Privacy notice

Who we are

Promptcraft Academy Ltd operates Promptcraft Academy, an online course that teaches young people how large language models work and how to use them well. This notice explains what information we collect about learners and their guardians, and why.

What we collect

To run an account and track progress, we collect:

• The learner's name (or a chosen display name).
• A guardian email address, used for account recovery and the weekly digest.
• The learner's birth year only — never a full date of birth — used to set age-appropriate content.
• Course progress: completed lessons, streaks, XP, and which missions have been passed.

What we never collect

The learning sandbox runs directly between the learner's browser and their chosen AI provider, using their own API key. Because of this, we never collect:

• Chat messages, prompts, or AI-generated replies.
• API keys for OpenAI, Anthropic, Gemini, or any other provider.
• A full date of birth, home address, or school name.
• Advertising trackers or third-party analytics cookies. We do not run ads.

Legal basis

We process the limited personal data above under UK GDPR, with consent from a parent or guardian for learners under 18, in line with the principles of the Information Commissioner's Office (ICO) Age Appropriate Design Code (the ‘Children's Code’). We collect the minimum data needed to run the course and protect it accordingly.

Your rights

You can ask to see, correct, or delete the data we hold at any time. Learners can export their own data and request account deletion from Settings. Guardians can also make these requests on a learner's behalf by contacting us.

Data location

Account and progress data is stored on servers located in the EU (London), and is not transferred outside the UK/EU.

Contact us

For any privacy question or request, email support@promptcraft.academy.

There's also a learner-friendly version of this notice at Privacy (for kids).