Privacy Notice

Data the service handles

• Identity and account data: email address in Amazon Cognito, a random account identifier, account status, and policy-acceptance timestamps.
• Learning data: plans, sources, lessons, modules, Challenge Me questions and feedback, chats, notes, links, uploads, worksheets, and related-learning suggestions.
• Service records: credit entries, generation jobs, model/token/cost metadata, safe error categories, request identifiers, and short-lived server logs.

Why and where it is processed

The data is used to provide the requested learning service, authenticate accounts, prevent abuse, diagnose failures, control costs, and honor export or deletion requests.

The private beta is hosted by AWS in the EU Stockholm region, including Cognito sign-in, the database, file storage, and encrypted backups. When AI generation is available, the prompts and learning material needed for a request are sent through OpenRouter to the selected AI model provider, currently OpenAI or Anthropic. Photos you upload are sent the same way so the model can read them; this includes photographed coursework, which may show a child’s handwritten work. OpenRouter is configured to route requests only to providers that do not retain prompts, but a request may be processed outside the EU, including in the United States. These vendors act under their applicable commercial and data-processing terms.

Do not submit information about another person unless you have a lawful reason and their permission where required.

Retention and account deletion

Learning files are kept while the account is active and removed when in-product deletion completes. Cognito identity data is deleted through the signed-in account flow.

Server logs, including metadata-only AI request logs, are retained for 30 days. Encrypted database and file backups are kept for 7 days, so deleted data may remain in a protected backup until that cycle ends.

The private beta retains pseudonymous credit, generation-job, and model-call accounting rows for integrity. This limitation is disclosed for the small invite-only private beta; a specific retention, anonymization, and deletion rule must be approved and implemented before broader invitations or any paid release.

Your choices

The Account page provides a machine-readable export and confirmed deletion. You may also contact the operator to request access, correction, restriction, or to raise an objection or complaint.

The intended legal bases and any international-transfer safeguards require professional review before broader invitations or any paid release.

Contact and concerns

Questions, access or correction requests, safety reports, and privacy concerns can be sent to support@loqary.com.

Do not include passwords, authentication tokens, or unnecessary sensitive personal information in a report.