Privacy and Cookie Policy

This Privacy Notice explains how personal data is handled when schools, teachers, Coordinators and students use Limitless. Limitless is operated by Beyond IQ. Schools may use Limitless as part of their educational provision. The exact responsibilities of the school and Beyond IQ are also governed by the agreement and data-processing arrangements between them.

Contact: info@beyond-iq.com

• Account and school information, such as name, email address, school, class/group, year/grade and user role.
• Student learner-profile information, such as interests, strengths, preferred ways of working, motivations, challenge preferences and project preferences.
• Teacher-set working levels and educational settings.
• Assignments, suggested projects, project plans, check-ins, reflections, feedback, assessments and other project records.
• Project files and evidence uploaded to the platform.
• Share Board and collaboration content where those features are used.
• Technical, security and activity records needed to operate and protect the service.
• Safeguarding reports submitted by a student through Report a concern, including the category and any details the student chooses to add.
• Automatically created safeguarding alerts. When the safety system identifies a genuine serious safeguarding concern in student input, the platform automatically creates a safeguarding alert/report for the school Coordinator. Beyond IQ receives the notification or summary according to the platform's existing routing. Notification emails never contain the student's disclosure.

Limitless uses AI to support project-based learning. Student-facing AI is labelled Limitless AI. Students below the 14+ threshold use structured AI-powered project tools rather than open-ended AI conversation. Students at the 14+ threshold and above may use open-ended Explore with Limitless AI, but the conversation remains bounded to projects and learning.

Limitless AI is not a teacher, counsellor, therapist or safeguarding professional. It does not determine whether a student is gifted, diagnose a student, determine school placement or make significant educational decisions.

Before AI requests are sent, Limitless applies a privacy filter designed to remove known identifying information such as email addresses, phone-number patterns and known student/teacher/school names. No automated filter is perfect, so students are also asked not to enter private information about themselves or others.

Only information relevant to the educational request should be sent to the AI. Student-uploaded files are not sent to OpenAI. The full learner profile is not automatically sent with every request.

The production AI connection is configured/reported as Zero Data Retention for the AI requests used by Limitless. Limitless should periodically verify this configuration. Some AI-generated content is saved only when it forms part of a project or saved idea; ordinary Mentor, Stuck and Too easy conversations are not retained by Limitless after the screen closes.

Student messages are checked for serious safety concerns before entering the normal project-AI flow. AI responses are also checked before they are displayed. If a genuine serious safeguarding concern is detected in student input, the normal project response is stopped, previous AI results in that interaction are cleared, an automatic safeguarding alert is routed to the school Coordinator and the Beyond IQ admin is notified according to the implemented routing. The student is encouraged to speak to a trusted adult and may additionally use Report a concern.

A genuine serious safeguarding trigger automatically creates/routes a safeguarding alert for authorised review; the student does not need to submit a separate report for staff to be alerted. Report a concern remains a separate voluntary route through which the student can submit a category and, if they wish, additional details.

A safeguarding report submitted by a student is stored separately from ordinary project data. For ordinary student safeguarding concerns, the school's Limitless Coordinator can securely review the report. Beyond IQ normally receives only limited routing information. Reports about something the AI said or did may also be accessible to Beyond IQ so the platform issue can be investigated. If the school routing is unavailable, Beyond IQ may receive the report as a fallback.

Sensitive report text is not included in notification emails. Authorised users sign in to Limitless to read it. Access and review actions are logged.

Safeguarding reports are retained in Limitless for two years from the date the report is submitted, unless the responsible school instructs earlier deletion or a documented legal requirement requires longer retention.

• Authorised staff at the student's school according to their role and school permissions.
• Beyond IQ personnel where necessary to operate, secure and support the service and where their access is authorised.
• Lovable/Lovable Cloud for application hosting and infrastructure.
• OpenAI through the platform's AI connection for the text needed to provide AI functions and safety classification.
• Transactional email infrastructure reported as Resend/AWS SES for sending platform emails.

Some service providers may process data outside the EEA. Appropriate contractual or recognised transfer mechanisms should be maintained where required.

Ordinary student educational/project data is retained while the student participates in Limitless. When participation ends, the end date is recorded explicitly. After two years, the account appears for retention review and may be permanently deleted. Authorised Coordinators/admins may delete ordinary student data earlier where appropriate.

Permanent deletion removes the student's ordinary account, project/profile records and physical uploaded files. Minimal non-content audit information may remain in anonymised form. Database backups may contain pre-deletion data until the relevant rolling backup expires; processor information supplied during this review indicates approximately 7--14 days. Deleted-file disaster-recovery remnants may persist for a limited provider lifecycle reported as approximately 14--30 days.

Transactional email delivery metadata may remain for a limited operational period reported as up to approximately 30 days. These infrastructure periods are controlled by the relevant processors and may change.

Individuals have rights under applicable data-protection law, which may include access, correction, deletion, restriction, objection and data portability, depending on the circumstances and lawful basis. For school-managed educational data, requests may need to be handled through the school. Users may also contact Beyond IQ at info@beyond-iq.com. Complaints may be made to the relevant data-protection authority, including the Dutch Autoriteit Persoonsgegevens where applicable.

This notice should be updated when the platform's processing materially changes. The effective date should be displayed on the published version.