Learning-history privacy

Intervention AI Limited · Updated 4 November 2026 · Learning page notice v3 and separate public-site aggregate statistics

Your choice

Online learning history is optional and off until you enable it in Profile settings after reading the notice. Refusing consent never prevents learning. Existing progress, achievements and preferences continue to be saved in your browser.

Public website statistics (separate)

Across the public landing page and main app sections we count page views by UTC hour and broad country code, using location information available to Cloudflare while processing each request. Shared campaign labels, such as “india-schools”, allow us to assess whether an outreach page is being visited. We use these totals to understand and improve the website and educational outreach information, not to identify individuals, advertise to them or profile them.

The Aage Bhasha statistics database stores hourly aggregate page counts by broad site area only. It does not store IP addresses, precise location, city, names, email addresses, browser identifiers, cookies, full URLs, query strings, individual requests or fingerprints. Views are not unique visitors, location is approximate and campaigns cannot prove which person opened a link. Aggregated records are deleted after 90 days. Cloudflare may separately process and retain diagnostic information under its own service policies.

The public statistics feature is separate from optional private learning history. You can object freely at any time below; the preference is stored in this browser and prevents future public-site counting from it. Global Privacy Control and Do Not Track are also respected. The choice does not alter lesson progress or private learning-history consent. This feature will be enabled only after the database migration and deployment checks are completed.

What is collected

With consent, we store pseudonymous curriculum and activity identifiers, correct/incorrect outcomes, attempt numbers, hint use and response times rounded to seconds. We do not collect names, email addresses, typed responses, audio recordings, recognised transcripts or device fingerprints in learning history. For site improvement, consented visits record only a fixed page group (such as Lessons, Learning, Discover or Profile), Cloudflare’s country code, a coarse browser family and a mobile/tablet/desktop category. Uncertain identification is stored as Unknown. Full URLs, query strings, fragments, IP addresses, precise locations, raw User-Agent strings and fingerprints are not saved in this database. The random private browser credential makes this history pseudonymous rather than fully anonymous. Speaking recognition is a separate feature: using its microphone sends the recording for recognition; it is not retained in this learning-history database.

Retention and credentials

Detailed answer and activity history is retained while you remain active, without a fixed maximum age for individual events. A new submitted answer or deliberate practice, speaking or audio interaction resets a 90-day inactivity period. Page visits, viewing totals, automatic playback and retrying an already-recorded event do not reset it. Credentials renew automatically on genuine activity without changing your identity. After 90 days of inactivity, access expires and daily cleanup deletes detailed answer and activity records. Until the first learning interaction, the inactivity period starts at opt-in registration.

Earned progress, rewards and their necessary anonymous identity/consent metadata are not deleted just because detailed history expires. They follow separate retention until you request online deletion. Inactive identities with no durable progress are removed. Browser progress remains the learning authority and is preserved independently. The expanded page-analytics notice requires fresh consent before any new collection; a valid existing credential keeps the same identity. Until you accept the updated notice, new history is not collected. Previously accepted inactivity-retention terms still protect existing history; the new page notice does not shorten that retention. Older accounts that never accepted the inactivity policy retain their original 90-day per-event limit.

Clearing cookies, losing this browser or switching devices prevents access to anonymous online history; there is no account recovery or cross-device identification. In-browser progress has its own device lifetime and is not erased by the online inactivity policy. Cloudflare may retain recovery backups according to its service policy; active-table deletion does not promise immediate backup erasure.

Access, stopping and deletion

Only the browser holding the private credential can view its saved aggregate totals or request deletion. Use Delete online history in Profile settings to stop collection immediately and delete associated online records, including online progress and rewards. This does not erase existing browser progress or achievements. If deletion fails, keep the browser cookie and retry when service returns. Once an anonymous credential is lost, individual recovery or deletion cannot be authenticated; daily cleanup still removes detailed activity after 90 days of inactivity.

Security and scope

Cloudflare hosts the database and transient network-based abuse protection. Rate limits use the connecting IP at the edge; IP addresses are not stored in learning-history tables. Failures or rate limits do not prevent normal lesson completion. Individual learning records are not publicly accessible. Any administrator analytics require separate protected, read-only aggregate access. No school or pupil accounts are enabled: future child-focused features require a separate safeguarding and privacy review.

Questions: hello@aagebhasha.com.