Privacy Policy
Last updated: July 4, 2026
1. What we collect
Account data (name, email, password hash, avatar), study activity (practice sessions, answers, scores, study plans), content you submit (essays, chat messages), subscription and payment status from our payment providers (we never store full card numbers), and basic technical data such as device and log information.
2. How we use your data
To operate the service: personalize practice difficulty, score essays, generate study plans and predictions, process payments, provide support, and keep the platform secure. We do not sell your personal data.
3. AI processing
Essays, chat messages, and practice data are processed by AI providers (such as OpenAI) to generate feedback, tutoring responses, and questions. Only the content needed for the feature is sent, and it is not used by us to build advertising profiles.
4. Sharing
We share data only with service providers needed to run Lapi (hosting on Vercel, database and authentication on Supabase in the EU, AI providers, payment processors), with your institution if your account is managed by one, or when required by law.
5. Data storage and retention
Data is stored in the European Union (Supabase, Germany). We keep your data while your account is active. When you delete your account, your profile, study history, essays, and chat data are permanently deleted; records we must keep for legal or accounting reasons may be retained as required.
6. Your rights
You can access and update your profile in Settings and delete your account at any time. Depending on your location (e.g. GDPR), you may also have rights to data portability, restriction, and objection — contact us to exercise them.
7. Security
We use industry-standard measures: encrypted connections (TLS), encrypted storage, row-level security on all user data, and scoped access for staff. No system is perfectly secure; notify us immediately if you suspect unauthorized access to your account.
8. Children
Lapi is not directed at children under 13 (or the higher minimum age in your country). We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. Material changes will be announced in the app or by email before they take effect.
10. Contact
Privacy questions or requests? Contact us at support@lapi.app.