Effective date: September 19, 2026 · Last updated: September 19, 2026
This Privacy Policy explains how Didaktos AI (“Didaktos AI”, “we”, “us” or “our”) collects, uses, shares and protects your information when you visit didaktos.io, create an account, subscribe to a plan, or use our AI teaching assistant (the “Service”). By using the Service you agree to the practices described here.
Who we are
Didaktos AI is an educational copilot that helps teachers create lesson plans, worksheets, rubrics, assessments and other classroom resources. The Service is operated under the commercial name Didaktos AI, based in Puerto Rico, United States. Our website address is https://didaktos.io. For any privacy question, contact us at privacy@didaktos.io or through our contact page.
Information we collect
We collect the following categories of information:
- Account information. When you register, we collect your name, email address and password (stored encrypted). Your subscription plan (Free, Starter or Pro) is associated with your account.
- Billing information. If you purchase a paid plan, payment is handled by our third-party payment processor (Stripe). We do not store your full card number; we receive limited billing details such as your plan, transaction status, and the last digits/brand of your card for reference.
- Content you provide to the AI. When you use the Service, we process the topics, prompts, instructions and settings you enter, as well as any files you choose to upload (for example PDFs, images, documents, audio or notes) and the resources the Service generates for you.
- Communications. If you contact us through our forms (WPForms) or by email, we collect the information you provide, such as your name, email and message.
- Comments. If you leave a comment on the site, we collect the data shown in the comment form, plus your IP address and browser user-agent string to help with spam detection. An anonymized string created from your email address (a hash) may be provided to the Gravatar service to check whether you are using it.
- Usage and device data. Like most websites, we automatically collect log data such as IP address, browser type, pages visited, referring URLs and timestamps, through cookies and similar technologies (see “Cookies” below).
How we use your information
We use the information we collect to:
- Provide, operate and maintain the Service and generate the resources you request;
- Create and manage your account and subscription, and process payments and coupons;
- Respond to your messages and provide customer support;
- Improve, secure and troubleshoot the Service, and prevent fraud and abuse;
- Send you service-related communications (for example, account, billing or security notices) and, where permitted, product updates you can opt out of;
- Comply with our legal obligations.
Our legal bases for processing (where GDPR applies) include performance of our contract with you, your consent, our legitimate interests in operating and improving the Service, and compliance with legal obligations.
AI processing and third-party AI providers
To generate resources, the content you submit (your prompts, settings and any files you upload) is processed by our systems and by trusted third-party AI service providers that run the models powering the Service. This processing is carried out solely to produce the output you request.
- We do not sell your content, and we do not use it to build advertising profiles.
- We instruct our AI providers to process your content only to deliver the Service.
- Please do not upload sensitive personal information about students (such as full names combined with grades, health, behavioral or other confidential records) unless you have the necessary rights and consents to do so. You are responsible for the content you submit. Where possible, remove or anonymize identifying details before uploading.
You can request the list of our current AI sub-processors by contacting us at privacy@didaktos.io.
Cookies
We use cookies and similar technologies to keep you signed in, remember your preferences, secure the site, and understand how the Service is used. For example:
- If you leave a comment you may opt in to saving your name, email and website in cookies for your convenience; these last up to one year.
- When you visit the login page we set a temporary cookie to check whether your browser accepts cookies; it contains no personal data and is discarded when you close your browser.
- When you log in we set several cookies to save your login information and screen display choices. Login cookies last for two days and screen-option cookies for a year; if you select “Remember Me”, your login persists for two weeks. Logging out removes the login cookies.
- If you edit or publish content, an additional cookie recording the post ID is stored for one day.
You can control or delete cookies through your browser settings. Disabling some cookies may affect how the Service works.
Who we share your information with
We share information only as needed to run the Service, and with providers bound to protect it:
- Payment processing: Stripe, to handle subscriptions and purchases.
- AI service providers: to generate the resources you request, as described above.
- Hosting and infrastructure: our web hosting and storage providers.
- Email and support tools: to send service communications and respond to you.
- Legal and safety: when required by law, to enforce our terms, or to protect the rights, safety and security of our users and the Service.
If you request a password reset, your IP address will be included in the reset email. We do not sell your personal information.
Embedded content from other websites
Articles or pages on this site may include embedded content (such as videos or images). Embedded content from other websites behaves as if you had visited that other website, and those sites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with that content.
How long we keep your data
- Account and subscription data are retained while your account is active and for a reasonable period afterward to meet legal, tax and accounting obligations.
- Content and generated resources associated with your account are retained so you can access your history, until you delete them or close your account.
- Comments and their metadata are retained indefinitely so we can recognize and approve follow-up comments automatically.
- Support messages are kept as long as needed to handle your request and for our records.
Your rights over your data
Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, to object to certain processing, and to withdraw consent. If you have an account or have left comments, you can request an exported file of the personal data we hold about you, and you can ask us to erase it, except data we must keep for administrative, legal or security purposes. To exercise these rights, contact us at privacy@didaktos.io. You also have the right to lodge a complaint with your local data protection authority.
Children’s privacy and student data
The Service is intended for educators and other adults, not for direct use by children. It is not directed to children under the age of 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from children. Teachers and schools are responsible for complying with applicable student-privacy laws (such as FERPA, COPPA or GDPR provisions on children’s data) when using the Service, including obtaining any required permissions before submitting information about students. If you believe a child has provided us personal information, contact us at privacy@didaktos.io and we will delete it.
Data security
We use technical and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you and the authorities where required in the event of a breach.
International data transfers
We and our providers may process your information in countries other than your own. Where we transfer personal data internationally, we take steps to ensure it receives an adequate level of protection, such as relying on appropriate safeguards recognized under applicable law.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.
Contact us
If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@didaktos.io or through our contact page.