Privacy

About this notice

This first version describes the features available today. Lotl's AI study features are still in development. The current app does not send your notes to an AI model.

What we collect and why

• Your name, email, username, profile image if supplied, and sign-in details let us create and secure your account. Password accounts store a password hash. If you connect Google or Microsoft, we receive profile and account information from that provider and store the credentials needed for the connection.
• Your profile page, at lotlearn.app/u/ followed by your username, shows your name, profile image, the month you joined, your practice streak, and the badges you have earned. Choose who can see it in privacy settings: only you, your friends, or everyone. New profiles are visible to friends. Public profiles can be seen without an account and can appear in search engines, which may keep copies after you make yours private.
• Your courses, text notes, and saved note revisions let you keep and edit study materials. These materials are private to your account in the app.
• Feedback includes your name, email, message, and the page you sent it from. Administrators can review it and add internal notes to investigate problems and improve the app.
• Session information can include your IP address, browser information, and sign-in times. We use authentication and security checks to maintain sessions and protect the service.

Account information is needed to use signed-in features. Study materials and feedback are information you choose to provide. Avoid adding sensitive information you do not need for your studies.

Services that process data

Cloudflare hosts the app and its database and provides Turnstile security checks. Resend receives your email address, name, and message content to deliver account verification and password-reset emails. Google or Microsoft handles sign-in when you choose that provider. These services process the information needed for their part of the service.

Cookies and browser storage

Cookies keep you signed in and remember your last sign-in method. A sidebar cookie remembers whether your sidebar is open for seven days. Your browser's local storage saves your theme preference until you change it or clear that storage.

You can clear cookies and local storage in your browser settings. This can sign you out and reset your preferences. Cloudflare Turnstile also processes browser and device signals to check for automated abuse on authentication forms.

Keeping and deleting data

Your account and study materials remain stored until deleted. Editing a note creates a saved revision, so replacing text does not erase earlier versions. Deleting a course removes its notes and revisions. Deleting your account removes its account records, sessions, courses, and notes from the app's database.

Feedback is kept separately. Deleting your account does not delete your feedback, the name and email recorded with it, or administrators' review notes. Retention periods for feedback, service logs, and provider backups have not yet been published.

Your choices and rights

In general settings, you can update your name, username, and email. In account settings, you can manage connected sign-in providers and delete your account. In privacy settings, you can choose who sees your profile and whether other students can find you. You can also delete courses from your dashboard.

Depending on the law that applies to you, you may have rights to access, correct, erase, or receive a copy of your personal data, restrict its use, or object to processing. You may also complain to your local data protection authority, such as the CNIL in France.

While signed in, use the Feedback button to contact the team about your data. A public privacy contact for people without an account is still to be added.

Details still to be completed

This notice still needs the operator's legal identity and contact details, the legal basis for each use of data, retention periods, and details of any international data transfers and their safeguards. We will update this page as those details and the service develop.