Privacy Policy
Effective date: September 30, 2026
This page explains how LessonForge handles personal data. It is written to align with the transparency, legitimate purpose, proportionality, and data subject rights principles of the Philippine Data Privacy Act.
What we collect
LessonForge collects account details such as your email and profile data needed for login, and your teacher/student role. Depending on how the app is used, we also collect: lesson drafts and AI-generated lesson content; answers to quiz, puzzle, and exam blocks; code you submit to coding blocks; essays and multi-page drafts you submit to writing blocks, along with the teacher-authored prompt and point-weighted rubric they are graded against; progress, attempt, retry, and completion-time records; tab-switch and window-focus-loss events recorded during scored blocks (used for distraction-based score adjustments and badges — this is activity timing, not audio, video, or screen recording); uploaded lesson media; and shared/practice link metadata.
Why we use it
We use personal data to create and save lessons, personalize learning flows, grade student work, track progress and attempts, support teacher publishing and assignment workflows, prevent abuse (including per-account hourly limits on AI usage), debug product issues, and keep the service secure. We do not sell personal data, and we do not use classroom or student records for shady profiling or unrelated advertising.
AI grading and code execution
Some blocks are graded automatically. Coding-block submissions are sent to Judge0, a third-party code execution service, to run your code against test cases and check the output. Writing-block essays are sent to Google’s Gemini generative AI model together with the rubric your teacher authored, which returns a score and feedback for each rubric criterion. These providers receive only what is needed to produce that result. AI grading happens automatically when you submit and is not reviewed by a person first, though your teacher can review your original submission and the exact prompt/rubric it was graded against afterward. AI output, including grading, is generated to be as consistent as practical but is not guaranteed to be identical between runs.
Who can access it
Access is limited to the signed-in user, authorized teachers for classroom workflows, application administrators when needed for support/security, and service providers that process data for hosting, authentication, storage, analytics, code execution, or AI generation. When a lesson or course is published and assigned through our partner platform, Rush B, the relevant progress, scores, and submission records needed to run that assignment and its gradebook are shared with Rush B. Service access is limited to what the feature requires.
Storage and security
LessonForge stores application data in Firebase/Google Cloud services and protects access with authentication, Firestore/Storage security rules, server-side checks, and least-privilege role rules where practical. No online system is perfectly risk-free, but we design the app to minimize unnecessary collection and prevent unauthorized access.
Retention
We keep account, lesson, media, progress, submission, and sharing data while the account or classroom workflow needs it. Users or authorized teachers can delete many records inside the app. Backups, logs, and security records may remain for a limited period when needed for operations, audit, abuse prevention, or legal compliance.
Your rights
Under the Philippine Data Privacy Act of 2012, data subjects have rights that include being informed, objecting to certain processing, accessing data, correcting inaccurate data, requesting erasure or blocking when applicable, data portability, and filing complaints with the National Privacy Commission. To exercise these rights, email us using the contact details below, or ask your teacher/admin first if your account is managed through a class.
Children and students
LessonForge is an education product. If a teacher or school uses it with students, the teacher or school should make sure students and guardians receive appropriate notice and consent where required. Student data should only be entered when it is needed for the learning activity — this includes essay/writing answers, which should not contain unnecessary personal or sensitive information, since that content is sent to an AI provider for grading.
Changes
We may update this policy when the product, infrastructure, or legal requirements change. Material changes should be reflected on this page with a new effective date.
Contact and data protection officer
LessonForge is operated by Charlie Shane Rivera, who also acts as its data protection officer. For privacy questions, data requests, or complaints, email charlieshane57@gmail.com.
This policy is a product notice, not a substitute for school-specific privacy notices or legal advice. See also our Terms of Service.