Privacy policy · 隐私政策

In short. We collect only what we need to run Artifex for teaching and learning. We do not show advertising, we do not sell personal information and we do not build profiles of students. Students under 18 (or under a higher age where local law requires) use Artifex only with a guardian's consent. Questions: support@khundavid.com.

1. Who we are

Artifex is a platform for writing courses and learning with them. It has three parts:

• Artifex Studio, the website where teachers manage their courses;
• Course Studio, the app teachers install on their own computer to write courses;
• Artifex Learn, the website where students, guardians and teachers open courses and, as features arrive, take part in classes.

Artifex is operated by Arbella ("we", "us"), which is responsible for the personal information described here. You can reach us at support@khundavid.com.

This policy explains what personal information Artifex collects, why, who receives it, where it is kept, for how long, and what you can ask of us. It does not cover other companies' services that you choose to use with Artifex, such as a Google or Anthropic account; they have their own privacy policies.

Artifex is in early testing. Today it is used by invited teachers to write and publish courses, and courses can be opened on Artifex Learn. Classes, student accounts, scoring and guardian links are not available yet. Where this policy describes them, it says what we will do when they arrive, and we will update this policy before they do.

2. Who uses Artifex

• Teachers write and publish courses and teach classes with them.
• Students open courses and do their activities. Many students are children.
• Guardians (parents or others legally responsible for a student) can see their child's records and decide about consent.
• Schools and other organisations may arrange accounts for their teachers and students. When a school does so, it decides how Artifex is used in its classes, and we handle its students' information to provide the service to that school.

3. What we collect

Account information

Your display name, username, e-mail address and password. Passwords are stored only in a scrambled one-way form (a hash) that cannot be turned back into the password. When student accounts arrive, we will also ask for the year and month of birth, only to tell a user's age and whether a guardian's consent is needed. We do not ask for your full date of birth, a photo, an identity number, a home address or a phone number. Students without an e-mail address will get an account from their teacher or school with a placeholder address that receives no mail.

Sign-in with Google

If you choose to sign in with Google, Google tells us your name, your e-mail address, the address of your profile picture and your Google account identifier. We use them only to connect your Google sign-in to your Artifex account and to sign you in. We do not receive your Google password, and we do not get access to your Gmail, Drive, contacts or any other Google data. Signing in with Google does not create an account: an administrator must have created your Artifex account first.

Course content

The lessons, pages, images, media and other material teachers create or upload, the earlier saved versions of a course, and who saved each version and when. Course content is meant to be teaching material; please do not put students' personal information into it.

Learning records

Artifex does not keep learning records yet. When classes arrive, we will record what a student does in a course on Artifex Learn: which pages and activities they open, their answers and the work they hand in, and when; later also the results of checking answers (scores), completion and teachers' feedback. Nothing is recorded for visitors who open a public course without signing in.

Technical information

When you use Artifex, our servers and our hosting provider's load balancer record technical information about each request: your IP address, your browser's description of itself (user agent), the address requested, the date and time, and the result (logs). Course Studio connects to our servers only to sign you in and to save, update and publish your courses; it does not send us information about the rest of your computer.

Cookies

We use only the cookies needed for signing in: __Host-artifex_session, which keeps you signed in for up to 14 days; artifex_login, which protects a sign-in in progress from forgery and expires after 10 minutes; and the sign-in page's own cookies, which it needs to show the page, protect the form and remember your sign-in. We use no advertising, analytics or tracking cookies, and our pages contain no third-party tracking.

4. How we use it

• To provide Artifex: accounts and sign-in; storing, building and publishing courses; showing each course only to the people allowed to see it; keeping learning records for students, their teachers and their guardians.
• To keep Artifex secure: detecting and stopping misuse and investigating faults.
• To support you: answering what you write to us.
• To send service e-mails, such as invitations and password resets. We send no marketing e-mail.
• To meet legal obligations.

We do not show advertising, sell or rent personal information, build profiles of users for marketing, make automated decisions with legal or similarly significant effects on anyone, or use students' information to train AI models.

5. Children and guardians

A student under 18, or under a higher age where local law requires, may use Artifex only with a guardian's consent. The year and month of birth will tell us whether consent is needed.

• When student accounts arrive, a teacher or school creating a student's account will be asked to confirm that a guardian has agreed.
• The consent covers the records needed to teach: answers, work, completion and scores.
• Any further use, such as AI reading a student's records, voice or video recordings, or research, will happen only if a guardian turns it on. Each is off unless a guardian chooses otherwise; none of them exists yet.
• Guardians can review their child's information and records, ask us to correct or delete them, and withdraw consent. Withdrawing consent closes the child's account and deletes its records.

If you believe a child is using Artifex without the consent the law requires, write to us and we will delete the account.

6. Who receives information

We do not sell personal information. It is shared only as follows.

• Service providers that run Artifex for us, only for that purpose:
  • Amazon Web Services (AWS) hosts our servers and database in Tokyo, Japan;
  • Alibaba Cloud DirectMail (international service, in Singapore) sends our e-mails and receives each recipient's address and the message;
  • Google, if you choose to sign in with Google (section 3); Google handles that sign-in on its own systems under its own privacy policy.
• Anthropic, for teachers who use Claude. Course Studio lets a teacher work with Claude, Anthropic's AI assistant, on the teacher's own computer and under the teacher's own Claude account. The course material a teacher works on with Claude goes from that computer to Anthropic under that account, and Anthropic's terms and privacy policy and the teacher's account settings apply to it. Artifex does not send students' information or learning records to Anthropic or to any other AI provider. Teachers should not give Claude students' personal information.
• People inside Artifex, as the service is meant to work: members of a course see its content; a public course can be seen by anyone; the teachers of a class see the records of its students; a guardian sees their own child's records; a school sees the accounts and class records of its own teachers and students.
• When the law requires it, or when needed to protect the safety of people or of the service. Where we are allowed to, we tell the people concerned.
• If Arbella transfers the service to another organisation, this policy continues to apply to the information, and we will tell you before the transfer.

7. Where information is kept, and for how long

Artifex's servers and database are in Tokyo, Japan (AWS). When a course is published, its content is also processed on our own build computer in Thailand, on hardware we own; the build computer receives course content only, never learning records. E-mails we send pass through Alibaba Cloud in Singapore, and a Google sign-in is handled by Google on its own systems. Teachers also keep copies of their courses on their own computers. Your information may therefore be kept in a country other than your own; we protect it as this policy describes wherever it is.

• Account information: while the account exists; deleted within 30 days after it is closed, except what the law requires us to keep.
• Course content: while the course exists on Artifex. When a course that has classes is deleted, the version its students used and their records are kept so that students can still see their own work, unless deletion is asked for.
• Learning records: while the student's account exists. Students keep access to their own records. Records are deleted when the student or their guardian asks, or when the account is deleted.
• Logs: kept only as long as needed for security and fixing faults, normally no longer than 90 days.
• Backups: we do not currently keep backup copies, so information we delete is gone from our systems.

8. How we protect it

• Connections between your device and Artifex are encrypted (HTTPS).
• Passwords are stored only as one-way hashes.
• Private courses and learning records are shown only to the people allowed to see them; every request is checked.
• The database cannot be reached from the internet, and access to the servers is limited to a small number of authorised people.
• Course content is built in an isolated sandbox, on a separate computer whose network access is limited to the Artifex server.

No system is perfectly secure. If a security incident affects your information, we will tell you, and the authorities where the law requires, without undue delay.

9. Your rights

Depending on where you live, you may have the right to see the personal information we hold about you, to correct it, to delete it, to receive a copy in a common format, to object to or limit its use, and to withdraw consent. Guardians can use these rights for their children, and schools for the accounts they manage.

For now, write to support@khundavid.com, preferably from the e-mail address of the account concerned. We may need to confirm who you are. We answer within 30 days, free of charge. Teachers can edit their own courses and switch them between public and private themselves; to delete a course, write to us. You may also complain to the data protection authority where you live.

10. Changes to this policy

When we change this policy, we publish the new version on this page with a new effective date. Before an important change takes effect, we tell users by e-mail or by a notice in Artifex.

11. Contact

Arbella · support@khundavid.com

隐私政策（中文）

生效日期：2026 年 11 月 6 日

简要说明。我们只收集为教学和学习运行 Artifex 所必需的信息。我们不展示广告，不出售个人信息，也不对学生进行画像。未满 18 周岁（或当地法律规定的更高年龄）的学生，只有在监护人同意后才能使用 Artifex。如有问题，请写信至 support@khundavid.com。

1. 我们是谁

Artifex 是一个编写课程并用课程学习的平台，由三部分组成：

• Artifex Studio：教师管理课程的网站；
• Course Studio：教师安装在自己电脑上、用来编写课程的应用；
• Artifex Learn：学生、监护人和教师打开课程的网站，随着功能上线，也将用于参加班级学习。

Artifex 由 Arbella（下称"我们"）运营，并对本政策所述的个人信息负责。联系方式：support@khundavid.com。

本政策说明 Artifex 收集哪些个人信息、为什么收集、提供给谁、存放在哪里、保存多久，以及你可以向我们提出哪些要求。你选择与 Artifex 一起使用的其他公司的服务（例如 Google 或 Anthropic 账户）不在本政策范围内，它们有各自的隐私政策。

Artifex 目前处于早期测试阶段。现在，受邀的教师用它编写和发布课程，课程可以在 Artifex Learn 上打开。班级、学生账户、评分和监护人关联尚未提供。本政策中凡是描述这些功能的地方，说明的是它们上线时我们将如何做；在它们上线之前，我们会更新本政策。

2. 谁使用 Artifex

• 教师：编写和发布课程，并用课程给班级上课。
• 学生：打开课程并完成其中的活动。许多学生是儿童。
• 监护人（父母或其他对学生负有法定责任的人）：可以查看孩子的学习记录，并决定是否同意相关用途。
• 学校和其他机构：可以为本校教师和学生安排账户。在这种情况下，由学校决定 Artifex 在其班级中如何使用，我们处理该校学生的信息是为了向学校提供服务。

3. 我们收集哪些信息

账户信息

你的显示名称、用户名、电子邮箱和密码。密码只以无法还原的单向加密形式（哈希）保存。学生账户上线后，我们还将询问出生年份和月份，只是为了判断用户的年龄以及是否需要监护人同意。我们不要求提供完整的出生日期、照片、身份证件号码、家庭住址或电话号码。没有电子邮箱的学生，将由教师或学校为其创建账户，并使用一个不会收到任何邮件的占位地址。

使用 Google 登录

如果你选择使用 Google 登录，Google 会向我们提供你的姓名、电子邮箱、头像图片的地址和 Google 账户标识。我们只用这些信息把你的 Google 登录与 Artifex 账户关联起来并让你登录。我们不会获得你的 Google 密码，也无法访问你的 Gmail、云端硬盘、联系人或任何其他 Google 数据。使用 Google 登录不会创建账户：必须先由管理员为你创建 Artifex 账户。

课程内容

教师编写或上传的课时、页面、图片、媒体及其他材料，课程以前保存的各个版本，以及每个版本由谁、在何时保存。课程内容应当是教学材料，请不要在其中放入学生的个人信息。

学习记录

Artifex 目前还不保存学习记录。班级功能上线后，我们将记录学生在 Artifex Learn 上使用课程时的活动：打开了哪些页面和活动、作答内容和交上的作业，以及时间；以后还将包括答案的批改结果（分数）、完成情况和教师的反馈。未登录而打开公开课程的访客，我们不作任何记录。

技术信息

你使用 Artifex 时，我们的服务器以及托管服务商的负载均衡器会记录每次请求的技术信息：你的 IP 地址、浏览器的自我描述（用户代理）、所请求的地址、日期和时间，以及结果（日志）。Course Studio 只在为你登录以及保存、更新和发布课程时连接我们的服务器，不会向我们发送你电脑上其他内容的信息。

Cookie

我们只使用登录所必需的 Cookie：__Host-artifex_session，让你保持登录状态，最长 14 天；artifex_login，在登录过程中防止伪造，10 分钟后失效；以及登录页面自身的 Cookie，用于显示页面、保护登录表单和记住你的登录。我们不使用广告、统计分析或跟踪类 Cookie，我们的页面中也没有任何第三方跟踪。

4. 我们如何使用这些信息

• 提供 Artifex 服务：账户和登录；保存、构建和发布课程；只向有权查看的人展示课程；为学生、他们的教师和监护人保存学习记录。
• 保障 Artifex 的安全：发现和制止滥用，调查故障。
• 为你提供支持：回复你写给我们的信件。
• 发送服务邮件，例如邀请和重设密码。我们不发送营销邮件。
• 履行法律义务。

我们不会展示广告、出售或出租个人信息、为营销目的对用户进行画像、对任何人作出具有法律效力或类似重大影响的自动化决定，也不会用学生的信息训练人工智能模型。

5. 儿童与监护人

未满 18 周岁（或当地法律规定的更高年龄）的学生，只有在监护人同意后才能使用 Artifex。出生年月将让我们能够判断是否需要监护人同意。

• 学生账户上线后，教师或学校为学生创建账户时，将被要求确认已经得到监护人的同意。
• 该同意涵盖教学所需的记录：作答、作业、完成情况和分数。
• 任何其他用途，例如由人工智能读取学生的记录、语音或视频录制、研究等，只有在监护人开启后才会进行。这些用途在监护人选择开启之前一律关闭；目前这些功能都尚未提供。
• 监护人可以查看孩子的信息和记录，要求我们更正或删除，也可以撤回同意。撤回同意后，孩子的账户将被关闭，其记录将被删除。

如果你认为有儿童在未获得法律要求的同意的情况下使用 Artifex，请写信告诉我们，我们会删除该账户。

6. 信息提供给谁

我们不出售个人信息。只在以下情况下共享信息：

• 为我们运行 Artifex 的服务提供商，且仅用于这一目的：
  • 亚马逊云服务（AWS）：在日本东京托管我们的服务器和数据库；
  • 阿里云邮件推送（国际服务，位于新加坡）：发送我们的邮件，会收到每位收件人的地址和邮件内容；
  • Google：如果你选择使用 Google 登录（见第 3 节）；该登录由 Google 在其自己的系统上按其隐私政策处理。
• 使用 Claude 的教师与 Anthropic。Course Studio 让教师在自己的电脑上、用教师本人的 Claude 账户与 Anthropic 的人工智能助手 Claude 一起工作。教师与 Claude 一起处理的课程材料，会以该账户的名义从这台电脑发送给 Anthropic，并适用 Anthropic 的条款和隐私政策以及教师的账户设置。Artifex 不会把学生的信息或学习记录发送给 Anthropic 或任何其他人工智能服务商。教师不应把学生的个人信息提供给 Claude。
• Artifex 内部的相关人员，即服务本来的运作方式：课程成员可以看到课程内容；公开课程任何人都可以看到；班级的教师可以看到本班学生的记录；监护人可以看到自己孩子的记录；学校可以看到本校教师和学生的账户及班级记录。
• 法律要求时，或为保护人身安全或服务安全所必需时。在法律允许的情况下，我们会告知相关的人。
• 如果 Arbella 将本服务转让给其他机构，本政策继续适用于相关信息，我们会在转让前通知你。

7. 信息存放在哪里、保存多久

Artifex 的服务器和数据库位于日本东京（AWS）。课程发布时，其内容还会在我们自己位于泰国、由我们自有硬件运行的构建电脑上处理；这台电脑只接收课程内容，从不接收学习记录。我们发送的邮件经由位于新加坡的阿里云，Google 登录由 Google 在其自己的系统上处理。教师自己的电脑上也保存着其课程的副本。因此，你的信息可能存放在你所在国家以外的地方；无论存放在哪里，我们都按本政策所述加以保护。

• 账户信息：在账户存在期间保存；账户关闭后 30 天内删除，法律要求我们保留的除外。
• 课程内容：在课程存在于 Artifex 期间保存。删除一门已有班级的课程时，学生所用的版本和他们的记录会被保留，以便学生仍能查看自己的学习成果，除非有人要求删除。
• 学习记录：在学生账户存在期间保存。学生始终可以查看自己的记录。学生或其监护人提出要求时，或账户被删除时，记录将被删除。
• 日志：只在安全和排查故障所需的期间内保存，通常不超过 90 天。
• 备份：我们目前不保留备份副本，因此我们删除的信息即从我们的系统中消失。

8. 我们如何保护信息

• 你的设备与 Artifex 之间的连接经过加密（HTTPS）。
• 密码只以单向哈希形式保存。
• 私有课程和学习记录只向有权查看的人展示，每一次请求都会经过检查。
• 数据库无法从互联网访问，服务器的访问权限仅限于少数获得授权的人员。
• 课程内容在隔离的沙箱中构建，所用的是一台单独的电脑，其网络访问仅限于 Artifex 服务器。

没有任何系统是绝对安全的。如果发生影响你信息的安全事件，我们会及时通知你，并在法律要求时通知主管机关。

9. 你的权利

根据你所在地的法律，你可能有权查看我们持有的你的个人信息、更正信息、删除信息、以常用格式获得一份副本、反对或限制对信息的使用，以及撤回同意。监护人可以为孩子行使这些权利，学校可以为其管理的账户行使这些权利。

目前，请写信至 support@khundavid.com，最好使用相关账户的电子邮箱发送。我们可能需要确认你的身份。我们会在 30 天内免费答复。教师可以自行编辑自己的课程，并自行把课程设为公开或私有；如需删除课程，请写信给我们。你也可以向所在地的个人信息保护主管机关投诉。

10. 本政策的变更

本政策变更时，我们会在本页面发布新版本并注明新的生效日期。重要变更生效前，我们会通过电子邮件或 Artifex 内的通知告知用户。

11. 联系我们

Arbella · support@khundavid.com