Privacy Policy

Last updated: June 2026

1. Who We Are

Lab88 is an educational platform operated by Lab88 (contact: admin@lab88.ch). This Privacy Policy explains what data we collect, why we collect it, and how we protect it.

2. Data We Collect

We collect the minimum data required to provide the Service:

Google account email — if you choose to sign in with Google. Used only for authentication; we do not store it separately from Firebase Authentication.
Learning progress data — questions answered, correct/incorrect counts, hints used, and time per question. Stored against a unique user ID.
Year of birth and gender — collected at onboarding. We do not collect your name, and no other identifying information is held that could link this data back to you. This makes the data fully anonymous in practice — not merely pseudonymous. These fields are used exclusively to generate cohort-level statistics for educators (e.g. "65% of students aged 13–15 scored above 70%"). No individual record is ever visible to instructors or third parties. Gender is optional for students aged 13 and over; students under 13 provide year of birth only.
Class code and school identifier — if you join via a school or programme, your profile stores a class code and school identifier. This is used to filter analytics for your instructor and does not reveal your identity.
Session data — anonymous guest sessions use a temporary local ID that is not linked to any personal information.

We do not collect names, payment information, or any sensitive personal data.

3. How We Use Your Data

To authenticate you and save your progress across sessions.
To calculate mastery scores and personalise question selection.
To improve the quality of the question bank based on aggregated (anonymous) performance data.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage and Security

Your data is stored in Google Firebase Firestore, hosted on Google Cloud infrastructure in the EU. Firebase provides industry-standard encryption in transit (TLS) and at rest. We apply Firestore security rules so that users can only access their own data.

5. Authentication

We use Firebase Authentication with two sign-in options: Google OAuth (sign in with your Google account) and anonymous guest sessions. We do not use passwords or magic links. Google OAuth is handled entirely by Google — we receive only a Firebase user ID and your email address for identification purposes. Guest sessions are assigned a temporary anonymous ID that is not linked to any personal information.

6. Cookies and Local Storage

Lab88 uses browser local storage to persist your Firebase authentication session between visits. We do not use advertising cookies or third-party tracking. We do not use Google Analytics or similar tracking services.

7. Your Rights

You have the right to:

Request a copy of the data we hold about you.
Delete your account — you can do this yourself at any time from the Progress panel (top right, then scroll to the bottom). Deletion permanently removes your account and identity from our systems.
Withdraw consent at any time by contacting us.

For data access requests or any other privacy queries, email admin@lab88.ch.

8. Data Retention

We retain your learning data for as long as your account is active. Guest session data is not persisted beyond the browser session. When you delete your account, your profile and identity are permanently removed. Your anonymised learning event data (questions answered, accuracy, timing) is retained for research purposes and cannot be linked back to you after deletion.

9. Children's Privacy

Lab88 is designed for use in educational settings with students aged 11–18. The only data collected beyond learning progress is year of birth and optional gender — neither of which can identify an individual without a name or contact detail, which we do not hold. No individual student data is visible to instructors; only anonymised cohort statistics are surfaced. Where the platform is deployed through a school, the school acts as data controller for its students and Lab88 acts as data processor. Schools deploying Lab88 should ensure appropriate parental consent is in place under their local data protection obligations. If you are a school or programme administrator, please contact us at admin@lab88.ch to discuss data handling arrangements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a revised date.

11. Contact

Questions about this Privacy Policy? Contact us at admin@lab88.ch.