Privacy Policy

EasyLessonPlan helps teachers create, save, and review lesson plans with the help of artificial intelligence. It is operated by Solomon Tatwebwa, trading as EasyLessons ("we", "us"). Solomon Tatwebwa is the data controller for the personal data described in this policy and decides why and how it is processed.

The controller's postal address is:

You can contact us at easylessons@easylessons.app.

If you are in the EEA or the UK and want to know whether we have appointed a representative under Article 27 of the GDPR or UK GDPR, or you want details of the safeguards used for any transfer of your data, email us at the address above and we will tell you.

• Account data — your email address and a display name if you provide one. If you sign in with Google, we receive your basic Google profile information.
• Lesson content — the topic, grade, subject, standards, teacher and school names, lesson dates, the options you select, the generated lesson plans, and any evaluation notes you write.
• Uploaded or pasted lessons — in the Lesson Differentiator, the text extracted from a file you upload or paste. The file itself is discarded after we read its text; if you save the adaptation, only the file name is stored, not the file.
• Unit plans and schemes of work — the inputs and generated content for multi-lesson planning tools.
• Technical data — IP address, browser and device information, and server logs needed to keep the service running and secure.
• Analytics data — only if you consent (see section 8). If you decline, no analytics cookie or event is collected.

• To create your account and keep you signed in.
• To generate lesson plans and other content from the details you enter.
• To store your plans so you can return to them later.
• To maintain, secure, and improve the service.
• With your consent, to understand how the site is used (analytics).

When you generate content, the details you enter and any lesson text you upload or paste are sent to our AI provider so a plan can be generated. Requests are routed through the Lovable AI Gateway, which passes them to the model openai/gpt-6-astra. Processing for this model takes place in the United States.

We do not use your inputs or generated outputs to train any model. We do not hold written terms from the gateway operator about whether the gateway or the model provider retains prompts and outputs, for how long, or whether they are used for their own training, so we cannot make a promise about that on their behalf. Please treat anything you enter as content that leaves our systems, and email us at easylessons@easylessons.app if you need the current position before you use the service.

AI-generated content may contain mistakes, including incorrect standards codes. You need to check accuracy, curriculum alignment, classroom suitability and any differentiation suggestions before teaching from a plan. Files we export are marked in their metadata as AI-generated and carry the visible footer "AI-generated with EasyLessons. Teacher review required before classroom use." We do not record whether a review took place, so nothing we produce asserts that one has.

Please do not enter student names, other personal details about your students, or diagnoses. See section 11 for guidance on children's information.

Your lesson plans are private to your account. Nobody else using EasyLessonPlan can view them. We do not sell your information or share it for advertising.

We share personal data only with the service providers below, who process it on our instructions:

Payments. EasyLessons is free at the moment and we do not take payments, so no payment processor receives your data today and we hold no card details. If paid plans return, the payment provider will be named here and in our Terms before any charge can be made. Any records from earlier test transactions are handled as described in section 9.

We do not sell your information or share it for advertising.

Some of these providers process data outside your country, including in the United States. Where that happens, the transfer is protected by the safeguards each provider offers — Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision — so your data keeps an equivalent level of protection.

Essential cookies and browser storage always apply and keep the service working:

• your authentication session (keeps you signed in);
• your cookie-consent choice (elp_cookie_consent, stored in your browser);
• a deployment/load-balancing cookie (__dpl) set by our hosting platform.

Optional analytics. Analytics is provided by our hosting platform rather than by our own code. If you choose "Decline" in the cookie banner — the default — we record that choice and delete the analytics session-id cookie. You can change your choice at any time using the "Cookie settings" link in the footer. If you want us to confirm that no analytics is collected for you at all, email us and we will tell you what the platform is configured to do.

• Account and plans — kept until you delete them or close your account. You can delete any saved plan at any time from your dashboard. Deleting your account removes your profile, plans and planning resources immediately; copies may persist in encrypted backups held by our hosting provider for a short period before they age out.
• Uploaded files — discarded once the text has been read. If you save an adaptation, only the file name is kept, not the file.
• Server logs — retained by our hosting platform for its standard operational period. We are confirming that period and will state it here; email us for the current position.
• Analytics data — retained by the hosting platform; the retention period is being confirmed and will be stated here.
• Records of any past transaction — kept for as long as tax and accounting law requires, then deleted or anonymised.

Subject to the law that applies to you, you have the right to access, correct, delete, and receive a portable copy of your personal data; to restrict or object to certain processing; and to withdraw consent at any time. Email easylessons@easylessons.app and we will respond within one month. Complaints are acknowledged and handled within 30 days. If you are in the UK or EEA you may also complain to your local data protection supervisory authority.

California residents. In the past 12 months we have collected the categories described in section 2 (identifiers, account and lesson content, and internet/ device activity). We do not sell or share your personal information for cross-context behavioural advertising. You have the right to know, delete, and correct your information and to not be discriminated against for exercising these rights. Make a request at the email above.

EasyLessonPlan is intended for teachers and other adults. It is not designed to collect student personal data, and accounts should not be created by children.

If a teacher enters information about a student (for example a name in a differentiation note), please avoid it — do not enter the names or personal details of students. If student data is entered by mistake, contact us at easylessons@easylessons.app and we will delete it.

We use appropriate technical and organisational measures — encryption in transit, encrypted storage, access controls, and row-level database rules that keep each account's plans private. If a personal data breach is likely to risk your rights and freedoms, we will notify the relevant supervisory authority within 72 hours, and notify you directly if the risk to you is high.

We may update this policy from time to time and will update the date below. If a change is material, we will email account holders at least 30 days before it takes effect.

Questions about this policy? Email easylessons@easylessons.app. We are not taking payments at present; if you have a question about an earlier order, email the same address and we will help.