Last updated: 30 September 2026. This update reflects the incorporation of Lotus Mind Limited, our updated contact addresses, and our single estate-wide age-consent model. · Private beta · Republic of Ireland
Lotus Edu Academy ("Lotus Edu", "we", "us") is an AI-literacy academy designed for children aged 8–15, used under parental supervision. This policy explains what we collect, why, how we protect it, and the rights you and your child have. We have written it to comply with the EU/Irish GDPR and the Irish Data Protection Act 2018, and the US COPPA 2.0 (Children's Online Privacy Protection Act).
The data controller is Lotus Mind Limited, a company incorporated in the Republic of Ireland on 18 September 2026 (Company No. 826314), with registered office at 10 Aderrig Manor, Adamstown, Lucan, Co. Dublin K78 A4T8, trading as Lotus Edu Academy. Our supervisory authority is the Irish Data Protection Commission (DPC). For any privacy question, data-subject request, or to reach our data-protection contact, email [email protected]. We will appoint a formal Data Protection Officer (DPO) if and when our scale requires one under GDPR Article 37; until then, all data-protection queries are handled directly via this address. Product support is also available at [email protected].
Optional language & region count (aggregate only): if a parent switches on “Count my language & region” for a child in the parent dashboard (parent PIN), or an adult member switches it on in the learning settings above the lesson chat, Lotus Edu adds +1 to a shared counter for the learning language and the lesson viewed or completed — nothing else. No name, account, device, IP address or time of day is stored, and the counter is never linked to your account. Region is not collected (it is recorded as “unset”). It is off by default, can be switched off at any time in the same place, and small counts are hidden. Daily counts are kept for 400 days, then folded into totals.
Đếm ngôn ngữ & khu vực (tùy chọn, chỉ tổng hợp): nếu phụ huynh bật “Đếm ngôn ngữ & khu vực của tôi” cho một tài khoản trẻ trong bảng điều khiển phụ huynh (mã PIN phụ huynh), hoặc thành viên trưởng thành bật nó trong phần cài đặt học tập phía trên khung trò chuyện bài học, Lotus Edu cộng +1 vào một bộ đếm chung cho ngôn ngữ học và bài học được xem hoặc hoàn thành — không gì khác. Không lưu tên, tài khoản, thiết bị, địa chỉ IP hay giờ trong ngày, và bộ đếm không bao giờ được liên kết với tài khoản của bạn. Khu vực không được thu thập (ghi là “unset”). Mặc định tắt, có thể tắt bất cứ lúc nào tại cùng vị trí đó, và các số đếm nhỏ được ẩn. Số đếm theo ngày được giữ 400 ngày, sau đó gộp thành tổng.
Comhaireamh teanga & réigiúin (roghnach, comhiomlán amháin): má chasann tuismitheoir “Comhair mo theanga & mo réigiún” air do pháiste ar an deais tuismitheora (PIN tuismitheora), nó má chasann ball fásta air é sna socruithe foghlama os cionn chomhrá an cheachta, cuireann Lotus Edu +1 le comhaireamh comhroinnte don teanga foghlama agus don cheacht a breathnaíodh nó a críochnaíodh — sin uile. Ní stóráiltear ainm, cuntas, gléas, seoladh IP nó am an lae, agus ní nasctar an comhaireamh le do chuntas go deo. Ní bhailítear réigiún (taifeadtar é mar “unset”). Tá sé as de réir réamhshocraithe, is féidir é a chasadh as am ar bith san áit chéanna, agus cuirtear comhairimh bheaga i bhfolach. Coinnítear comhairimh laethúla ar feadh 400 lá, ansin filltear iad ina n-iomláin.
Recuento opcional de idioma y región (solo agregado): si un padre o madre activa “Contar mi idioma y región” para una cuenta infantil en el panel de padres (PIN parental), o un miembro adulto lo activa en los ajustes de aprendizaje situados encima del chat de la lección, Lotus Edu suma +1 a un contador compartido para el idioma de aprendizaje y la lección vista o completada — nada más. No se guarda nombre, cuenta, dispositivo, dirección IP ni hora del día, y el contador nunca se vincula a tu cuenta. La región no se recoge (se registra como “unset”). Está desactivado por defecto, se puede desactivar en cualquier momento en el mismo lugar y los recuentos pequeños se ocultan. Los recuentos diarios se conservan 400 días y después se agrupan en totales.
Comptage facultatif de la langue et de la région (agrégé uniquement) : si un parent active « Compter ma langue et ma région » pour un compte enfant dans le tableau de bord parental (code PIN parental), ou si un membre adulte l’active dans les réglages d’apprentissage au-dessus du chat de la leçon, Lotus Edu ajoute +1 à un compteur partagé pour la langue d’apprentissage et la leçon consultée ou terminée — rien d’autre. Aucun nom, compte, appareil, adresse IP ni heure de la journée n’est enregistré, et le compteur n’est jamais relié à votre compte. La région n’est pas collectée (elle est notée « unset »). C’est désactivé par défaut, désactivable à tout moment au même endroit, et les petits comptages sont masqués. Les comptages quotidiens sont conservés 400 jours, puis regroupés en totaux.
可选的语言与地区计数（仅汇总）：如果家长在家长面板中为儿童账户开启“统计我的语言与地区”（需家长 PIN），或成年会员在课程聊天上方的学习设置中开启，Lotus Edu 会为所学语言以及被查看或完成的课程在一个共享计数器上加 1——仅此而已。不会存储姓名、账户、设备、IP 地址或具体时间，计数器也永远不会与您的账户关联。不收集地区信息（记录为“unset”）。默认关闭，可随时在同一位置关闭，且过小的数值会被隐藏。每日计数保留 400 天，之后合并为总数。
वैकल्पिक भाषा और क्षेत्र गिनती (केवल समग्र): अगर कोई माता-पिता बच्चे के लिए पेरेंट डैशबोर्ड (पेरेंट PIN) में "मेरी भाषा और क्षेत्र गिनें" चालू करते हैं, या कोई वयस्क सदस्य पाठ-चैट के ऊपर सीखने की सेटिंग्स में इसे चालू करता है, तो Lotus Edu सीखने की भाषा और देखे/पूरे किए गए पाठ के लिए एक साझा काउंटर में +1 जोड़ता है — और कुछ नहीं। कोई नाम, खाता, डिवाइस, IP पता या दिन का समय संग्रहीत नहीं होता, और काउंटर कभी आपके खाते से नहीं जुड़ता। क्षेत्र एकत्र नहीं किया जाता (इसे "unset" दर्ज किया जाता है)। यह डिफ़ॉल्ट रूप से बंद है, कभी भी उसी जगह से बंद किया जा सकता है, और छोटी गिनतियाँ छिपी रहती हैं। दैनिक गिनतियाँ 400 दिनों तक रखी जाती हैं, फिर कुल में मिला दी जाती हैं।
عدّ اللغة والمنطقة (اختياري، تجميعي فقط): إذا فعّل أحد الوالدين "عدّ لغتي ومنطقتي" لطفل في لوحة تحكم الوالدين (رمز PIN الخاص بالوالدين)، أو فعّله عضو بالغ في إعدادات التعلم فوق دردشة الدرس، فإن Lotus Edu يضيف +1 إلى عدّاد مشترك للغة التعلم وللدرس الذي تمت مشاهدته أو إكماله — لا شيء آخر. لا يتم تخزين الاسم أو الحساب أو الجهاز أو عنوان IP أو وقت اليوم، ولا يرتبط العدّاد أبدًا بحسابك. لا تجمع المنطقة (تُسجل كـ "unset"). إنه متوقف افتراضيًا، ويمكن إيقافه في أي وقت من المكان نفسه، وتُخفى الأعداد الصغيرة. تُحفظ الأعداد اليومية لمدة 400 يوم، ثم تُدمج في الإجماليات.
In Ireland, processing a child's personal data online requires parental consent for children under 16 (the Irish digital age of consent). We apply a single, stricter standard across our services: a parent or legal guardian consents for every user under 18, including 16–17 year-olds. Access to Lotus Edu is invitation-only: invite codes are issued directly to a parent/guardian, and at sign-up the parent confirms they consent to their child using Lotus Edu. That parental consent is our lawful basis for processing. Where a parent provides an email, we also rely on legitimate interest to send account/progress updates, which you can opt out of at any time.
Lotus Edu complies with the US Children's Online Privacy Protection Act (COPPA 2.0) (effective April 22, 2026). We require verifiable parental consent (VPC) for all users under 13. Our VPC process:
Access to Lotus Edu is by invitation only during beta; invite codes are sent directly to parents/guardians. We do not knowingly collect information from children without verified parental consent. If you believe a child under 13 has registered without parental consent, contact [email protected] immediately and we will delete the account and all associated data within 24 hours.
Lotus Edu is open to children aged 8–15 (with parental consent) and to adults aged 18 and over. Adults (18 or over) may register using a self-declared age confirmation. At sign-up, you will be asked to confirm:
Lawful basis: For adult accounts, we process personal data on the basis of your explicit consent (GDPR Article 6(1)(a)). Your self-declared confirmation and the registration timestamp are our consent record.
Full ID verification is on our roadmap and will be introduced as a regulatory requirement or as the platform matures. Self-declaration is our initial approach during beta.
Adults exercise all GDPR rights (access, erasure, portability, restriction, objection) directly by emailing [email protected]. The same 30-day response commitment applies.
Adult content is the same as child content — Lotus Edu is a safe, age-appropriate educational platform. The adult door simply removes the requirement for a parental invite code.
All progress, notes, neurons, and conversation history belong to the child and their parent/guardian. Parents may, at any time:
We never share your child's data with any third party. Ever.
We keep a child's data only for as long as the account is active, applying data-minimisation by design (GDPR Art. 5(1)(c) & (e), COPPA 2.0 minimisation). Specifically:
To generate the tutor's replies, a child's chat message is sent to an AI language model. Lotus Edu uses a primary model first, then a fallback chain only if the primary is unavailable, so on any given request one of the following models processes the message text:
| Processor | Role | Data involved |
|---|---|---|
| Lotus Edu server (EU-based, Ireland region) | Hosts the platform & all accounts | All account & progress data |
| MiniMax (model "M2.7") | Primary tutor model — runs on our own private EU infrastructure during the beta | The child's chat message text, to produce a reply. Processed in the EU; not used for advertising or to train third-party models. |
| OpenRouter (AI gateway) | Routes a request to a fallback model if the primary is unavailable | Passes the child's chat message text through to the selected fallback model. Not used for advertising or model training. |
| Google (Gemini 2.5 Flash) — fallback | 1st fallback model, via OpenRouter | Receives the child's chat message text to generate a reply when the primary is down. |
| Anthropic (Claude 3 Haiku) — fallback | 2nd fallback model, via OpenRouter | Receives the child's chat message text to generate a reply. |
| Mistral AI (Mistral Small) — fallback | 3rd fallback model, via OpenRouter | Receives the child's chat message text to generate a reply. |
| Lotus Mind (projectnobi.ai/lotusmind, EU) — membership verification UPDATED 2026-09-07 | Confirms that a Lotus Mind Pass is valid and, about every 30 days, that the membership is still active | Hashed membership reference and tier only. No name, email, chat or progress data leaves Lotus Edu. |
| HuggingFace (private backup repo) | Encrypted off-site backup of platform code and non-PII config | Private repository only. Child personal data (accounts, progress, journals) is excluded from HuggingFace backup. Personal data backup is retained on our own servers only. |
We send the AI model only the message text needed to produce a reply — not the child's password, parent email, or account identifiers. All processors are bound (by their terms and our configuration) to use the data only to provide their service to Lotus Edu, never for advertising or resale. We disable model-training on submitted content where the provider offers that control.
Our primary tutor model and your child's account data are processed within the EU (Ireland). However, the fallback AI models above (Google, Anthropic, Mistral, via OpenRouter) may process the chat message text on infrastructure outside the European Economic Area, including the United States. Where that happens, the transfer is protected by appropriate safeguards under GDPR Chapter V — such as the EU Standard Contractual Clauses and/or the providers' adherence to the EU–US Data Privacy Framework. Only the chat message text is transferred for the sole purpose of generating a reply; no account identifiers are sent. You may contact us for more detail on the safeguards in place.
Lotus Edu uses a single session cookie (aika_session) to keep a user logged in.
It is HttpOnly, SameSite=Lax, and (in production) Secure. We use no tracking, analytics,
or advertising cookies. Because the only cookie is strictly necessary for login, no separate cookie-tracking
consent is required; we still show a brief notice for transparency.
Lotus Edu's tutor is an artificial-intelligence system, not a human. Children and parents are told this clearly in the interface. The AI is used only to teach and converse with your child about AI literacy. This transparency notice is provided in accordance with Article 50 of the EU AI Act (Regulation (EU) 2024/1689). We do not use the AI to make any automated decision that produces legal or similarly significant effects about your child (GDPR Article 22). Parents can view the full conversation history at any time in the Parent dashboard.
Lotus Edu is a constantly improving tutor. To make it better at teaching children, we collect anonymised interaction data — specifically, the chat exchanges, lesson completion events, and quiz/boss-battle outcomes that occur when your child uses Lotus Edu. This section explains exactly what we collect, how we protect it, and your rights.
What is never collected for training: names, email addresses, phone numbers, or any other contact details. Free-text PII (e.g. "my name is…") is automatically scrubbed from conversation text before it is stored.
The child's username is replaced with a one-way cryptographic hash (HMAC-SHA256) using a secret key known only to Lotus Edu, before any record is written to the training corpus. This hash cannot be reversed to recover the original username. It is pseudonymisation under GDPR (not full anonymisation), and we treat the corpus as in-scope personal data accordingly.
The lawful basis for this processing is GDPR Article 6(1)(f) — legitimate interests: improving the educational outcomes of children using Lotus Edu, where those improvements directly benefit the very children whose data is used. We have conducted a Legitimate Interests Assessment (LIA) and are satisfied that our interests do not override the rights and interests of data subjects, given the strong safeguards (pseudonymisation, no sharing, child-appropriate purpose, bounded retention) applied to the corpus.
Training data is stored only on Lotus Edu's own servers and is never shared with, sold to, or provided to any third party — including the AI model providers listed in section 7.
We also generate fully synthetic tutoring examples using our own AI infrastructure. These contain no real user data and are used alongside the anonymised corpus to improve model quality.
Anonymised training data is retained for up to 3 years for the purpose of model improvement. If you delete your child's account, their pseudonymised records will also be deleted from the training corpus within 30 days.
You have the right to object to the use of your child's data for AI model training. To do so, email [email protected] with your child's username and the subject line "Training data opt-out". We will exclude your child's records from the training corpus and delete any already stored within 30 days.
Under EU/Irish GDPR, you and your child have the following rights:
| Right | How to exercise it |
|---|---|
| Access (Art. 15) | Email [email protected] — we respond within one month (extendable by up to two further months for complex requests, per Article 12(3) GDPR) |
| Erasure / Right to be forgotten (Art. 17) | Use the Delete Account button in the Parent Dashboard (instant) or email us |
| Data Portability (Art. 20) | Use the Export My Data button in the Parent Dashboard (instant JSON export) |
| Rectification (Art. 16) | Email [email protected] |
| Object / Restrict (Art. 21–22) | Email [email protected] |
| Withdraw consent | Delete the account at any time via Parent Dashboard |
You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).
We protect your child's data with measures appropriate to its sensitivity (GDPR Art. 32):
If we make material changes we will update the "Last updated" date above and, where appropriate, notify parents by email.
Questions about your data or this policy? Email [email protected].