Privacy

Your Personal AI AS, organisation number 933 915 778, Lysaker torg 5, 1366 Lysaker, Norway ("YPAI"), runs your YPAI account. It is the data controller for everything on this page.

For privacy questions, write to contact@ypai.ai and address the message to YPAI Privacy, or write to the address above.

You

Your name and your email address.

How the account was made

Whether you created the account with an email address or with Google, the time you ticked the line about age and terms and which version of that line it was, and the time you first signed in. If you open Work, we also keep the time and the line you accepted then.

Signing in

We send a link and a code to your email address. If you sign in with Google, Google tells us your name and email address. If you use a passkey, we store the public part of it.

Stopping abuse

We count how many accounts are requested for one email address and from one IP address. We keep the counts for up to one day.

What goes to YPAI Learn

When you open YPAI Learn from your account, the account sends your account ID, your email address, your name and the country on your account, if there is one. If you first came to YPAI through a job application, it also sends the channel you came through, the AI assistant if that was the channel, and the reference of that application.

Technical data

A cookie that keeps you signed in, technical logs, and the country Cloudflare reports for your connection.

We store your application, including your experience, topic, languages, availability and time zone, the tools you teach, your picture if you add one, your confirmation that you are 18 or older, and what you save before you send it.

Claude, an AI model, reads your application and any trial answer and decides whether to approve you or invite you to a trial class. No application is rejected automatically. You can ask a person on our team to review a decision by writing to learn@ypai.ai.

Nothing you write or hand in is used to train AI models.

People at YPAI who run support, safety and the service see what they need for that.

If you take a class, the people in it see your name.

When data leaves the EEA, we rely on an adequacy decision, EU Standard Contractual Clauses or another mechanism the law recognises. You can ask us which one applies.

Cloudflare

Hosts and serves the account pages and stores your account.

Resend

Sends your sign-in links and notices.

Sentry

Receives error reports from our servers.

Google

Signs you in, if you choose to sign in with Google. Google handles that under its own privacy notice.

PostHog

Analytics, on PostHog's EU servers. In the EU, the EEA, the United Kingdom and Switzerland only if you accept them.

Amazon Web Services

Runs the AI model that reads an application to teach.

A cookie keeps you signed in. The service cannot work without it.

In the EU, the EEA, the United Kingdom and Switzerland, and when we cannot tell which country you are in, analytics run only if you accept them in the cookie banner.

In other countries there is no banner. Analytics run from your first visit, until you turn them off under Cookie settings.

When analytics run, PostHog records how you use the pages and ties it to your account when you are signed in. It stores a cookie and keeps data in your browser for that. After you reject or turn analytics off, we stop sending new events to PostHog and remove its cookies and stored data from this browser. This does not by itself delete events already sent. Your choice is saved in your browser, and you can change it at any time under Cookie settings. Analytics never run in a browser that sends Do Not Track.

Errors on the pages are reported to our own server.

The YPAI account is for people aged 16 and over. Work and Teach are for people aged 18 and over.

We ask you to confirm your age when you create the account, and we keep the time you did. We do not ask for proof of age. If we learn that someone under 16 has an account, we close it and delete the data.

Your account

Until you delete it.

Technical logs

Normally 30 days for diagnostic content, and up to 12 months for security events.

Privacy requests and complaints

Three years after the case is closed.

Backups

After you delete your account, copies can remain in our backups for up to 3 years.

You can object to any use that rests on our legitimate interest.

Running your account and support

Our agreement with you, GDPR Article 6(1)(b). Where something is not necessary for that agreement, our legitimate interest in running the service, Article 6(1)(f).

Keeping a record that you confirmed your age and accepted the Terms

Our legitimate interest in being able to show it, Article 6(1)(f).

Keeping the service safe and preventing fraud

Our legitimate interest, Article 6(1)(f).

Reading an application to teach with AI

Steps you ask us to take before an agreement to teach, Article 6(1)(b). You can always have a person look at the outcome.

Analytics

Where we ask you first, your consent, Article 6(1)(a). Where we do not ask, our legitimate interest in knowing how the service is used, Article 6(1)(f). You can object by turning analytics off under Cookie settings.

Handling legal claims and your rights

A legal obligation, Article 6(1)(c), and our legitimate interest, Article 6(1)(f).

These rights are yours wherever you live.

You can ask to see, correct, delete or move your data, ask us to limit how we use it, and object to how we use it. Where we rely on your consent, you can withdraw it. Withdrawing consent does not affect processing that was lawful before you withdrew it.

You can ask a person to look at a decision made by AI alone.

You can download your account data from Settings.

You can delete your account in Settings. You type DELETE to confirm, and it cannot be undone. Deleting your YPAI account does not delete data in YPAI Learn. If you have used YPAI Learn, you delete that data in YPAI Learn's own Settings. To have both deleted in one go, write to contact@ypai.ai.

For anything else, use the privacy contact above. We reply without undue delay and within one month. If a request is complex, the law lets us take up to two months more, and we tell you within the first month.

You can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), or to the authority where you live.

We update this page when what we do changes. The date at the top shows the version. If a change matters for your rights, we tell you by email at least 30 days before it takes effect.