Version 1 — published July 27, 2026
Privacy Policy
Version: July 2026. Applies to honeybeelogic.com, honeybeetoolkit.com, and all Honeybee Logic products. Replaces the Aug 2024 policy.
Honeybee Logic Inc. ("Honeybee Logic," "we," "our," "us") builds AI-powered tools for educators. We are headquartered in Calgary, Alberta, Canada. This Privacy Policy explains what personal information we collect, how we use and share it, and the rights you have — wherever in the world you are.
Plain-language summary: we collect what we need to run the Services, we don't sell personal information, we don't use it for third-party advertising, we don't train AI models on your content without your explicit opt-in, and school and organizational customer data at rest stays in Canada.
1. Who this policy covers — and who is responsible for your data
Individual users. If you create your own account for one of our products (for example, a teacher signing up at honeybeetoolkit.com), Honeybee Logic is responsible for your personal information ("controller," in the language of some privacy laws), and this policy governs.
Users under an organization. If you use our products through an account provisioned or paid for by a school authority or other organization, that organization controls the data and decides why it is collected; we process it on the organization's behalf under our Data Privacy Agreement with them. This policy still tells you what we do, but the organization is your first point of contact for privacy questions and requests.
Website visitors. If you just browse our websites without creating an account, only sections 2, 6, 9, and 10 will typically be relevant to you. Our public storefront at honeybeelogic.com collects no personal information from visitors — it records only anonymous activity (pages viewed, files downloaded) with no way to identify you.
2. What we collect
Website visitors (honeybeelogic.com). None of the items below apply to you. Our storefront website logs only anonymous activity — pages visited and files downloaded — with no cookies, no account, and no information that identifies you. Everything below applies to users who create accounts or use our products.
- Account information — name, email address, password (hashed), school or organization name if you provide it, language preference.
- Billing information — for paid individual plans, handled by our payment processor; we do not store full card numbers.
- Content you submit — prompts, lesson plans, materials, and other content you create or upload, including content you submit to AI features. Do not include information identifying your students — our terms ask you to describe learners in general terms only (e.g., "a grade 4 student reading below grade level").
- Usage data — pages viewed, features used, device and browser type, IP address, and similar log data.
- Support communications — emails and messages you send us.
We collect this directly from you, from your organization (when it provisions accounts), and automatically through the Services.
3. How we use it — and our legal bases
We use personal information to:
| Purpose | Legal basis (where one is required, e.g. EEA/UK) |
|---|---|
| Provide, operate, and secure the Services, including generating AI output you request | Performance of a contract |
| Process payments and manage subscriptions | Performance of a contract; legal obligation |
| Respond to support requests | Performance of a contract; legitimate interests |
| Improve our products, using de-identified or aggregated data wherever possible | Legitimate interests |
| Send service notices (renewals, changes to terms, security alerts) | Performance of a contract; legal obligation |
| Send product news, only where you've agreed or the law otherwise allows | Consent; legitimate interests (with opt-out) |
| Comply with law and enforce our terms | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we balance them against your rights; where we rely on consent, you can withdraw it at any time.
4. AI features
When you use an AI feature, the content you submit is sent to third-party AI service providers to generate the output you requested. We only use providers whose terms prohibit training their models on your content without permission — permission we do not grant. For the model providers that generate output and may receive personal information, any retention is limited to short-term storage used solely to run and secure their service (currently no more than 30 days). Some media features (for example, text-to-speech or image generation) use providers marked "limited scope" on our subprocessor list: those features are designed for non-personal content, the product reminds you not to include personal information in them, and each provider's retention is stated on the list.
We do not use your content or personal information to train AI models, except where you explicitly opt in to a feature that clearly says otherwise. We may use de-identified, aggregated data to improve our products.
AI output can be inaccurate. Review it before use — especially before it reaches a classroom.
5. Sharing
We share personal information only with:
- Service providers (subprocessors) — hosting, payments, email delivery, analytics, and AI providers — bound by contract to protect it and use it only to provide services to us. Our current subprocessor list is available at https://honeybeelogic.com/legal/subprocessors.
- Your organization — if your account is provisioned under an organizational agreement, that organization can access data in its accounts.
- Authorities, where the law requires it — and where permitted, we will notify the affected customer or user first.
- A buyer or successor in a merger, acquisition, or sale of our business, under confidentiality obligations and this policy.
We do not sell personal information, and we do not share it for third-party advertising or cross-context behavioural advertising.
6. Cookies
On our storefront website (honeybeelogic.com) we do not use cookies. A first-party analytics beacon records which pages are visited — it sends only the page path to our own servers and collects no personal information of any kind.
In our products (once you are signed in to an account), we use essential cookies for sign-in, security, and preferences, and privacy-respecting analytics to understand how features are used. We do not use third-party advertising or targeting cookies. Where the law requires consent for non-essential cookies, we ask for it. You can control cookies through your browser; disabling essential cookies may break sign-in.
7. Where your data lives, and international transfers
Where your data is stored depends on how you use our Services:
- Website visitors. Our storefront at honeybeelogic.com is hosted on infrastructure outside Canada. It collects no personal information — only anonymous page-view counts — so there is no personal information subject to a residency commitment for website visitors.
- School and organizational customers. Customer Data at rest stays in Canada — databases, file storage, and backups — as committed in our Data Privacy Agreement.
- Individual users (for example, personal accounts on our self-serve products). Your data is hosted primarily in Canada, but may be processed or stored by us or our service providers in other countries, including the United States. Our subprocessor list shows where each provider operates.
Canada holds an adequacy ruling from the European Commission for data protected under PIPEDA, which supports transfers from the EEA/UK.
Some service providers may process limited data (for example, payment processing or AI requests) in other countries, including the United States. When personal information leaves Canada or the EEA/UK, we use appropriate safeguards, such as standard contractual clauses and provider commitments, and we tell you about the providers involved through our subprocessor list.
8. Retention
We keep personal information only as long as needed for the purposes above. For individual accounts: your content is available for export for 60 days after your account closes, then deleted from live systems, with backups rotating out within approximately 90 further days. Organizational data follows the Data Privacy Agreement with the organization. We may keep limited records (e.g., invoices) longer where tax or other law requires.
9. Your rights
Depending on where you live, you may have the right to: access your personal information; correct it; delete it; export it (portability); object to or restrict certain processing; withdraw consent; and not be discriminated against for exercising these rights. These include rights under Canadian federal and provincial law (PIPEDA, Alberta/BC PIPA, Quebec Law 25), the EU/UK GDPR, and US state privacy laws (including the California Consumer Privacy Act).
To exercise them: individual users, contact us at privacy@honeybeelogic.com or use your account settings; organizational users, contact your organization first (we will help it respond). We respond within the time your law requires (30 days in most places, 45 under some US state laws). If we decline a request, we will explain why, and you may appeal by replying to our decision. You can also complain to your privacy regulator — for example, the Office of the Privacy Commissioner of Canada, your provincial commissioner, your EEA/UK supervisory authority, or your state attorney general.
We do not use personal information for automated decisions that produce legal or similarly significant effects about you.
10. Children
Our websites and individual accounts are for adults (18+): teachers and other educators. We do not knowingly collect personal information from children through individual accounts, and our terms prohibit entering student-identifying information into the products. Where an organizational customer uses features involving student information, the organization controls that data, provides any required notices and consents, and our Data Privacy Agreement governs. If you believe a child has provided us personal information directly, contact us and we will delete it.
11. Security
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data — including encryption in transit, access controls, and least-privilege practices. No system is perfectly secure; if a breach affects your personal information, we will notify you and the relevant authorities as the law requires.
12. Changes
We may update this policy. For material changes we will give notice (by email or in-product) at least 30 days before they take effect, and we will keep prior versions available on request. The "Version" date at the top tells you when it last changed.
13. Contact
Privacy Officer, Honeybee Logic Inc. Our Chief Executive Officer serves as our privacy officer — the person accountable for our personal-information practices and, for Quebec users, the person in charge of the protection of personal information. We will provide the officer's name on request. Calgary, Alberta, Canada Email: privacy@honeybeelogic.com (mailing address provided on request)