Data Privacy
Privacy Policy
12.06.2026
1. General
LeadingEasy follows "Privacy by Design" and "Privacy by Default". We collect only data that adds measurable value for teaching and learning.
Our processing complies with the Information and Data Protection Act of the Canton of Zurich (IDG), the Swiss Federal Act on Data Protection (DSG), and the General Data Protection Regulation (GDPR).
The processing and storage of all personal data on LeadingEasy complies with the data protection regulations of the European General Data Protection Regulation (GDPR) as well as the regulations of the Swiss Data Protection Act (DSG). LeadingEasy's data processing has been audited for data security by various educational institutions in Switzerland and Germany, as well as at the cantonal and state level. These audits confirmed LeadingEasy's compliance with the DSG and GDPR.
2. Data Collection
Personal data is processed on the legal basis of contract fulfillment pursuant to Art. 6 (1) lit. b GDPR.
2.1 Data collected from learners
We collect the following learner data:
- Self-chosen nickname and email address (unless the institution uses SSO).
- Institutional affiliation and enrolled classes.
- Quiz answers, AI dialogue responses, discussion room posts, and chatbot interactions.
- Multiplayer game data including rounds, opponents, and outcomes.
- Learning metrics such as time to answer and favourites.
- Technical data including privacy policy acceptance, Firebase push identifiers, and app analytics from Apple and Google.
- Server access logs (IP address, date, time) are generated but not stored.
2.2 What LeadingEasy does with learning data
Learning data is used to identify users, enable login, award points, tailor the learning journey, and populate leaderboards.
Teachers receive course progress overviews for their classes.
Educational institutions may link usage data with grades or names for research and quality assurance where permitted by contract.
2.3 Data collected from teachers in the admin interface
Teacher accounts and authoring activity include:
- Self-chosen nickname, first and last name, email address, user status, and access rights.
- Course metadata: name, language, authors, support email, groups, and administrators.
- Course content: units, quizzes, AI dialogues, questions, explanations, images, and uploaded documents.
- All chatbot interactions and uploaded knowledge-base files.
3. Push Notifications
LeadingEasy uses Google Firebase and Firebase Cloud Messaging to deliver push notifications.
A pseudonymized push reference (Firebase installation ID) is stored for delivery.
Push notifications require consent under Art. 6 (1) (a) and Art. 45 (1) GDPR.
4. Microsoft Azure OpenAI
LeadingEasy uses the Azure OpenAI API to generate content from uploaded teaching materials. Only AI models hosted in Europe are used.
No personal data is transferred to OpenAI. Only provided teaching materials such as books are processed and not stored.
Processed data is not accessible to other customers, OpenAI, or used for OpenAI model training.
5. Where and how long your data is stored
Collected learning data and materials are stored in a central database in Switzerland (Exoscale, Oberengstringen).
Your data is kept until your profile is deleted. On deletion, all data linked to the profile is removed.
We take maximum efforts to secure your data under applicable law. In the event of a data breach we will identify, contain, and eradicate the incident, notify affected individuals and authorities as required, and take steps to prevent recurrence.
6. Your Rights
- Right to information about stored personal data.
- Right to correction of inaccurate data.
- Right to deletion of your profile and linked data.
- Right to data portability where applicable.
- Right to withdraw consent via account deletion or cookie settings.
7. Use of Cookies
7.1 Necessary cookies
These cookies are required for legitimate interest and core product operation:
- LeadingEasy consent management (cookie banner and settings).
- Product onboarding guidance.
- LeadingEasy session and authentication cookies.
7.2 Functional cookies
These services load only after explicit consent:
- Calendly
- Loom
- Sentry
- Segment
- Stripe
- PostHog
8. Who stands behind this?
LeadingEasy is operated for adaptive learning in DACH schools.
When you register directly, LeadingEasy is the data controller. When your school deploys LeadingEasy institutionally, your institution is typically the controller and LeadingEasy acts as processor.
Data protection enquiries: privacy@leadingeasy.com