Privacy Policy

We collect the following categories of information:

Account information. When you register, we collect your name, email address, and role (e.g., student, educator, or administrator). Authentication is handled through Amazon Cognito; passwords are managed by that service and are never stored by us in plaintext.

Course and learning content. Educators may upload course materials, documents, and other content. Students generate data by taking quizzes, submitting answers, and interacting with the AI tutor.

Usage and performance data. We collect quiz results, scores, response times, confidence ratings, engagement metrics, and other learning analytics generated as you use the Service.

AI interactions. Messages you send to the AI tutor, your quiz answers and confidence ratings, and prompts used to generate questions are processed to provide the Service and may be transmitted to our AI processing providers (see Section 4). If you use the voice tutor, your speech is streamed to a speech-processing provider in real time to hold the conversation; we do not record or store your audio.

Payment information. If you purchase a subscription, payment is handled by our payment processor, Stripe. We receive and store your subscription plan and status and Stripe account identifiers; your card details are collected by Stripe directly and never touch our systems.

Help and support requests. When you ask the in-app help or Leeti a question that our documentation cannot answer, we store your question as you typed it, together with the screen you asked it from, so we can find out where our documentation is missing or unclear. Questions we can answer are not stored. These records are readable only by an administrator — never by your instructor or by other students — and are deleted after 180 days. If we have no answer at all, the question is also sent to our internal support channel so we can write the missing documentation. That copy does not include your name or email address — it identifies you only by a reference number.

Technical information. We automatically collect certain information such as your IP address, browser type, device information, and log data. We use browser storage (including local storage) to keep you signed in and to remember your preferences.

Product analytics and session replay. To understand how the Service is used and where people get stuck, your browser sends usage information — which screens you open, what you click, how long questions take, your answers as option numbers, your confidence ratings, and errors the app runs into — to our analytics provider, PostHog. The same provider also records a replay of your session that we can play back to see how a screen behaved. Everything you type, and all text the page displays, is hidden in your browser before anything is sent, so a replay shows the layout of the page and where you clicked rather than its contents; only buttons and navigation labels stay readable. Recording starts when a page loads, which means it can begin before you sign in. PostHog identifies you by your internal account number and your role — never your name or email address — and it never receives your AI tutor messages or any answer you write out, only how long they were. It processes this data on our instructions and for us alone.

We use the information we collect to:

• Provide, operate, maintain, and improve the Service;
• Create and manage your account and authenticate your access;
• Generate quizzes, grade responses, deliver AI tutoring, and produce learning analytics;
• Personalize your experience and provide adaptive learning support;
• Communicate with you about your account, updates, and support requests;
• Monitor usage, detect and prevent fraud or abuse, and ensure security;
• Comply with legal obligations and enforce our terms.

Where applicable law (such as the EU/UK GDPR) requires it, we process your personal information on the following legal bases: performance of a contract (to provide the Service you request), your consent (which you may withdraw at any time), our legitimate interests (such as securing and improving the Service), and compliance with legal obligations.

The Service uses artificial intelligence to generate questions, grade responses, and power the AI tutor. To provide these features, relevant content and prompts — including your quiz answers, confidence ratings, and AI tutor messages — are processed by the following cloud AI providers: OpenRouter (which routes to Anthropic Claude models) for question generation, grading, feedback, and tutor chat; Amazon Bedrock (Anthropic Claude models, hosted on AWS) for text embeddings, question validation, and the feedback written on your quiz results, and as our fallback provider for the features above; OpenAI for the real-time voice tutor, which streams your speech directly to OpenAI for live conversation and transcription; and ElevenLabs for converting tutor responses and explanations into audio. We do not include your name or email address in the content we send to AI providers. These providers process data on our behalf under their own security and privacy commitments and do not use your content to train their foundation models except as permitted by their terms.

Separately from the AI providers above, we use PostHogfor product analytics and session replay. What it receives, and how replays are masked in your browser before they are sent, is described under “Product analytics and session replay” in Section 1.

The email newsletter on our public site. Our public “What's new” page offers a monthly note about what we have shipped. That signup form is hosted by Tally, a third party: the “Sign up” button takes you to Tally's own website, so you are on their site and covered by their privacy notice before you type anything, and what you enter is stored by Tally rather than in the Service. The form asks for your email address, and optionally whether you are a student or an educator and what you would like us to build next. We are notified of each signup by email, so a copy of what you submit reaches us that way. Signing up is entirely optional, is not part of the Service, and has nothing to do with your account — you do not need one, and we do not connect a signup to any account you may already have. We use what you give us here to send you those product updates.

We host our infrastructure on Amazon Web Services, in the United States. The AWS services that handle your information are Amazon Cognito (authentication), Amazon RDS (our database), Amazon S3 and CloudFront (file storage and delivery), Amazon SES (sending you email such as notifications and password resets), Amazon Textract (reading the text out of documents your educator uploads), and Amazon CloudWatch (application logs and monitoring). Your information is stored and processed on this infrastructure.

We do not sell your personal information. We may share information as follows:

• With educators and institutions. If you are a student, the educators and administrators associated with your course can see your individual, named performance data — including your quiz results and answers, scores, confidence ratings, learning analytics, and engagement metrics such as time spent and activity patterns. This visibility is a core part of how the Service works.
• With service providers. We share information with vendors who perform services on our behalf (such as cloud hosting, AI processing, product analytics and session replay, payment processing, email delivery, and operational messaging) under confidentiality obligations.
• With our operations and support tools. We use Slack internally to receive notifications about activity on the platform. Those notifications identify students by a reference number, not by name, and do not include scores. There is one deliberate exception: if you send us a support request, report a problem, or tell us a help answer was unhelpful, that message reaches Slack together with your name and email address, because we need them to reply to you.
• For legal reasons. We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Leeteracy, our users, or others.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We retain your personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Detailed behavioral telemetry (such as per-question timing and navigation events) is automatically deleted after at most 365 days. Help questions our documentation could not answer are deleted after 180 days. When other information is no longer needed, we take reasonable steps to delete or anonymize it.

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and managed authentication. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, to request data portability, and to withdraw consent. To exercise these rights, contact us at admin@leeteracy.ai. We will respond in accordance with applicable law. Note that some requests may be directed through the educator or institution that administers your account.

Leeteracy may be used in educational settings that include minors. Where the Service is used by students under the age of 13 (or the applicable age in your jurisdiction), it is made available through and under the direction of a school or educator that provides the necessary consent and acts as the responsible party for that data. We do not knowingly collect personal information directly from children without appropriate consent. If you believe a child has provided us with personal information without proper consent, please contact us so we can take appropriate action.

Your information may be processed and stored in the United States or other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we implement appropriate safeguards for such transfers.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at admin@leeteracy.ai.