Lesson Dino

Privacy policy

What Lesson Dino collects, why we need it, who else sees it, and what you can ask us to do with it.

The short version

  • The website, lessondino.com, has no cookies, no analytics and no trackers.
  • If you join the beta, we keep your email address and what you tell us you teach, so we can invite you.
  • In the app, we keep your account details and the lessons you make.
  • To write your lessons, we send the lesson details you type to an AI service. Under the terms of the AI model we use during the beta, the company that makes it (Meta) may use these requests to train its future AI models. So never type pupils' names or other personal details into Lesson Dino.
  • We never sell your data, and we don't use it for advertising.
  • You can ask to see, correct or delete your data at any time. Email [email protected].

Who we are

Lesson Dino is an AI lesson planner for teachers, run from Malta. On this page, "we" and "us" mean Lesson Dino. We decide how the personal data described here is used, so under data protection law we are its "controller".

If you have a question about your data, email [email protected].

The website

You can read lessondino.com without telling us anything about yourself.

  • It sets no cookies and has no analytics, adverts or tracking pixels.
  • Its fonts, pictures and demo video come from lessondino.com itself, not from other companies.
  • It is hosted by Cloudflare. Like any web host, Cloudflare handles technical details such as your internet (IP) address and browser type to deliver pages and protect the site from attacks. See Cloudflare's privacy policy.

Joining the beta

When you fill in the beta form, we keep:

  • your email address
  • what you teach, if you tell us
  • when you signed up, and how many times the form was sent with your address.

We use these to invite you to the beta, to send you a thank-you email, and to learn which subjects and ages teachers want, so we can make Lesson Dino better for them. Our team gets an email about each new sign-up. Emails are sent through Resend, an email service.

To stop abuse, our server counts how often the form is sent from each internet address over 10 minutes. These counts are only kept in the server's memory, not saved.

Contacting us

If you use the contact form, your name (if you give it), email address, topic and message are emailed to our team through Resend. They aren't saved anywhere else. We use them only to answer you, and keep the email for as long as we need it. To stop abuse, our server counts how often the form is sent from each internet address over 10 minutes, in its memory only.

If you email us, we keep your email for as long as we need it to answer you.

Using the app

When you use the app at app.lessondino.com, we keep the following.

Your account. Your username, your name, your email address (if your account has one), your role (teacher or admin), your country, when your account was made and when you last logged in. Your password is kept by our login service in scrambled (hashed) form, so nobody can read it, including us.

Logging in. A login cookie keeps you logged in for up to 30 days. On our side we only keep a fingerprint of it, which can't be used to log in.

Your lessons. What you type (such as the subject, year group, topic and any notes) and what Lesson Dino makes for you: lesson ideas, lesson plans, video lists, slides, worksheets and their sources. We also keep earlier versions, your folders, and any PowerPoint templates you upload. Your templates are private to you, unless an admin shares one with every teacher.

How much you use it. How many AI requests you make each day and how much text they use. We use this to keep costs fair and to spot problems.

Security. If someone types a wrong password too many times, the internet address is locked out for 15 minutes. This is only kept in the server's memory. Our error logs may include technical details, such as an internet address, when something goes wrong.

Your country. When you set up your account, the app may suggest a country from your internet address. It looks this up in a database (from DB-IP) kept on our own server, so your address isn't sent anywhere. You choose the country yourself.

What not to type

Lesson Dino never needs information about pupils. Please don't type pupils' names, photos or other personal details into Lesson Dino, including in notes, slides, worksheets or uploaded templates. If something like this was entered by mistake, tell us and we will delete it.

The services that help make your lessons

To make a lesson, Lesson Dino uses other services. They get only what they need for their part of the job.

ServiceWhat it does for Lesson DinoWhat it receives
OpenCode (an AI service) and Meta (which makes the Muse Spark AI model we use)Writes and checks your lesson ideas, plans, slides and worksheets. When our own search finds too few good pages, it also searches the web for more.The lesson details you type, your country, text from the sources found, and pictures of your slides when the AI checks or changes them. Not your name, username or email address.
Cloudflare (Workers AI)Draws an illustration when no good picture can be foundA short description of the picture
Search engines, such as DuckDuckGo, Google, Brave, Qwant and YahooFind sources for your topicSearch words made from the topic, subject, year group and your country. Our own search server asks them, sometimes through a proxy service (Webshare), so they don't see you.
Websites with facts and curricula, such as Wikipedia, learning sites, your country's curriculum sites and the Internet ArchiveGive the facts your lesson is built onOnly the address of each page. Our server reads the pages, not your browser.
YouTube (Google)Finds videos for your topic and plays themThe topic words. When you watch a video or see its thumbnail in the app, it loads from YouTube in your browser.
Pixabay, Openverse, Wikimedia Commons, ARASAAC and Mulberry SymbolsProvide photos, diagrams and picture symbolsThe search words. Most pictures are copied to our server first. Some symbols load straight into your browser.
jsDelivrDelivers the code that builds PowerPoint files, and some symbolsYour internet address, as with any website
ResendSends our emails, including messages from the contact formYour email address and the email
Google CloudRuns our serverEverything the app stores (see below)

About the AI model. During the beta, Lesson Dino uses Muse Spark, an AI model made by Meta, through OpenCode. Under the terms of this model, Meta may keep the requests and answers and use them to train its future AI models. Requests don't include your name, username or email address, but they do include whatever you type into a lesson. This is the main reason we ask you never to type personal details. If we move to a model with different terms, we will update this page.

When a video plays, YouTube's own privacy policy applies. Videos play in YouTube's privacy-enhanced mode (youtube-nocookie.com).

Where your data is kept

Our server runs on Google Cloud in the European Union, in Sweden. The app's database and login service (Supabase) run on that same server, so your account and lessons are stored there.

Some of the services above are based outside the European Economic Area, mainly in the United States. When data goes to them, we rely on the safeguards these providers offer, such as the EU's Standard Contractual Clauses or the EU–US Data Privacy Framework.

Why we are allowed to use your data

  • To give you the service you asked for. We need your account and lesson data to run Lesson Dino for you.
  • Our legitimate interests. Keeping Lesson Dino secure, stopping abuse, fixing problems, keeping costs fair and making Lesson Dino better.
  • Your consent. For beta sign-ups and the emails about them. You can withdraw your consent at any time by emailing us.
  • The law. Where we must keep or share data to follow the law.

How long we keep it

  • Beta sign-ups: until you ask us to remove yours, or until we no longer need it for the beta.
  • Messages to us: as long as we need them to answer you.
  • Your account and lessons: while your account is open. If you ask us to delete your account, we delete it and your lessons within one month.
  • Usage counts: about 400 days.
  • Login sessions: up to 30 days.
  • Error logs: only as long as we need them to fix problems.
  • Requests already sent to the AI service: these are kept under the AI service's own terms, which we can't change (see above).

Your rights

Under the EU's General Data Protection Regulation (GDPR) and Maltese law, you can ask us to:

  • show you the personal data we hold about you, and give you a copy
  • correct it if it is wrong
  • delete it
  • stop or limit how we use it
  • send it to you, or to another service, in a common file format.

You can also withdraw your consent at any time, and object to how we use your data.

To ask, email [email protected]. We answer within one month. We may need to check that the request really comes from you.

If you aren't happy with our answer, you can complain to Malta's Information and Data Protection Commissioner, or to the data protection authority where you live or work.

Children

Lesson Dino is for teachers and other adults. It isn't for pupils, and pupils shouldn't use a teacher's account. We don't knowingly collect personal data about children. If you think a child's personal data was entered into Lesson Dino, tell us and we will delete it.

Keeping your data safe

  • Everything travels over an encrypted connection (https).
  • Passwords are stored scrambled (hashed).
  • The login cookie can't be read by scripts and only works on our site.
  • The keys for the services we use stay on our server and are never sent to your browser.
  • Only the Lesson Dino team can reach the server.

Cookies and browser storage

  • lessondino.com: no cookies at all.
  • The app: one login cookie, which keeps you logged in for up to 30 days. Without it you couldn't log in. The app also keeps a few settings, such as your last choices, in your browser's own storage. These stay on your device.
  • YouTube: when you play a video, YouTube may store information in your browser under its own policy.

Changes to this policy

When something changes, we will update this page and the date at the top. If a change matters to how your data is used, we will also tell you in the app or by email.

Contact

Lesson Dino, Malta. Email [email protected], or use our contact form.