Privacy Policy

Last Updated: January 2026

        Our Privacy Standard: McFLAI AS prioritizes European data sovereignty. We utilize localized infrastructure and European-hosted AI models to ensure your data is governed by EEA regulations.
    

This Privacy Policy describes how McFLAI AS ("the Company", "We", "Us") collects, uses, and protects your information. By using our Pathfinder platform, you consent to the data practices described in this policy.

1. Infrastructure & Data Residency

We leverage a secure, European-centric cloud architecture to host our services:

Hosting & File Storage: Hosted on IONOS SE servers located in Germany.
Runtime Database & Chat Storage: We use Firebase (Google Cloud) to store user profiles and real-time chat histories. This data is strictly stored in European Data Regions (e.g., Frankfurt/Belgium).
AI Computation: Generative AI features are powered by Mistral and Teuken LLMs via IONOS infrastructure located within the European Union.

2. Data Collection & Usage

Personal Identifiers

To provide access and manage user accounts, we collect:

Name and Email address (via Google or Microsoft Authentication).
Institutional or School affiliation.

Technical Logging ("Flight Recorder")

Our application includes a local debugging tool called a "Flight Recorder." This tool captures a rolling log of your last 100 interactions (such as page views and clicks) to assist in technical support. This data is only transmitted to our Firebase database if you proactively click "Submit Feedback." If no feedback is submitted, these logs remain on your local device and are cleared upon session end.

3. Artificial Intelligence & Curriculum Data

AI Integrity

We use AI to support educational outcomes while maintaining strict privacy boundaries:

No Training: Your inputs and personal data are never used to train or improve the underlying AI models (Mistral/Teuken).
Contextual Accuracy: We connect to official governmental APIs including Norway (Udir) and Finland (ePerusteet) to ensure AI responses align with national curriculum standards.

4. Third-Party Services

We do not sell your data. We share information only with the following essential processors:

IONOS: Cloud infrastructure and AI model hosting.
Google/Firebase: Authentication and runtime data storage.
Microsoft: Authentication services.

5. Institutional Compliance & Children's Privacy

As an EdTech provider, McFLAI often acts as a Data Processor for schools or municipalities (the Data Controllers). We do not knowingly collect data from children under the age of 13 without appropriate authorization from the educational institution or legal guardian, in accordance with national laws in Norway.

6. Your Rights

Under the GDPR, you have the right to access, correct, or delete your personal data. You may also request a copy of your chat history or ask us to stop processing your data.

7. Contact Information

For privacy inquiries or to exercise your data rights, please contact:

McFLAI AS
Huldreveien 6J, 0781 Oslo, Norway
Email: support@crafting-tomorrow.eu