Privacy Policy
Last updated: 2026-03-14 | Version: 1.0
1. Data Controller
DOQENT - established in Slovenia
Trading as: DOQENT
Email: privacy@doqent.ai
2. What Data We Collect
Data you provide directly
- Account information (name, email, password)
- Profile information (school, subjects, language preference)
- Assessment data (tests, questions, answer models, grades)
- Lesson plans and generated content
- Documents you create (meeting minutes, reports, letters)
- Student information (names, grades, incidents) that you enter
- AI interactions (prompts sent to AI providers for grading, generation)
Data collected automatically
- Usage data (pages visited, features used)
- Device information (browser, operating system)
- IP address (security and fraud prevention)
3. Why We Process Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing the DOQENT platform (grading, lessons, documents) | Contract performance (Art. 6.1.b) |
| AI features (photo grading, lesson generation, document creation) | Contract performance (Art. 6.1.b) - core feature, BYOK model |
| Marking homework photos your child hands in, and giving feedback | Contract performance (Art. 6.1.b) - part of the service, not a separate consent |
| Analytics and non-essential cookies | Consent (Art. 6.1.a) - opt-in via cookie banner |
| Security and fraud prevention | Legitimate interest (Art. 6.1.f) |
4. Data Sharing
We do not sell your personal data. We share data only with the following sub-processors:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, file storage | EU (Ireland) |
| OpenAI / Anthropic / Google | AI grading, lesson generation, document creation (your own API key) | US (DPA) |
| Google Cloud | Hosting (Google Cloud Run) | EU (Belgium) |
Important: AI features use YOUR API key (BYOK). Your data is sent to the AI provider you choose (OpenAI, Anthropic, or Google). We do not store AI responses on our servers beyond what you save.
5. Your Rights (GDPR Art. 15-22)
Right of Access (Art. 15)
Request a copy of all your personal data. Contact privacy@doqent.ai.
Right to Rectification (Art. 16)
Correct inaccurate data via your Settings page or contact us.
Right to Erasure (Art. 17)
Request deletion of your account and all personal data. Contact privacy@doqent.ai.
Right to Data Portability (Art. 20)
Receive your data in a machine-readable format (JSON export).
Right to Object (Art. 21)
Object to processing based on legitimate interest. Contact privacy@doqent.ai.
To exercise your rights, email privacy@doqent.ai. We will respond within 30 days.
6. Data Security
- All data encrypted at rest (AES-256) and in transit (TLS 1.3)
- Passwords hashed with bcrypt - never stored in plain text
- All data hosted in the EU (Supabase Ireland, Google Cloud Belgium)
- In case of a data breach, we notify affected users and the Slovenian supervisory authority within 72 hours
7. Data Retention
Your data is kept as long as your account is active. After account deletion, personal data is permanently removed within 30 days. Anonymized usage statistics may be retained. Homework photos and other schoolwork a child hands in are removed by an automated clean-up schedule, and a parent can request earlier deletion.
8. Children and consent
The age at which a young person can agree to online services on their own is set by each country. Under that age, a parent or guardian gives consent.
Slovenia: 15 years. Cameroon: 18 years.
For a child under this age, a parent or guardian consents to the child using DoQi, the loyalty programme, and AI review of their schoolwork. Consent can be withdrawn at any time, and the feature simply turns off.
A parent gives this consent by an active, informed step when creating the account: a required tick-box that names this Privacy Policy and the Terms of Use. It is never implied by payment or by simply using the service, and it can be withdrawn at any time (see Your Rights, erasure, or the parental consent page).
We assessed whether we must appoint a Data Protection Officer under GDPR Art. 37 and recorded the outcome in our DPO Exemption Analysis.
9. Homework photos and your child's work
When your child hands in homework as a photo, a teacher looks at it to mark it and give friendly feedback. That is the only reason we handle these photos.
- We use the photos only for marking and feedback.
- We never use a child's photos or schoolwork to train AI models, and never for advertising or publishing.
- Photos are kept only as long as the schoolwork needs them and are then removed automatically by our clean-up schedule.
- A parent can ask us to delete their child's homework photos at any time, and we will (see Your Rights, erasure).
- The legal basis is providing the service your child signed up for (contract), not a separate tick-box.
10. Contact & Complaints
Email: privacy@doqent.ai
Supervisory authority: Informacijski pooblaščenec (ip-rs.si)