described below. We don't sell it, use it for advertising, or use it to train AI models.

1ClickLesson's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

If you sign in with Microsoft, we receive the same kind of basic profile information (name, email address and account identifier) and use it in the same limited way. We do not get access to your Outlook mail, OneDrive, Teams or other Microsoft data.

You can disconnect 1ClickLesson at any time from your Google account permissions, your Microsoft work or school apps or your personal Microsoft account permissions. Disconnecting stops new sign-ins; to delete what we already hold, contact us as described below.

To make a lesson pack, we send your topic, your lesson settings and relevant curriculum material to Anthropic (Claude) or Google (Gemini), which write the content. To check a presentation you upload, we send its contents to the same providers.

To find the right curriculum material, we use OpenAI to turn text into search data (embeddings) and Cohere to rank search results. They receive curriculum text and your lesson topic.

We use these providers' business services, which don't use our data to train their models. Please don't type students' personal details into the topic box. Features designed for student information keep it separate from lesson generation.

We use Microsoft Clarity to understand how people use our website, so we can fix problems and make it easier to use. Clarity records behavioural information such as clicks, scrolling, mouse movement and the pages you visit, and turns it into heatmaps and session replays.

Clarity never records what you type into forms. Inside your signed-in account, we hide all page content from Clarity, so it can't capture your lessons or any student information.

Clarity uses first-party and third-party cookies. You can block or delete them in your browser settings, and the website will still work. Microsoft processes this data as described in the Microsoft Privacy Statement and may use it to improve its own services.

We use trusted service providers to run 1ClickLesson. They process information on our behalf to provide their service:

• Supabase: database, sign-in and file storage. Your data is stored in Mumbai, India.
• Vercel: hosting for the website.
• Resend: delivery of emails such as sign-in codes.
• Anthropic and Google: writing and checking lesson content.
• OpenAI and Cohere: searching curriculum material.
• Microsoft: website analytics through Clarity.
• Google and Microsoft: sign-in, only if you choose it.
• Payments.lk: payment processing, once paid plans launch.

Other people see your information only when you choose to share it: parents see what you share about their own child, and Marketplace buyers see your seller name and the materials you list.

We may also share information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of our business. In a sale, this policy would continue to protect your information.

Students don't use 1ClickLesson. When a teacher adds information about students, we handle it on behalf of the teacher and their school, and only to provide the features the teacher uses.

Before adding student information, make sure your school allows it and that any consent required by your school or the law is in place. Add only what's needed: initials or first names are often enough.

A teacher can invite a parent to see their own child's progress. We use the parent's name and email address only to send the invitation, sign them in and show them what the teacher has shared about their child. Parents can ask the teacher or us to remove them at any time.

If a school buys 1ClickLesson for its teachers, the school decides how the student information in those accounts is used, and we follow its instructions. The school's own privacy notice then applies too.

We never sell student or parent information, use it for advertising, use it to train AI models, or contact students. Teachers can delete it at any time, and we delete it when the account is deleted.

• Essential cookies keep you signed in, and a short-lived cookie remembers which email address a sign-in code was sent to. It expires after one hour. The service can't work without these.
• Analytics cookies from Microsoft Clarity help us understand how the website is used, as described above. You can block them without affecting the service.

We don't use advertising cookies.

Our main database is in Mumbai, India. Our team in Sri Lanka can access it to run and support the service. Some of our service providers, including our AI providers, process information in other countries such as the United States.

When information moves between countries, we use providers with strong security and contractual protections, as the data protection laws of Sri Lanka and the United Arab Emirates require.

We keep your account, lesson and student information while your account is open. If you delete your account, we delete your information, including copies in backups, within 30 days. We keep anything the law requires us to keep, such as payment records, for as long as the law requires.

Server logs and analytics data are kept for a limited period for security and to improve the service.

All connections to 1ClickLesson are encrypted, passwords are stored only as secure hashes, and access to our systems is limited to the people who need it. Each teacher's lessons and student information are kept separate from other accounts. No service can be perfectly secure, so please use a strong password and tell us straight away if you think your account has been misused.

Under the Sri Lanka Personal Data Protection Act, No. 9 of 2022, the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and other laws where they apply to you, you can ask us to:

• Tell you what information we hold about you and give you a copy.
• Correct information that is wrong.
• Delete your information.
• Give you your information in a format you can move to another service.
• Stop or limit certain uses of your information, or withdraw a consent you gave.

To make a request, email hi@1clicklesson.com from the address on your account. We'll reply within 30 days. If you're unhappy with our answer, you can complain to the Data Protection Authority of Sri Lanka or to the data protection authority where you live.

1ClickLesson is for teachers and other adults aged 18 or over. It isn't designed for children, and children shouldn't create accounts. If we learn that a child has created an account, we'll delete it.

We'll update this policy when our service or the law changes, and change the date at the top. If a change is significant, we'll tell you by email or in the app before it takes effect.

QurraAI (Pvt) Ltd, 82, Peiris Road, Mount Lavinia, Sri Lanka. Email hi@1clicklesson.com, or write to the company at hi@qurra-ai.com.