Privacy Policy

We collect the following categories of information:

Account information. When you register, we collect your name, email address, and role (e.g., student, educator, or administrator). Authentication is handled through Amazon Cognito; passwords are managed by that service and are never stored by us in plaintext.

Course and learning content. Educators may upload course materials, documents, and other content. Students generate data by taking quizzes, submitting answers, and interacting with the AI tutor.

Usage and performance data. We collect quiz results, scores, response times, confidence ratings, engagement metrics, and other learning analytics generated as you use the Service.

Study records. If you are a student, we also keep which option you picked on the ungraded comprehension checks inside a study guide, so a lesson resumes where you left it; the questions you answered incorrectly, how many times, and when you later cleared them, which we use to serve you practice; and which in-app messages you dismissed, how, and when.

Replies to course messages. If you are a student, you can reply privately to a message or announcement your educator sends you in Leeteracy. We keep what you write, your educators' answers to you, when each was sent, and which replies you have read. Your course's educators (its owner and any co-instructors) see your replies; other students never do. You cannot delete a reply once it is sent. When you reply, we email the educator who wrote the message, including your reply in full and your name as the course roster shows it (your email address if no name is on file). When an educator answers you about a message that was also sent by email, we email you their answer in full, unless you have paused email or turned off course update emails. An email already sent stays in its recipient's mailbox.

Practice record. If you are a student, we record which questions a quiz of your own gave you, and when it first did. A quiz of your own is a practice or focus quiz in your personal study space, or a weak-topics practice quiz, a missed-question session, or a follow-up quiz made for you in a class. Such a quiz comes with the answers to its questions, so we record the question once, when it is put into the quiz, whether or not you go on to take it. The record holds no answers and nothing you typed. It is not shown to you in the Service, and it is included in the copy of your data you can download.

Course roster details. If you are a student, your educator may record your registrar section for a course and whether you are marked as an auditor. Both are shown on the course roster, and auditors are left out of class averages.

School-issued student ID. If you are a student in a course that asks for it, we ask you to type in the ID your school gives you. Your course's educators can see it, and use it to match their own exam results to your Leeteracy account.

AI interactions. Messages you send to the AI tutor, your quiz answers and confidence ratings, and prompts used to generate questions are processed to provide the Service and may be transmitted to our AI processing providers (see Section 4). If you use the voice tutor, your speech is streamed to a speech-processing provider in real time to hold the conversation; we do not record or store your audio.

Payment information. If you purchase a subscription, payment is handled by our payment processor, Stripe. We receive and store your subscription plan and status and Stripe account identifiers; your card details are collected by Stripe directly and never touch our systems.

Help and support requests. When you ask the in-app help or Leeti a question that our documentation cannot answer, we store your question as you typed it, together with the screen you asked it from, so we can find out where our documentation is missing or unclear. Questions we can answer are not stored. These records are readable only by an administrator — never by your instructor or by other students — and are deleted after 180 days. If we have no answer at all, the question is also sent to our internal support channel so we can write the missing documentation. That copy does not include your name or email address — it identifies you only by a reference number.

Technical information. We automatically collect certain information such as your IP address, browser type, device information, and log data. We use browser storage (including local storage) to keep you signed in and to remember your preferences.

Sign-in and subscription records. We record which sign-in method or subscription step occurred, whether it failed and why, and when. These records hold no name, email address, or free text. If an administrator investigates a sign-in or subscription problem on your account, an AI-written summary of those records is kept for the support case. Both are deleted after 365 days.

Product analytics and session replay. To understand how the Service is used and where people get stuck, your browser sends usage information — which screens you open, what you click, how long questions take, your answers as option numbers, your confidence ratings, and errors the app runs into — to our analytics provider, PostHog. The same provider also records a replay of your session that we can play back to see how a screen behaved. Everything you type, and all text the page displays, is hidden in your browser before anything is sent, so a replay shows the layout of the page and where you clicked rather than its contents; only buttons and navigation labels stay readable. Recording starts when a page loads, which means it can begin before you sign in. PostHog identifies you by your internal account number and your role — never your name or email address — and it never receives your AI tutor messages or any answer you write out, only how long they were. It processes this data on our instructions and for us alone.

We use the information we collect to:

• Provide, operate, maintain, and improve the Service;
• Create and manage your account and authenticate your access;
• Generate quizzes, grade responses, deliver AI tutoring, and produce learning analytics;
• Personalize your experience and provide adaptive learning support;
• Communicate with you about your account, updates, and support requests;
• Monitor usage, detect and prevent fraud or abuse, and ensure security;
• Comply with legal obligations and enforce our terms.

Where applicable law (such as the EU/UK GDPR) requires it, we process your personal information on the following legal bases: performance of a contract (to provide the Service you request), your consent (which you may withdraw at any time), our legitimate interests (such as securing and improving the Service), and compliance with legal obligations.

The Service uses artificial intelligence to generate questions, grade responses, and power the AI tutor. To provide these features, relevant content and prompts — including your quiz answers, confidence ratings, and AI tutor messages — are processed by the following cloud AI providers: Amazon Bedrock (Anthropic Claude and Amazon Titan models, hosted on AWS) for question generation and checking, study content, tutor chat, answers to help questions, grading written answers, the feedback written on your quiz results, and the text embeddings behind search (over course materials, help questions, and tutor messages); Anthropic (the maker of the Claude models, through its own API) as a backup: it receives requests only while Amazon Bedrock is failing, and receives none of your content while Bedrock is working — during a failover that can include any of the content above, including written answers sent for grading and pages of files you upload — and those requests are processed in the United States; OpenRouter (which routes to Anthropic Claude models), which receives your content only if we have to roll back from Amazon Bedrock; OpenAI for the real-time voice tutor, which streams your speech directly to OpenAI for live conversation and transcription; and ElevenLabs for converting tutor responses and explanations into audio. We do not include your name or email address in the content we send to AI providers. These providers process data on our behalf under their own security and privacy commitments and do not use your content to train their foundation models except as permitted by their terms. If we use OpenRouter, it sends our requests only to Anthropic's own endpoint, with fallbacks to other providers disabled, and instructs the provider not to retain or train on them; we have not enabled zero-data-retention routing. We have not arranged zero data retention with Anthropic.

Content moderation is not currently enabled: no tutor chat message or voice transcript is sent to any provider for screening. If we turn moderation back on, tutor chat messages would be screened by our AI provider.

Separately from the AI providers above, we use PostHog for product analytics and session replay. What it receives, and how replays are masked in your browser before they are sent, is described under “Product analytics and session replay” in Section 1.

The email newsletter on our public site. Our public “What's new” page offers a monthly note about what we have shipped. That signup form is hosted by Tally, a third party: the “Sign up” button takes you to Tally's own website, so you are on their site and covered by their privacy notice before you type anything, and what you enter is stored by Tally rather than in the Service. The form asks for your email address, and optionally whether you are a student or an educator and what you would like us to build next. We are notified of each signup by email, so a copy of what you submit reaches us that way. Signing up is entirely optional, is not part of the Service, and has nothing to do with your account — you do not need one, and we do not connect a signup to any account you may already have. We use what you give us here to send you those product updates.

Course videos played from YouTube. When you open a course video that is hosted on YouTube, your browser loads YouTube's video player directly from YouTube, which is a Google service. YouTube then receives your IP address, details about your browser, any YouTube or Google cookies your browser already holds, the fact that the player is embedded in the Service, and your playback activity. Nothing is sent to YouTube from our servers, and we do not pass it your name, your email address, or any education record. YouTube handles what it receives under its own terms and privacy policy, not on our instructions.

We host our infrastructure on Amazon Web Services, in the United States. The AWS services that handle your information are Amazon Cognito (authentication), Amazon RDS (our database), Amazon S3 and CloudFront (file storage and delivery, including course materials educators upload, files students upload to their own study spaces, and cached AI-generated audio), Amazon SES (sending you email such as notifications, including the full text of a reply to a course message, and password resets), Amazon Textract (reading the text out of documents your educator uploads), and Amazon CloudWatch (application logs and monitoring). Your information is stored and processed on this infrastructure.

We do not sell your personal information. We may share information as follows:

• With educators and institutions. If you are a student, the educators and administrators associated with your course can see your individual, named performance data — including your quiz results and answers, scores, confidence ratings, learning analytics, and engagement metrics such as time spent and activity patterns. This visibility is a core part of how the Service works. For each question in a course, they can also see how many students have already been given it by a quiz of their own. They see a number, not a list of students, though in a very small class a number can point to a person.
• What you ask LeetLearn. If you are a student, the questions you type to LeetLearn in a course, in its chat or through Ask, are shown to that course's educators exactly as you typed them, without your name or any other detail of who asked, together with a weekly summary our AI writes from the class's questions. Your educators can see which week a question was asked in, its topic and where in Leeteracy you asked it; they are not shown the day or time, though while a week is under way an educator who looks more than once can tell which questions are new. In a very small class, what a question says can still point to you, so leave out anything you would not want your educator to read. We keep the question text for 180 days.
• With other students in your class. If you are a student in a class, the questions you generate for your own practice can be given to your classmates when they build a quiz for their own practice. They are given the question, with its answer and explanation. They are not shown your name, and nothing about how you answered it. A question generated from a file you uploaded can be shared this way; the file itself is not shared. Questions you import are not shared. The shared copies are kept if you later change or delete your own copy of the question. When your account is deleted, a shared copy that no classmate was given is deleted; one a classmate was already given is kept with your identity removed and is not given to anyone else, so that your classmates' results do not change. Your classmates cannot see your submissions, scores, or analytics.
• With service providers. We share information with vendors who perform services on our behalf (such as cloud hosting, AI processing, product analytics and session replay, payment processing, email delivery, and operational messaging) under confidentiality obligations.
• With our operations and support tools. We use Slack internally to receive notifications about activity on the platform. Those notifications identify students by a reference number, not by name, and do not include scores. They can say which study tools a student used — a concept review, flashcards, a match game, the AI tutor, or a voice session and how long it lasted — but never what the student typed or said. There is one deliberate exception: if you send us a support request or tell us a help answer was unhelpful, that message reaches Slack together with your name and email address, because we need them to reply to you. If you report a problem with a quiz question, the reason you picked, the question and its answer choices with the correct answer marked, the answer you had selected, and anything you typed reach Slack as well — but identified only by a reference number and whether you are a student or an educator, not by your name or email.
• For legal reasons. We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Leeteracy, our users, or others.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We retain your personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Detailed behavioral telemetry (such as per-question timing and navigation events) is automatically deleted after at most 365 days. Help questions our documentation could not answer are deleted after 180 days. Where your course has LeetLearn conversation memory turned on, your LeetLearn conversations are saved so you can return to them, and each is deleted 180 days after it starts; you can delete them sooner yourself. Sign-in and subscription records and support summaries are deleted after 365 days; if your account is deleted first, the sign-in and subscription records are kept without your identity until then. When other information is no longer needed, we take reasonable steps to delete or anonymize it.

Your missed-question queue, your answers to study-guide comprehension checks, and your in-app message dismissals have no time limit and are removed when your account is deleted. Your practice record has no time limit either: it is kept after you delete the quiz and after you are removed from a course, and is removed when your account or the question is deleted. Your registrar section and auditor flag stay with your course roster entry, including after you are removed from the course, and are removed when your account is deleted. Your school-issued student ID stays with your account until you replace it, and is removed when your account is deleted. Replies to course messages, and your educators' answers, have no time limit and are removed when the message, the course, or your account is deleted.

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, managed authentication, and rate limiting on all API endpoints. Protection against brute-force sign-in attempts is provided by Amazon Cognito's throttling and our web application firewall. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, to request data portability, and to withdraw consent. To exercise these rights, contact us at admin@leeteracy.ai. We will respond in accordance with applicable law. Note that some requests may be directed through the educator or institution that administers your account.

Download or delete your data. If you are a student, you can download a machine-readable copy of your data or delete your account yourself from Settings → Privacy & data. While you are a member of a class, or own one, other than your own study spaces, the app declines in-app deletion, names those classes, and tells you where to send the request — your institution, or us. Educators and other users can request an export or account deletion at admin@leeteracy.ai.

What deletion removes. When your account is deleted, your education records — submissions, scores, telemetry, tutor conversations, voice sessions, replies to course messages, and course memberships — are permanently removed, and your sign-in identity is deleted from Amazon Cognito. Your own personal study spaces, and the files you uploaded to them, are deleted with it. AI usage counters are kept with your identity removed, for billing. In a class, questions you generated that a classmate was already given in a practice quiz are kept with your identity removed and are not given to anyone else; questions of yours that no classmate was given are deleted. If you are an educator, the answers you wrote to students' replies stay in those students' conversations, no longer linked to you, as the course messages you wrote do. Analytics records held by PostHog are not deleted by this process.

If you created courses for other people. Account deletion pauses until those courses have been deleted — by you, or by us on request to admin@leeteracy.ai — because deleting a course also removes its students' records. Courses are never left without an owner.

Email preferences. You can manage your email notification preferences in your account settings: pause all, daily study reminder, new quizzes, follow-up quizzes, and course updates. Educators can also turn off the emails about a reported question and about a student's reply.

Leeteracy is offered to college students, through their institutions and directly. It is not directed to children under the age of 13 (or the applicable age in your jurisdiction) and is not offered for use in K-12 settings, and we do not knowingly collect personal information from children under that age. We do not ask for your age, so if you believe a child has provided us with personal information, please contact us and we will take appropriate action, including deleting it. If such a student is enrolled in a course run by a school, that school provides the necessary consent and acts as the responsible party for that data.

Your information may be processed and stored in the United States or other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we implement appropriate safeguards for such transfers.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at admin@leeteracy.ai.