Skip to content
Square1 Ai
Legal

Privacy policy.What we collect, and why.

What we collect when you use Square1 Ai, how we use it, who else sees it, and how to have it removed.

Last updated 2 October 2026Square 1 AI (Pvt) Ltd · Sri Lanka

01Who we are

Square1 Ai ("we", "us", "our") runs the Square1 Ai learning platform at square1ai.com. The company is Square 1 AI (Pvt) Ltd, registered in Sri Lanka. We protect your personal data and comply with the General Data Protection Regulation (GDPR) and the privacy laws that apply to you.

For privacy matters, email tech@square1ai.com.

02What data we collect

  • Email address. Used to sign you in with a one-time code. Required to use the platform.
  • Name. Optional, used to personalise your experience and reports.
  • Assessment responses. Your answers to skill-check questions, used to build your skill report and learning plan.
  • Lesson progress. Which lessons, exercises and projects you have completed, used to track and adapt your course.
  • Consent timestamp. The date and time you agreed to this policy, kept for our GDPR records.
  • Seat reservations and waitlists. The form asks for your full name, email address, the country you live in, whether you are a student, a working professional, between jobs or other, your highest level of education, and why you want this programme. A mobile number and your age are optional. We also record which programme it was, when, and your time zone, so a class time can be offered in yours. You do not need an account to reserve.
  • Course booklet requests. The form asks for your full name, email address, the country you live in, whether you are a student, a working professional or a career switcher, and what interests you about the course. A mobile number is optional. We also record which booklet you asked for, when, and how many times it was downloaded. Asking for a booklet also opens a free student account under that email, with your name, country and mobile, so you can start learning straight away. If you are under 18, the form also asks for your parent's or guardian's agreement. If the email already has an account, nothing changes until you sign in.

03How we use your data

  • To sign you in and keep your account secure.
  • To personalise your learning and build your skill reports.
  • To track your progress and adapt the course to your level.
  • To grade and give feedback on your exercises and projects with AI. Responses are processed by Claude, by Anthropic, and are not used to train AI models.
  • If you reserve a seat or join a waitlist: to hold your place, to tell you the start date, class time and price first, to help your instructor place you, and to contact you about that programme by email, or by phone if you gave a number. Reserving costs nothing, and you can ask us to release your seat at any time.
  • If you download a course booklet: to email you your copy and to contact you about that course by email, or by phone if you gave a number. Reply to any of those emails to stop them.
  • To meet our legal obligations.

We do not sell your data. We do not use it for advertising, other than as the cookies section describes, and we do not share it with third parties except as described in the storage and cookies sections.

04Legal basis (GDPR)

  • Contract. Processing needed to provide the service you signed up for.
  • Consent. Where you have given explicit consent, for example when you create an account.
  • Legitimate interests. Security monitoring, improving the platform, and following up a seat you reserved or a booklet you asked for, balanced against your rights. You can object at any time.

05Data storage and security

  • Data is stored on Supabase, a PostgreSQL platform with encryption at rest and TLS in transit.
  • EU server regions are available. Contact us to ask for EU-only hosting.
  • Row-level security means each person can only reach their own data.
  • AI grading runs through the Anthropic API. Anthropic does not store responses or use them to train models under its API terms.
  • Emails we send you, including your booklet, are delivered by Resend, which receives your email address and the message. Booklet requests are kept in the same database and only our staff can read them.

06Your rights (GDPR)

  • Access. Ask for a copy of all the data we hold about you.
  • Rectification. Correct data that is wrong.
  • Erasure. Ask us to delete your account and everything linked to it.
  • Portability. Receive your data in a structured, machine-readable format.
  • Objection. Object to processing based on legitimate interests.
  • Withdraw consent. At any time, without affecting earlier processing.

To use any of these rights, email tech@square1ai.com. We reply within 30 days.

07Cookies

Essential cookies keep you signed in. They are set by Supabase's sign-in library and are always on: without them you cannot log in.

Analytics cookies (optional). We use PostHog and Google Analytics to see how the product is used: which pages people read, which lessons they finish and where they get stuck. Both receive your IP address and the pages and buttons you use. PostHog may also record how a page was used (scrolling, clicks and the screen as you saw it, with anything you type into a form masked), and if you are signed in it keeps your name and email against that record. In the European Economic Area, the United Kingdom and Switzerland nothing loads until you choose "Allow all" in our cookie notice. Everywhere else it runs unless you choose "Essential only", which takes one click when the notice appears.

We also use the Meta pixel and Meta's Conversions API to measure which of our ads bring people to the site and whether they take the skill check or register. Meta receives page-view and conversion events tied to your browser, including the click id from a Meta ad, which we keep in a first-party cookie for 90 days, and may use them to measure and target advertising. When you register we send Meta a one-way hash of the email, name, phone number and country you gave us so it can match the registration to the ad. Meta cannot read the values back. The same choice covers all of it, and declining costs you nothing on the site.

We use no advertising network beyond the Meta pixel, and we never share your details with Meta in a form it could read. To change your choice, clear this site's cookies and the notice will ask again.

08Data retention

We keep your data while your account is active. If you ask us to delete it, we remove all personal data within 30 days, except where the law requires us to keep it.

A seat reservation and a waitlist entry do not need an account; a booklet request opens a free student account, which you can ask us to delete. We keep each one while we may still follow up about that programme, and delete it within 30 days of you asking.

09Changes to this policy

We may update this policy. We will email you about any material change, and using the platform after that counts as accepting the updated policy.

10Contact

For privacy questions or to use your rights, email tech@square1ai.com.

You can also complain to your local data protection authority, for example the ICO in the UK or your national authority in the EU.