Skip to main content

Privacy Policy

Last updated: June 2, 2026

Limud Education Inc. ("Limud", "we", "us", or "our") is committed to protecting the privacy of students, educators, parents, and all users of our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

1. Information We Collect

Account Information

When you register for Limud, we collect your name, email address, role (student, teacher, parent, or administrator), school district or organization, and grade level (for students).

Student Enrollment Information (District-Provided)

For students enrolled by a district: name, email, role, district, grade level — and (when provided by the district) address, city/state/zip, phone, date of birth, emergency contact name and phone. These are optional and only collected when the district provides them as part of enrollment.

Technical and Security Data

We also collect IP address and browser user-agent for security logging and rate limiting.

Usage Data

We collect data about how you interact with the platform, including assignments submitted, AI tutor conversations, time spent on activities, and performance metrics. This data is used to personalize the learning experience and provide analytics.

AI Interaction Data

Conversations with our AI Tutor are logged to improve the learning experience and to allow teachers and parents to monitor student activity. AI tutor logs are subject to strict access controls.

2. How We Use Your Information

  • Personalized Learning: We use performance data to adapt the difficulty of content, provide spaced repetition scheduling, and recommend study materials.
  • Analytics & Reporting: Teachers and administrators receive aggregated and individual performance reports to identify at-risk students and optimize instruction.
  • Parent Visibility: Parents have access to their child's grades, assignment submissions, AI tutor feedback, and progress reports.
  • Platform Improvement: We use anonymized, aggregated data to improve our AI models, curriculum recommendations, and user experience.
  • Communication: We may send notifications about assignments, grades, achievements, and platform updates.

3. Student Data Protection (FERPA)

Limud complies with the Family Educational Rights and Privacy Act (FERPA). We act as a "school official" under FERPA and use student data only for legitimate educational purposes. Parents and eligible students have the right to access and correct their education records.

4. Children's Privacy (COPPA)

Limud complies with the Children's Online Privacy Protection Act (COPPA). For students under 13, we require verifiable parental consent through the school or parent account before collecting personal information. We do not sell children's data or use it for behavioral advertising.

5. Data Security

We implement industry-standard security measures including:

  • 256-bit AES encryption for data at rest
  • TLS 1.3 encryption for data in transit
  • Role-based access controls (RBAC)
  • Regular third-party security audits
  • SOC 2 Type II compliance is available on Premium and Enterprise plans; all plans use the same encrypted infrastructure
  • Automatic session expiration and secure authentication

6. Data Sharing & Third Parties

We do not sell, rent, or share personal information with third parties for marketing purposes. We may share data with:

  • School administrators within your district for educational purposes
  • Service providers who assist in operating our platform (hosting, analytics), bound by strict data processing agreements
  • Legal requirements when required by law or to protect our rights

6a. Service Providers (Sub-Processors)

We use the following sub-processors to operate the Limud platform. Each is bound by a data processing agreement and processes data only on our behalf:

  • Render — hosting infrastructure for limud.co
  • Neon — PostgreSQL database hosting
  • Resend — transactional email (password resets, OTP codes, contact form)
  • Google Gemini API — AI processing for our tutor, study material generation, and grading features

AI prompts and student input are sent to Google for processing under Google's API terms; we do not allow Google to train models on this data.

6b. Cookies and Local Storage

We use first-party session cookies for authentication (NextAuth session cookie). We use localStorage to remember your email (Remember Me) and to persist drafts in our study tools.

We do not use third-party tracking cookies, analytics, or advertising cookies.

7. Data Retention

We retain student data for the duration of the active subscription plus 90 days. Upon request, we will delete all user data within 30 days. Anonymized, aggregated data may be retained indefinitely for research and improvement purposes.

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion of your data — Students and Parents can request account deletion by emailing privacy@limud.co; District ADMINs can also process deletion requests through the District Admin Console. See our Data Deletion API docs.
  • Export your data in a portable format
  • Opt out of non-essential communications

8a. California and State Privacy Rights

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or Texas, you have additional rights under your state's privacy law:

  • California (CCPA/CPRA)
  • Virginia (VCDPA)
  • Colorado (CPA)
  • Connecticut (CTDPA)
  • Utah (UCPA)
  • Texas (TDPSA)

Depending on your state, these rights include the right to: Know what personal data we collect, Access a copy of it, Delete it, Correct inaccuracies, Limit the use of sensitive personal information, Portability of your data in a usable format, and Opt out of the sale of personal information.

Limud does not sell personal information. To exercise any of these rights, contact us at privacy@limud.co.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Limud Education Inc.
Email: privacy@limud.co
Address: [registered address pending — contact privacy@limud.co for our registered office]