This policy explains what data abcdidactic handles, why, for how long and what rights you have. Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD) apply.
Controller
- Name: Moriagatte SCP
- Tax number (NIF): J19836667
- Address: Carrer Salmerón, 110, local 7, 08222 Terrassa
- Email: info@abcdidactic.com
For any question about your data, write to that address.
1. Your account's data
What
| Data | Where it comes from |
|---|---|
| Email address | You, when you ask for a sign-in code, or Google, if you sign in with it |
| Name and profile picture | You, or Google, if you sign in with it |
| Sessions: IP address, browser, dates | Your browser, every time you sign in |
| Sign-in codes | Generated by us; they expire in minutes |
| Centres you belong to, and their kind | You, when the account is made, or whoever makes you a member |
| Requests to the model | A record of each request: which centre, when, how many tokens |
There are no passwords: you sign in with a code we send to your email, or with your Google account.
Why, and on what basis
- To give you the service: the account, the sessions, the centre, the trial and the credits. Basis: performance of the contract (art. 6.1.b GDPR), that is, the terms of use.
- To keep the service safe: the session record, the request limits, the record of requests to the model. Basis: our legitimate interest (art. 6.1.f) in preventing abuse, which is what lets the service exist.
- To write to you about the service: a code, the centre's credits, the end of the trial, a change to these terms. Basis: the contract.
For how long
- The account, as long as it exists. You can delete it by asking at the address above.
- Sessions, a year from the last time you use abcdidactic. Codes, a few minutes.
- The record of requests to the model, as long as the centre that made them exists: it is what counts its credits.
2. Signing in with Google
If you choose to sign in with Google, Google gives us, with your permission on its own screen, your name, your email address (and whether Google has verified it) and your profile picture. We ask for nothing else: abcdidactic does not read your mail, your Drive, your calendar or your contacts.
- What we use it for: only to create your account, or find the one you already have with the same address, and to show you your name and picture in the app.
- Where we keep it: in the account's database, with the identifier Google gives for this sign-in, as long as the account exists.
- Who we share it with: no one. We do not sell it, use it for advertising, or use it to train any model.
abcdidactic's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can withdraw the permission at any time at myaccount.google.com/permissions, and ask us to delete the account.
3. What you put into abcdidactic
Your projects, the sources you add — documents, web pages, articles, texts — and the worksheets made from them belong to your centre. Of a document we keep the text, not the file. We use them only to give you the service: to read them, sum them up and make materials when you ask.
Sources are classroom material: do not put your pupils' personal data in them. If abcdidactic ever keeps such data, it will do so under a data processing agreement with the centre, as the law requires.
4. Who else is involved
abcdidactic runs on other companies' services, which process data on our behalf as sub-processors. None of them may use the data for anything else.
| Provider | What it does | Where |
|---|---|---|
| Cloudflare, Inc. | Hosts the app and sends the emails | Worldwide network; based in the US |
| DigitalOcean, LLC | The database | European Union |
| OpenRouter, Inc. | Carries the requests to the language model | EU; based in the US |
| Google LLC and OpenAI (through OpenRouter) | The models that read the sources and make worksheets | EU |
| Google LLC | Signing in with Google, if you choose it | Based in the US |
What the model receives. When you ask it to read a source or make a material from it, the model is sent the source's text, the project's level and language, and whatever you wrote to guide it. Your email address and the rest of your account's data are not sent.
Where the model runs. Requests to the model go through OpenRouter's European address: they are opened inside the European Union and only sent on to the model's servers there, and the answer comes back the same way. The texts and sentences sent to the model are not processed outside the Union.
Transfers outside the European Union. Cloudflare, OpenRouter, Google and OpenAI are based in the United States. Transfers are made with the safeguards of article 46 GDPR: the European Commission's standard contractual clauses and, where the provider is certified, the EU–US Data Privacy Framework.
5. Security
All communication is encrypted (TLS). Sessions travel in a signed cookie (the cookie policy names them). A centre's data is seen only by its members. The service's keys are stored encrypted. If there were ever a security breach affecting your data, we would tell you, and notify the authority, as the law requires.
6. Your rights
You can ask us for access to your data, to rectify it, erase it, restrict its processing, port it to another service or object to it. Write to info@abcdidactic.com from your account's address and we will answer within a month at most. If you are not satisfied, you can complain to the Spanish Data Protection Agency (aepd.es).
7. Minors
abcdidactic is a tool for adults: teachers, professionals and families. No minor has an account.
8. Changes
If this policy changes in anything that affects you, we will tell you by email or on sign-in. The version in force is the one of October 3, 2026.