Legal
Privacy Policy Draft — pending legal review
Last updated 19 August 2026
This describes how Infinium Lab Ltd ("Infiniumlab", "we", "us") handles personal data collected through the Infiniumlab website, the student platform, and private tuition bookings. It's written to be read by parents, students, teachers, and anyone else visiting this site.
Who we are
Infinium Lab Ltd is registered in Cyprus, company number HE490974, registered address 5 Panikou Symeou, Palodia 4549, Limassol, Cyprus. For anything on this page, contact enquiries@infiniumlab.com.
What we collect
| Category | Examples | Why |
|---|---|---|
| Account details | Name, email, school or class group | To run your account and let a teacher see their own class |
| Learning activity | Simulation interactions, AI tutor conversations, MCQ answers, misconceptions flagged | To adapt what the platform shows you next, and to let a teacher see how their students are doing |
| Tuition booking details | Name, email, country, lesson time | To arrange and confirm private lessons |
| Contact form messages | Name, email, role, message text | To respond to your enquiry |
We don't collect more than the tutoring loop actually needs — there's no behavioural advertising tracking anywhere on the learning pages.
Who we share it with
We use a small number of processors to run the platform. None of them can use your data for their own purposes — each only acts on our instructions.
| Processor | What for | Where |
|---|---|---|
| Supabase | Database and application hosting | Zurich, Switzerland |
| Anthropic | Powers the Socratic AI tutor | United States, under Standard Contractual Clauses |
| Resend | Sends account, booking, and enquiry emails | United States, under Standard Contractual Clauses |
| Cloudflare | Hosts this website | Global network |
Supabase's Zurich hosting resolves cleanly under Switzerland's EU Commission adequacy decision, so no additional transfer safeguard is needed there. Anthropic's and Resend's US processing relies on Standard Contractual Clauses.
How long we keep it
| Data | Retention |
|---|---|
| Learning activity data | 2.5 years, then anonymised |
| Safeguarding-related records | 2.5–3 years |
| Financial records (invoices, bookings) | 7 years — one year above the 6-year minimum under Cyprus's Companies Law, Cap. 113 |
Your rights
Under the EU General Data Protection Regulation (GDPR), Articles 15–20, you can ask to access, correct, export, or erase your data. We aim to act on verified requests within 14 days. Email enquiries@infiniumlab.com to exercise any of these rights. If you're not satisfied with our response, you can complain to the Cyprus Commissioner for Personal Data Protection, our lead supervisory authority.
Cookies and tracking
We don't currently use advertising or behavioural-tracking cookies on this site.
Children's accounts
Infiniumlab is built for students studying towards IGCSE, O Level, or A Level physics. Individual student accounts are typically arranged through a parent, guardian, or school — see our Safeguarding & Data Protection page for how this works when a school deploys Infiniumlab for its students.
Changes to this policy
If we make a material change to how we handle your data, we'll update this page and change the date above.