Legal
Privacy Policy
public.legal.lastUpdated: March 18, 2026
Introduction
This Privacy Policy is provided by Laude (Company Number: [COMPANY_NUMBER], registered office: [REGISTERED_ADDRESS]) ("we", "our" or "us") for use of our AI-powered study platform and associated services ("Services").
We take your privacy very seriously. Please read this policy carefully as it contains important information on how and why we collect, store, use and share your personal data. It also explains your rights and how to contact us or the relevant regulator if you have a complaint.
Our collection, storage, use and sharing of your personal data is regulated by the UK General Data Protection Regulation ("UK GDPR"). We are the controller of personal data obtained via the Services.
What This Policy Applies To
This Privacy Policy relates to your use of the Services only — including our web application and any associated APIs or interfaces we operate. The Services may link to or rely on other services owned by trusted third parties, who may gather information about you under their own separate privacy policies. Please consult those policies as appropriate.
Personal Data We Collect
The personal data we collect depends on how you use the Services:
| Category | Detail |
|---|---|
| Identity & account data | Name, email address, username, profile picture — provided via Google OAuth. Account type and status. |
| Study content | Notes, nodes, drawings, uploaded files (PDF, images), flashcards, exams and any other content you create or upload through the Services. |
| AI interaction data | Text prompts submitted to AI features (summarise, chat, exam generation). Voice audio during Voice Tutor sessions (temporarily stored for transcription, then deleted). Rensei mastery scores derived from your performance. |
| Billing data | Subscription plan, billing history and payment status. Full payment card details are processed by Stripe — we do not store them. |
| Device & usage data | IP address, browser type, operating system, device identifiers, pages visited, features used, click patterns, error logs and performance data. |
| Preferences | Theme, language, notification settings and other preferences you configure within the Services. |
| Communications | Messages you send to our support team, feedback, bug reports and any other direct correspondence with us. |
If you do not provide personal data we ask for where it is required, we may be unable to provide you with certain Services or features.
How Your Personal Data Is Collected
We collect personal data:
- Directly from you — when you sign up, create or edit content, update your profile, contact support or submit feedback.
- Automatically — through usage analytics (PostHog), error logging and device data collected as you use the Services.
- Via cookies — see our Cookie Policy for full details of the cookies we use.
How and Why We Use Your Personal Data
Under data protection law, we can only use your personal data if we have a proper reason. The table below explains what we use your data for and the lawful basis we rely on.
| What we use your data for | Lawful basis |
|---|---|
| Create and manage your account | Contract performance |
| Store, sync and display your study content | Contract performance |
| Process AI requests (summarisation, flashcard generation, Voice Tutor, Rensei) | Contract performance |
| Process subscription payments and payouts via Stripe | Contract performance; legal obligation |
| Send transactional emails (account notifications, password resets) | Contract performance; legal obligation |
| Provide customer support and respond to enquiries | Contract performance; legitimate interests |
| Monitor performance, fix bugs, maintain security and improve the Services | Legitimate interests |
| Analytics and product improvement (usage patterns, A/B testing) | Legitimate interests |
| Prevent fraud, abuse and enforce our Terms | Legitimate interests; legal obligation |
| Send marketing communications about Laude features and updates | Consent; or PECR soft opt-in where permitted |
| Comply with legal and regulatory obligations | Legal obligation |
| Business transactions (merger, acquisition, restructuring) | Legitimate interests (data anonymised where possible) |
Marketing
We may send you email marketing about Laude features, updates and promotions. We will always ask for your consent before doing so, except where you were given the option to opt out when you signed up and did not do so.
You can opt out at any time by:
- Using the unsubscribe link in any marketing email
- Going to Settings → Notifications within the Services
- Contacting us at privacy@laude.study
We will never sell your personal data to third parties for marketing purposes.
Who We Share Your Personal Data With
We routinely share personal data with service providers who help us operate the Services:
- Google Cloud Platform — AI processing (Vertex AI / Gemini), file storage (GCS), application hosting (Cloud Run). Subject to Google Cloud Data Processing Addendum.
- Stripe — payment processing. Subject to Stripe's Privacy Policy.
- Resend — transactional email delivery.
- PostHog — usage analytics (subject to your consent).
- Professional advisers — lawyers, accountants and auditors, bound by confidentiality obligations.
- Law enforcement, courts and regulators — where we are legally required to do so.
- Business transactions — in connection with a merger, acquisition or restructuring; data anonymised where possible, recipients bound by confidentiality.
We only allow service providers to handle your personal data where we are satisfied they take appropriate measures to protect it and are subject to contractual obligations limiting their use of that data.
How Long Your Personal Data Will Be Kept
- Active accounts: data retained while your account is active
- Deleted accounts: 30-day grace period, then permanent deletion
- Voice recordings: deleted immediately after each session ends
- Logs: retained for 30 days for debugging and security
- Backups: retained for 90 days
- Anonymised analytics: retained indefinitely for product improvement
Following the end of the applicable retention period, we will permanently delete or anonymise your personal data.
Transferring Your Personal Data Outside the UK
We do transfer personal data outside the UK (primarily to the United States, where Google Cloud servers are located). We comply with UK data protection laws and ensure adequate safeguards are in place, including Standard Contractual Clauses where required under the UK GDPR.
We will notify you of any material changes to transfer destinations in accordance with the "Changes to this privacy policy" section below.
Your Rights
Under UK data protection law, you generally have the following rights, which you can usually exercise free of charge:
- Access: Request a copy of your personal data
- Rectification: Require us to correct any mistakes in your personal data
- Erasure: Require us to delete your personal data in certain circumstances
- Restriction: Require us to restrict use of your personal data in certain circumstances
- Portability: Receive your personal data in a structured, machine-readable format
- Object: Object to direct marketing at any time, and to other processing based on legitimate interests
- No automated decisions: Not be subject to decisions based solely on automated processing that significantly affect you — we do not make such decisions
To exercise any of these rights, contact us at privacy@laude.study with sufficient information to identify yourself and the right you wish to exercise.
For further information on your rights, visit the ICO website.
Keeping Your Personal Data Secure
We implement appropriate technical and organisational measures to protect your personal data, including:
- AES-256-GCM encryption for sensitive data at rest
- HTTPS/TLS encryption for all data in transit
- Authentication via secure OAuth 2.0 (Google)
- Rate limiting and abuse prevention
- Access controls and audit logging
- Regular security reviews and dependency updates
We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
How to Complain
If you have any concerns about our use of your personal data, please contact us first at privacy@laude.study — we hope we can resolve any issues.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.
Changes to This Privacy Policy
We may change this Privacy Policy from time to time. When we make significant changes we will notify you via the Services or by email.
How to Contact Us
- Privacy enquiries: privacy@laude.study
- General support: support@laude.study
- Data Protection Officer: dpo@laude.study
This Privacy Policy should be read alongside our Terms & Conditions and Cookie Policy.