Privacy Policy

Last updated 4 October 2026

1. Who We Are

This Privacy Policy explains how [legal name of the business operator] ("we", "us") collects, uses and shares personal information through Loume (the "Service"). Questions can be sent to [contact email].

2. Information We Collect

Account details: your email address, your name if you choose to provide it, and your password, which is stored in hashed form so we cannot see it. If you sign in with Google, Google shares your name and email address with us.

Study activity: the messages you send and the replies you receive, files you upload to a chat (images or PDFs), short summaries of your conversations, and your progress through guided lessons.

Subscription information: your subscription status and dates, and an identifier from Stripe. Card details are entered on Stripe's pages and never reach our servers.

Technical information: IP address, browser and device type, and usage counts such as messages sent per day, collected through our hosting and security systems.

Preferences: settings such as your study mode and dark mode, stored in your browser, and an optional marketing-email choice made when you sign up.

3. How We Use Your Information

We use your information to provide the Service, including sending your messages to AI providers so they can produce answers; to manage your account, subscription and billing; to keep the Service secure, prevent abuse and apply usage limits; to provide support and fix problems; and, if you opted in, to send product updates, which you can unsubscribe from at any time.

We do not sell your personal information, and we do not use your conversations for advertising. Our team can access stored conversations when needed to provide support, fix problems or investigate misuse.

4. Who We Share It With

We use service providers to run the Service, and they process information on our behalf: Supabase (database, sign-in and file storage), Vercel (hosting), Anthropic (the AI model that writes answers, which receives your messages and uploaded files), OpenAI (which turns your message text into numerical embeddings used to find relevant syllabus content), Stripe (payments and billing), Resend (account emails such as sign-in and verification), and Google (only if you choose to sign in with Google).

We may also disclose information where the law requires it.

5. Overseas Processing

Our providers operate internationally. Your information may be stored or processed outside Australia and outside your own country, including in India and the United States. We choose providers that publish security and privacy commitments.

6. Children and Students

Many users are students under 18. You must be at least 13 to create an account, and we do not knowingly collect personal information from children under 13. If you think a child under 13 has signed up, contact us and we will delete the account.

Parents and guardians can contact us at any time to ask what information we hold about their child or to have it deleted. We collect only what is needed to run the Service and we do not use students' information for advertising.

7. Cookies and Local Storage

We use cookies to keep you signed in and browser storage to remember your settings, such as study mode and dark mode. We do not use advertising cookies. If we add analytics tools in future, we will update this policy.

8. How Long We Keep It

Conversation history, summaries and guided progress for a chapter are kept until you use Clear Chat for that chapter, which deletes them, or ask us to delete your account. Files you upload are kept until you ask us to delete them or delete your account.

Subscription and billing records are kept for as long as the law requires, for example for tax purposes. When we delete an account, we remove its personal information from our systems, except where we must keep records by law.

9. Your Choices and Rights

You can ask us to access, correct or delete the personal information we hold about you by emailing [contact email]. You can cancel your subscription at any time from your dashboard, and you can unsubscribe from marketing emails using the link in them.

If you are in Australia and are unhappy with how we handle your information, you can contact the Office of the Australian Information Commissioner (oaic.gov.au). If you are elsewhere, you may have rights under your local privacy law, and we will respect them.

10. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections and access controls on our databases. No online service is perfectly secure, so please keep your password private.

11. Changes to This Policy

We may update this policy from time to time. The date at the top shows when it was last changed, and we will notify active subscribers of material changes.