Privacy Policy

At NURA we take your data protection very seriously. This Privacy Policy describes how we collect, use, store and protect your personal information, in compliance with the GDPR and Spanish data protection law (LOPDGDD).

The data controller is NURA Education S.L., based in Madrid, Spain. Contact: privacy@nuralearning.es Data Protection Officer: dpo@nuralearning.es

Registration data: Name, email, password (encrypted), student name, academic year, region. Usage data: Academic progress, usage time, AI tutor interactions. Technical data: IP address, device type, browser, cookie data.

Data of children under 14 is only processed with parental consent. Only strictly necessary data is collected. No commercial profiles of minors are created.

Account management, adaptive educational service, AI personalization, progress reports, subscription management, and Platform improvement.

Contract execution, consent (minors and marketing), legitimate interest (Platform improvement), and legal obligation.

NURA does not sell your data. We only share with: Microsoft Azure (EU hosting), Stripe (payments), Azure OpenAI (AI), and Azure Communication Services (emails).

Our servers are located in the European Union (Microsoft Azure West Europe).

Account data: while active and 5 years after. Billing data: 5 years. Usage data: 90 days after cancellation. AI conversations: 30 days after cancellation.

We use cookies and similar technologies. See our Cookie Policy at /cookies for details.

You have the right to: access, rectification, erasure, objection, restriction, portability, and withdrawal of consent. Exercise these rights at privacy@nuralearning.es. You may also file a complaint with the Spanish DPA (AEPD): www.aepd.es

TLS/SSL encryption, bcrypt password hashing, secure JWT tokens, regular backups, and certified Azure infrastructure.

In case of a security breach, we will notify the AEPD within 72 hours and inform affected users without undue delay.

NURA uses artificial intelligence to personalize learning, in accordance with Article 22 of the GDPR and with Regulation (EU) 2024/1689 (European Artificial Intelligence Act): - The adaptive engine builds a pedagogical profile of the student (level, pace and optimal difficulty according to the Zone of Proximal Development) for the sole purpose of personalizing exercises and educational support. - This processing does NOT constitute a decision based solely on automated means that produces legal effects or that significantly affects the student: the Platform's assessments are advisory and there is always human oversight by the legal guardian or the teacher. - We do NOT carry out emotion recognition on students (a practice prohibited in the educational context by the AI Act), nor do we build profiles for commercial purposes about minors. - Data sent to the AI provider (Azure OpenAI) is processed under a data processor agreement and is NOT used to train third-party models. - AI-generated content is identified as such and marked in a legible manner. You have the right to obtain human intervention, to express your point of view and to contest the recommendations generated by AI by writing to privacidad@nuralearning.es. The AI supervisory authority in Spain is the Spanish Agency for the Supervision of Artificial Intelligence (AESIA), without prejudice to the competences of the Spanish Data Protection Agency (AEPD).

You can request account deletion from your settings or by emailing privacy@nuralearning.es. Data will be deleted within 30 days.

Data Protection Officer: dpo@nuralearning.es Privacy: privacy@nuralearning.es Address: Madrid, Spain