Loujo Privacy Policy

Last updated: [04/11/2025]

1. Introduction

Octananna Ltd (“Loujo,” “we,” “our,” or “us”) is committed to safeguarding the privacy and personal data of all users—particularly children using our educational platform.

This Privacy Policy and Data Processing Agreement (“Agreement”) explains how we collect, process, and protect personal information in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Children’s Code (Age Appropriate Design Code).

By entering into this Agreement, schools confirm that they act as Data Controllers, and Octananna Ltd (Loujo) acts as their Data Processor under Article 28 of UK GDPR.

For any questions, please contact us at alex@learnwithloujo.com.

2. Who We Are

Company: Octananna Ltd (trading as Loujo)
Company No.: 15943119
Registered Office: Octananna Ltd (Loujo), 124 City Road, London, EC1V 2NX, United Kingdom
Website: www.loujo.ai

Loujo provides personalised, AI-generated educational content designed to help children with dyslexia learn through songs and videos aligned with the national curriculum.

3. Roles and Responsibilities

  • The School acts as the Data Controller, determining the purposes and lawful basis for processing pupil data.

  • Loujo (Octananna Ltd) acts as the Data Processor, processing data only on documented instructions from the School and solely for delivering the Loujo educational services.

  • Both parties agree to comply fully with UK GDPR and the Data Protection Act 2018.

4. Information We Collect

We only collect the minimum data necessary to operate the Loujo platform effectively.

a. Pupil Data

  • First name (or nickname)

  • Age range or school year

  • Learning preferences or profile (used to personalise content)

b. Parent/Guardian Data

  • Name and email address (for consent and communications)

c. School Data

  • Teacher or administrator contact details

  • Class or group assignments

d. Usage Data

  • Learning progress and engagement metrics

  • Interaction logs (e.g. videos watched, quizzes completed)

e. Technical Data

  • Device information, browser type, IP address (for performance and security)

We do not collect or process special category data (e.g. health, biometric, or financial information).

5. Lawful Basis for Processing

For schools, the lawful basis for processing pupil data is typically:

  • Public task (Article 6(1)(e) UK GDPR) – where processing is necessary for the provision of education; or

  • Consent (Article 6(1)(a)) – where the school or parent/guardian gives explicit permission.

Loujo relies on the same lawful basis as the school when processing data on its behalf.

6. Purpose of Processing

We process personal data strictly to:

  1. Provide personalised educational content and track progress.

  2. Support teachers and schools in monitoring pupil learning outcomes.

  3. Improve platform quality, functionality, and AI-based learning accuracy.

  4. Maintain platform security and prevent misuse.

We will never use pupil or school data for marketing or profiling beyond educational purposes.

7. Data Storage and Retention

All data is stored securely on servers located within the United Kingdom or the European Economic Area (EEA).

  • Encryption: All data is encrypted in transit (SSL/TLS) and at rest.

  • Retention: Data is retained only while necessary for educational delivery or as required by law.

  • Deletion: Upon contract termination or school request, all personal data is securely deleted or anonymised within 60 days.

8. Data Sharing and Third Parties

We do not sell or share personal data with third parties for commercial gain.

Limited sharing occurs only with:

  • Authorised service providers (e.g. secure cloud hosting or AI infrastructure) operating under written data-processing agreements compliant with UK GDPR.

  • Legal authorities – only where disclosure is required by law.

9. Sub-Processors

A list of approved sub-processors (e.g. cloud hosting partners) can be provided upon request.

We will notify the school in advance of any intended changes to sub-processors, giving the school an opportunity to object or terminate the contract.

All sub-processors are bound by the same data-protection obligations as Loujo.

10. Data Subject Rights

Parents, guardians, and pupils (through the school) have the following rights:

  • Access – to view data held.

  • Rectification – to correct inaccuracies.

  • Erasure – to request deletion of personal data.

  • Restriction – to limit data processing.

  • Data Portability – to receive data in a structured, commonly used format.

  • Objection/Withdraw Consent – to stop processing where consent applies.

All requests must be submitted via the school, who will liaise with Loujo to complete the request within 30 days.

11. Security Measures

We maintain appropriate technical and organisational measures to protect personal data, including:

  • Encryption and firewall protection

  • Role-based access controls for staff

  • Regular security audits and training

  • Secure development and incident response procedures

If we become aware of a personal-data breach, we will:

  1. Notify the school without undue delay; and

  2. Cooperate fully with the school in any required notification to the ICO or affected individuals.

12. International Data Transfers

We do not transfer personal data outside the UK or EEA unless adequate safeguards are in place, such as UK Addendum Standard Contractual Clauses.

13. Termination and Data Return

Upon contract termination or expiry, all personal data processed on behalf of the school will be:

  • Returned to the school in a structured, machine-readable format; and

  • Securely deleted from Loujo systems within 60 days of confirmation, unless retention is required by law.

14. Changes to This Policy

Loujo may update this Agreement to reflect changes in practice or law. Schools will be notified of any material updates at least 30 days before implementation.

The latest version will always be available at www.learnwithloujo.com/privacy.

15. Contact Information

Data Protection Lead: Alex Molokwu
Email: alex@loujo.ai
Postal Address: Octananna Ltd (Loujo), 124 City Road, London, EC1V 2NX, United Kingdom

If a school or parent is unsatisfied with our handling of personal data, they may lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

16. Acceptance and Execution

By signing or accepting this Agreement (digitally or in writing), the School confirms that it has read, understood, and agreed to the data-processing terms herein, and that Octananna Ltd (Loujo) is authorised to process pupil data on its behalf in accordance with this Privacy Policy and Data Processing Agreement.