Privacy Policy

1. What Information Do We Collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register for the Services, use features of the Services, submit session content, contact us, or otherwise interact with us.

Examples of personal information we may collect include:

• name;
• email address;
• username;
• contact preferences;
• authentication data and account identifiers;
• purchase or subscription status;
• session content you choose to submit through the Services.

Sensitive information

When necessary and with your consent or as otherwise permitted by applicable law, we may process session audio and video that you choose to submit through the Services, along with certain derived performance information generated from those sessions.

AI-related submitted content

If you use our AI-powered analysis features, we may process derived session content needed to provide those features. Depending on the feature, this may include your transcript, selected topic or prompt, performance scores or rubric data, user-submitted text, feedback-related text, and a session identifier.

Raw video and raw audio are processed in our cloud infrastructure and are not sent to our third-party AI providers for session analysis.

Third-party login data

We may provide you with the option to register or sign in using Apple or Google. If you choose to do so, we may receive limited profile and authentication information from that provider, such as your name, email address, and account identifier, as permitted by the provider and your settings.

Application data

If you use our mobile application, we may collect certain information if you grant permission, including:

• Mobile Device Access: access to features such as your camera and microphone;
• Mobile Device Data: device type, operating system, app version, device identifiers, IP address, and diagnostic information;
• Push Notifications: information needed to send app notifications if you enable them.

Information automatically collected

We may automatically collect certain technical information when you use the Services, such as your IP address, device characteristics, operating system, language preferences, app usage information, crash data, and other diagnostic information.

2. How Do We Process Your Information?

We process personal information to:

• create, authenticate, and manage user accounts;
• deliver the Services you request;
• record and analyze submitted communication sessions;
• respond to support requests and account inquiries;
• send administrative messages about your account, purchases, subscriptions, or policy changes;
• maintain security, detect abuse, and prevent fraud;
• understand usage patterns and improve the Services;
• comply with legal obligations;
• generate presentation feedback, summaries, score explanations, and coaching suggestions using AI-powered features.

3. What Legal Bases Do We Rely On?

We process personal information only when we have a valid legal basis to do so under applicable law, including consent, performance of a contract, compliance with legal obligations, protection of rights, fraud prevention, and legitimate business interests.

If you are located in Canada, this section applies to you. You may withdraw consent where we rely on consent, subject to legal and operational limits.

We may also disclose de-identified information for approved research or statistics purposes, subject to appropriate confidentiality and governance controls.

4. When and With Whom Do We Share Your Personal Information?

We may share personal information with service providers who perform services on our behalf and who need access to that information to support the Services.

These categories may include:

• cloud computing providers;
• data storage providers;
• analytics providers;
• payment and subscription processors;
• AI service providers.

AI service providers

If you use our AI-powered features, we may share derived session content and related metadata with third-party AI service providers that process data on our behalf, including OpenAI and Anthropic.

Depending on the feature, the data shared may include your transcript, selected topic or prompt, score or rubric data, user-submitted text, feedback-related text, and a session identifier.

Raw video and raw audio are not sent to OpenAI or Anthropic for session analysis.

We share this information to generate feedback, summaries, coaching suggestions, score explanations, and other requested AI outputs.

We require our service providers, including AI service providers, to protect personal information in a manner consistent with this Privacy Notice and to provide the same or equal protection of user data described here.

Other sharing situations

• Business transfers: in connection with a merger, financing, acquisition, or sale of assets.
• Business partners: where needed to provide jointly offered services or promotions.
• Other users: if you choose to post or share content in public or community-facing features of the Services.

Key service providers

Depending on the feature used, Lectaura may use third-party service providers for cloud hosting and storage, AI-powered analysis, authentication, subscription or payment processing, analytics, and push notifications.

Key providers may include:

• Amazon Web Services (cloud hosting, storage, and processing infrastructure);
• OpenAI (AI-powered analysis of derived session content);
• Anthropic (AI-powered analysis of derived session content);
• Apple and Google (authentication, sign-in, and platform services where applicable);
• subscription, payment, analytics, and notification providers used to operate the Services (IAP and Google in App).

We require service providers that process personal information on our behalf to use that information only for authorized purposes and to protect it in a manner consistent with this Privacy Notice and applicable law.

5. Cookies and Tracking Technologies

We may use cookies and similar technologies to support core functionality, maintain account security, remember preferences, understand usage patterns, and improve the Services.

Where applicable, you may be able to control these technologies through your browser or device settings.

6. Third-Party Logins

If you choose to register or sign in using Apple or Google, we may receive limited information from that provider to authenticate your account, such as your name, email address, and account identifier, as permitted by the provider and your settings.

We use this information only to create, authenticate, and manage your account and as otherwise described in this Privacy Notice.

7. How Long Do We Keep Your Information?

We retain personal information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, and support legitimate business operations.

When we no longer need personal information, we delete it, anonymize it, or securely isolate it until deletion is possible.

8. How Do We Keep Your Information Safe?

We use reasonable technical and organizational safeguards designed to protect personal information. However, no system can guarantee absolute security, and transmission of data over the internet is at your own risk.

Data location and cross-border processing

Lectaura uses cloud and service providers that may store or process personal information in Canada, the United States, or other jurisdictions where our service providers operate.

As a result, personal information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, national security authorities, or other government authorities in accordance with applicable law.

Where personal information is processed outside the user’s home jurisdiction, Lectaura uses contractual and organizational measures intended to protect the information in a manner consistent with this Privacy Notice.

9. Do We Collect Information From Minors?

We do not knowingly collect personal information from children under 18 years of age, or the equivalent age specified by law in the user’s jurisdiction, without appropriate authorization where required by law.

If you believe we have collected data from a minor inappropriately, contact us at spencer@lectaura.com.

10. What Are Your Privacy Rights?

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and in some cases to object to or restrict certain processing.

Where we rely on consent, you may withdraw consent, subject to legal and operational limitations.

You may also update account information through the Services where available or contact us using the details below.

11. Controls for Do-Not-Track Features

At this time, no uniform technology standard for recognizing and implementing Do-Not-Track signals has been finalized. As a result, we do not currently respond to browser Do-Not-Track signals.

12. U.S. State Privacy Rights

If you are a resident of certain U.S. states, you may have additional rights under applicable state privacy laws, including the right to know what personal information we collect, use, disclose, or retain; the right to access, correct, delete, or obtain a copy of your personal information; and, in some circumstances, the right to opt out of certain processing activities.

To exercise those rights, contact us at spencer@lectaura.com with the subject line “Privacy Request,” or use the request methods described in Section 17 below.

We may need to verify your identity before completing a request and may retain certain information where required for legal compliance, fraud prevention, dispute resolution, backup integrity, or enforcement of our agreements.

13. Artificial Intelligence-Based Products

We offer AI-powered features that generate communication feedback and session analysis.

Before we send personal data to a third-party AI provider for an AI-powered feature, we provide an in-app disclosure that explains what data will be shared, which provider will receive it, and why, and we ask for the user’s permission before sending that data.

To provide AI-powered feedback, Lectaura first processes submitted session recordings in our cloud infrastructure to generate derived materials for analysis.

Depending on the feature, the data sent to our third-party AI providers may include your transcript, selected topic or prompt, score or rubric data, extracted analysis text, user-submitted text, feedback-related text, and a session identifier.

Raw video and raw audio are not sent to OpenAI or Anthropic for session analysis.

If you do not grant permission for this sharing, new recordings and features requiring AI analysis may be unavailable.

Personal information, customer inputs, and derived session content submitted through Lectaura’s AI-powered features are not used by Lectaura to train general AI models.

Where Lectaura uses third-party AI providers to process derived session content on our behalf, we configure and use those services in a manner intended to prevent customer inputs and personal information from being used to train the providers’ general models.

If this processing configuration changes materially, we will update this Privacy Notice and seek any additional consent required by applicable law before using personal information for any materially different purpose.

Users may decline or withdraw consent for AI-powered analysis in the app’s Privacy & AI settings. If consent is declined or withdrawn, certain AI-powered analysis features may be unavailable.

14. Privacy Rights / Controls

You can manage AI-related consent and privacy choices in the app under Profile > Privacy & AI, where available, or by contacting us at spencer@lectaura.com.

You may also request deletion of submitted content and related outputs, subject to legal, security, fraud-prevention, backup, and operational retention requirements.

To request access to, correction of, deletion of, or export of your personal information, or to withdraw AI-related consent, contact us at spencer@lectaura.com with the subject line “Privacy Request,” or use the in-app settings and account controls where available.

We may need to verify your identity before completing your request. We may also retain certain information where required for legal compliance, fraud prevention, dispute resolution, backup integrity, or enforcement of our agreements.

15. Do We Make Updates to This Notice?

Yes. We may update this Privacy Notice from time to time. The updated version will be indicated by the revised date at the top of this page.

16. How Can You Contact Us About This Notice?

Compelled disclosure

If Lectaura receives a legally binding request for personal information, such as a subpoena, warrant, court order, or other compulsory legal demand, we may disclose information where required by applicable law.

Where legally permitted and operationally feasible, Lectaura will seek to limit the scope of the disclosure and may provide notice to the affected user or institutional customer before disclosure.

17. How Can You Review, Update, or Delete Your Data?

Subject to applicable law, you may request access to, correction of, or deletion of your personal information by contacting us at spencer@lectaura.com.

This page should be kept consistent with your in-app disclosures, App Store Connect privacy answers, and actual backend data flows.

To request access to, correction of, deletion of, or export of your personal information, or to withdraw AI-related consent, contact us at spencer@lectaura.com with the subject line “Privacy Request,” or use the in-app settings and account controls where available.

We may need to verify your identity before completing your request. We may also retain certain information where required for legal compliance, fraud prevention, dispute resolution, backup integrity, or enforcement of our agreements.