Privacy Statement

Information We Collect

We may collect the following types of information:

• Account Information: Name, email address, and password. This information is required to create and use your AITA account.
• Learning Content and Usage Data: Notes, uploaded documents, lecture recordings/transcripts (if applicable), questions asked, AI-generated responses, summaries, and interaction history with the AI tutor.
• Usage and Technical Data: IP address, browser type, device information, access times, pages viewed, and cookies or similar tracking technologies to improve our services.
• Shared Content: Information related to content you choose to share publicly or privately with other users.

How We Use Your Information

We use the collected information to:

• Provide, personalize, and improve our AI learning features (e.g., generating smart notes, answering questions, and adapting to your learning style).
• Process account registration and manage user sessions.
• Analyze platform usage to enhance performance and develop new features.
• Communicate with you regarding service updates, support, or important notices.
• Prevent fraud, abuse, and ensure platform security.

Note on AI Processing: Your learning content and queries may be processed by artificial intelligence models (including third-party AI providers) to generate responses. Personal identifiers in your text are masked before being sent to these providers, and the providers operate under a Zero Data Retention policy. Even so, please do not upload or enter personal, sensitive, or confidential information (such as identity numbers, contact details, health or financial data) or third-party personal data. AITA is intended for course-related learning materials only. You are responsible for ensuring that content you upload or submit does not contain such information.

Sharing and Disclosure

We do not sell your personal data, and we do not use it for advertising. We share information only with the following categories of service providers, strictly to operate the platform and under confidentiality obligations:

• Cloud hosting & database: Alibaba Cloud (Hong Kong region), where your account and conversation data are stored and encrypted at rest.
• AI processing: OpenRouter, which routes requests to model providers (OpenAI, Anthropic, Google). Content is de-identified before transmission and handled under a Zero Data Retention policy — providers do not retain it or train models on it.
• Email delivery: Resend, used only to send account, verification, and password-reset emails.
• Content delivery & security: Cloudflare, providing CDN, WAF, and DDoS protection.
• When you explicitly choose to share notes or courses with other users via our sharing features.
• If required by law, court order, or government request, or to protect the rights, property, or safety of hkbulearn.ai, our users, or the public.

Data Storage and Security

Your account and conversation data are stored in Hong Kong, on Alibaba Cloud infrastructure under our team's control, and are encrypted at rest (AES-256) using a customer-managed key. Data in transit is protected with TLS. Uploaded course materials, which should contain no personal data, are stored on a separate object storage service located outside Hong Kong. No electronic storage or transmission method is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data. To exercise these rights or for any privacy-related inquiries, please contact us at the email address provided below.

Data Retention

Conversation history is retained for up to 12 months from your last activity, after which it is automatically deleted. You may delete individual conversations at any time, or delete your account to remove all associated data. We retain account information for as long as your account is active or as needed to comply with legal obligations, resolve disputes, and enforce our agreements.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can manage cookie preferences through your browser settings.

Children's Privacy

Our platform is intended for college students and is not directed at children under the age of 18. We do not knowingly collect data from minors.

Changes to This Privacy Statement

We may update this Privacy Statement from time to time. We will notify you of material changes by posting the updated version on this page with a new “Last updated” date.

Contact Us

If you have any questions or concerns about this Privacy Statement or our data practices, please contact us at:

[email protected]