In short: This policy explains how LamppAI handles personal data on our website, the learner app, Teaching Studio, and our LMS integrations.
LamppAI ("LamppAI", "we", "us") is an AI practice service available at lamppai.com. Learners rehearse real conversations with an AI Teacher in Text, Audio, or Video. Educators build AI Teachers in Teaching Studio. Academies and companies add that practice to their courses, learning management systems (LMS), and teams.
This Privacy Policy explains what personal data LamppAI collects, including data we receive from Google when you sign in with Google; how we use, share, store, and protect it; how long we keep it; and the choices and rights you have. It applies to our website, the learner app, Teaching Studio, and our LMS integrations (together, the "Service"), and should be read with our Terms of Service.
If you pay LamppAI directly, LamppAI decides how your account and practice data is used to run the Service, and is the contact at team@lamppai.com. When an academy, school, or company gives you access, that organization decides why the Service is used for its learners. For that data, we follow the organization's instructions, and its own privacy notice also applies. Its written agreement with us, including a data processing addendum, controls how long we keep that data and when we return or delete it.
When a school uses the Service for its students, LamppAI acts as a school official for the school's legitimate educational interest, under the school's control. A US school's student records are handled for its educational purpose under its control. The school gives any required notices and permissions and sends only what the practice needs.
The Service is not for identifiable health, financial, or government-ID information about a real person, or recordings of real conversations, unless that organization's written agreement with us allows it. If it is allowed, we process it only on the organization's instructions.
In short: Your name and email, Google account data if you sign in with Google, what you write and say in practice, the files you add, and basic technical data.
Information you give us
- Account details: your name, email address, language, time zone, and the job or field you are practicing for.
- Preferences: appearance, preferred AI Teacher voice and look, and learning goals.
- Uploads: files you add to a practice, such as a CV or a job description, and the materials educators add to an AI Teacher.
- Demo requests: your name, organization, work email, and LMS when you ask to book a demo.
Information created when you practice
- Transcripts: the text of your conversations with an AI Teacher. In Audio and Video, your speech is transcribed to text.
- Memory: things your AI Teacher may remember to help you, such as a goal or a recurring difficulty. Memory is only used after you confirm it.
- Learning records: learning plans, review items, skill levels, feedback, and progress.
Information from Google and other sign-in providers
- Google: if you sign in with Google, we receive your Google account ID, name, email address, and whether Google has verified that email. See Google user data for exactly how we handle it.
- Apple and Microsoft: if you sign in with Apple or Microsoft, we receive your name, email address, and an account identifier.
Information from others
- Your LMS: when you open LamppAI from a course, your LMS shares your name, email, user ID, and course role. We remove your name and email from the stored launch claims. If your account is not linked yet, we keep the email on that launch until you link it or the launch expires (8 hours). We also keep your LMS user ID, and may keep the name and email the LMS sent, on your LMS identity so we can recognize you next time. Course roster lookups keep the LMS user ID, name, and role, not email.
- Payments: Stripe tells us the status of your subscription and purchases. We never see or store your full card number.
Information collected automatically
- Security and service logs: IP address, the page or feature requested, and the time. We store a one-way hash of your IP address with sign-in codes to stop abuse.
- Cookies and local storage: to keep you signed in and remember settings, described below.
Cookies and local storage
This website sets no cookies. The cookies below are set by the LamppAI web app when you use it. We use only the cookies the Service needs to work. We do not use advertising, analytics, or cross-site tracking cookies.
| Cookie | Purpose | Lasts |
|---|---|---|
| ny_app_session | Keeps you signed in on the web | 7 days |
| ny_csrf | Protects forms against cross-site request forgery | Same as your session |
| ny_oauth_correlation | Completes Google, Apple, or Microsoft sign-in | 10 minutes |
| ny_referral | Remembers an invite code until you sign up | 30 days |
| ny_lms_device | Keeps you signed in inside your LMS course | 30 days |
The mobile app does not set ny_app_session. It keeps a sign-in token on the device for 30 days.
The app also uses your browser's local storage for settings like appearance, sidebar state, and your last practice mode. Blocking these cookies will stop sign-in from working.
In short: If you sign in with Google, we receive only your name, email address, and Google account ID, and use them only to create your account and sign you in.
LamppAI offers Sign in with Google using Google OAuth. This section explains exactly which Google permissions LamppAI requests, what Google user data it accesses, and how that data is used, stored, shared, protected, and deleted.
Google permissions we request
| Permission (scope) | What it gives LamppAI | Why we need it |
|---|---|---|
| openid | Your Google account ID | To recognize you each time you sign in |
| Your email address, and whether Google has verified it | To create your account and contact you about it | |
| profile | Your name | To show your name in the app |
We do not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google service. We never receive your Google password, and we do not keep Google access or refresh tokens.
How we use Google user data
- To create your LamppAI account, link it to your Google account, and sign you in securely.
- To show your name in the app, and to let your AI Teacher greet you by your first name.
- To send you emails about your account and the Service.
We use Google user data only to provide and improve the features you use in LamppAI. We do not use it for advertising, sell it, use it to determine creditworthiness or for lending, or use it to develop, improve, or train AI or machine-learning models.
How we store, share, and protect Google user data
Your Google account ID, email address, and name are stored with your LamppAI account, as described in Data storage and security. We do not sell, rent, or trade Google user data. We share it only with the service providers that need it to run the features you use: OpenAI receives your first name during a practice session, Resend receives your email address to deliver service emails, and Stripe receives your email address if you make a purchase. None of them may use it to train their models or for advertising. See Data sharing.
Retention and deletion of Google user data
We keep your Google account ID, email address, and name for as long as your LamppAI account is open, and delete them when your account is closed. To close your account and delete this data, email team@lamppai.com. You can also remove LamppAI's access to your Google account at any time from your Google Account permissions page. This stops Sign in with Google but does not delete your LamppAI account.
Limited Use
LamppAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In short: To create your account, sign you in, run your practice, give feedback, bill you correctly, and keep the Service safe. Not for advertising.
We use personal data only for the purposes below. Where the GDPR or similar laws apply, each purpose relies on the legal basis shown.
| Purpose | What we use | Legal basis |
|---|---|---|
| Create your account and sign you in | Name, email, Google or other sign-in data | Performing our contract with you |
| Run AI practice sessions | Transcripts, live audio, uploads, confirmed memory, first name | Performing our contract with you |
| Give feedback and track progress | Transcripts, learning records | Performing our contract with you |
| Bill you and pay creators | Plan, purchases, email, Stripe identifiers | Contract; legal obligation |
| Report results to your academy or company | Scores and completion, as described in Data sharing | Contract with your organization; legitimate interests |
| Keep the Service secure and prevent abuse | Logs, hashed IP addresses, audit records | Legitimate interests |
| Send sign-in codes and service emails | Email address | Performing our contract with you |
| Answer demo requests | Demo form details | Legitimate interests |
We do not sell personal data, share it for cross-context behavioral advertising, or use it to build advertising profiles.
AI Teachers, voice, and model training
Every AI Teacher is an AI, including one modelled on a real educator, and it says so plainly. To answer you, the AI Teacher sends your messages, relevant confirmed memory, your first name, and text drawn from your uploads to our AI provider.
- Voice: in Audio and Video, your voice streams directly from your device to our AI provider to be transcribed and answered in real time. We do not record or store the audio.
- Video: in Video, an avatar provider draws your AI Teacher's face from its spoken reply. If you turn on your camera, the self-view stays on your device. It is not sent to us or our providers, and it is not recorded.
- Live lessons: if you turn on your camera, microphone, or screen share in a live lesson with a person, that media is sent through LiveKit to the other person in the lesson. We do not record or store it.
- Replays: when a replay re-voices your earlier part, it is an AI reconstruction from the transcript, labelled as such, not a recording.
Model training. We do not use your conversations, memory, uploads, or Google user data to train AI models. Our AI providers process this data under API terms that do not permit them to use it to train their models. Material that educators add to an AI Teacher is also excluded from model training unless the educator explicitly allows it.
In short: We never sell your data. We share it only with service providers that help run LamppAI, with organizations that give you access, and when the law requires.
We do not sell, rent, or trade personal data, and we do not share it with advertisers or data brokers. We share it only as described here.
Service providers
These companies process personal data on our behalf, only to provide the Service, under contracts that restrict how they use it. They may not use it for their own purposes, including advertising or training their AI models.
| Provider | What they do | Data they receive |
|---|---|---|
| GoDaddy | Hosts our servers, database, and file storage | All data stored by the Service |
| OpenAI | AI Teacher replies, live voice, transcription, speech, and feedback | Messages, live audio, confirmed memory, text from uploads, your first name |
| HeyGen (LiveAvatar), LemonSlice | Video avatars in Video mode | Your AI Teacher's spoken replies |
| LiveKit | Real-time media for video avatars and live lessons | The AI Teacher's audio and video. In a live lesson, the camera, microphone, and screen share you choose to send |
| Stripe | Payments, subscriptions, and creator payouts | Email, billing details, payment method, purchase history |
| Resend | Sign-in codes and service emails | Email address and message content |
| Google, Apple, Microsoft | Optional sign-in | Sign-in request; they return your name and email |
People who can see your practice
- Educators and creators see where their learners struggle across sessions. They do not see your transcripts.
- Academies receive your grades or scores in their LMS when a course uses LamppAI. Faculty see an individual case only after you agree to share it.
- Companies that pay for team practice see a scored recap and whether you passed. They do not see recordings or full transcripts. A manager may be emailed if a practice is marked "not yet" twice in a row.
- Our staff may open a short-lived, read-only view of an account to give support. Access to transcripts or memory requires a recorded reason and is time-limited. Every staff access is logged.
Legal reasons and business transfers
We may disclose information if the law requires it, or to protect the safety and security of our users and the Service. If LamppAI is part of a merger, acquisition, or sale of assets, personal data may transfer as part of it; this policy will continue to protect it, and we will tell you.
International transfers
Our servers are in the United States, and some providers process data in the United States and other countries. Where data leaves the European Economic Area, the United Kingdom, or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
In short: Your data is stored on servers we operate in the United States, protected by encrypted connections, strict access controls, and logged staff access.
Where your information is stored
- Account details, Google user data, transcripts, memory, learning records, and uploaded files are stored in our database and file storage, on servers we operate in the United States, hosted by GoDaddy.
- Payment card details are stored by Stripe, never on our servers.
- Audio and video of AI Teacher sessions are not stored. In AI Teacher Video, the camera self-view stays on your device. In a live lesson, camera, microphone, and screen share you turn on are sent live through LiveKit and are not stored.
How we protect it
- All connections to the Service are encrypted in transit with HTTPS (TLS).
- The sign-in cookie cannot be read by scripts on the page. The cookie that protects forms can be read by the page, so the app can prove a submission came from your session.
- There are no passwords to leak: you sign in with a one-time email code or a trusted sign-in provider, and we do not keep Google access tokens.
- Credentials that academies give us to connect their LMS are stored encrypted, and IP addresses linked to sign-in codes are stored only as one-way hashes.
- Access to personal data is limited to the staff who need it. Staff accounts require a second factor, and every staff access is logged.
- Service providers receive only the data they need, under contracts that require them to protect it.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as the law requires.
In short: We keep your data while your account is open. Delete learning data yourself in the app, or email us to delete your whole account.
How long we keep information
| Information | How long we keep it |
|---|---|
| Account details and Google user data | Until your account is closed |
| Transcripts, memory, uploads, learning plans | Until you delete them, or your account is closed |
| Billing records | As long as tax and accounting laws require, without your name or email after your account is closed |
| Security and audit records | As long as needed to protect accounts and investigate abuse, without your name or email after your account is closed |
| Demo requests | As long as needed to follow up with your organization |
How to delete your information
- Delete learning data yourself: Account → Privacy → Delete conversations and memory. This removes conversation text, memory, and uploads from your account. Your account and purchases stay.
- Delete your whole account: email team@lamppai.com from the email address on your account. We verify the request and delete your account, including your Google user data, within 30 days.
- Disconnect Google: remove LamppAI from your Google Account permissions page at any time.
When your account is deleted, billing and audit records that the law requires us to keep are retained without your name or email address.
If an academy, school, or company gave you access, its written agreement with us, including a data processing addendum, controls how long we keep that organization's learner data and when we return or delete it.
In short: You can access, correct, download, and delete your information. Most of it you can do yourself in the app; for the rest, email us.
- Access and download: Account → Privacy → Download a copy of your learning data gives you a JSON file with your account, memory, conversations, and file details.
- Correct: update your name, job, language, and time zone in Account → Profile and Account → Language & time. To change your email address or correct anything else, email us.
- Delete: delete learning data in Account → Privacy, or email us to delete your whole account. See Data retention and deletion.
- Manage memory: confirm, edit, or forget anything your AI Teacher remembers.
- Withdraw Google access: remove LamppAI from your Google Account permissions at any time.
For your security, downloading and deleting in the app require a code sent to your email, and are done on the web.
Depending on where you live, you may also have the right to port your data, to object to or restrict how we use it, and to withdraw consent. To use any of your rights, email team@lamppai.com. We will verify your request and respond within 30 days, or sooner if the law requires. We will not treat you differently for using your rights.
If you are in the EEA, UK, or Switzerland, you can also complain to your local data protection authority. If your account comes from an academy or company, we may refer your request to that organization.
In short: You must be at least 13. Learners under 18 need permission from a parent, guardian, or their school.
The Service is not for children under 13, and we do not knowingly collect their personal data. Learners between 13 and 18 may use the Service only with permission from a parent, guardian, or the school or academy that gives them access. A school that enrolls a learner under 18 is responsible for the permission it must get.
If you believe a child under 13 has given us personal data, email team@lamppai.com and we will delete it.
In short: If we change something important, including how we use Google user data, we will tell you before it takes effect.
We may update this policy as the Service changes. The date at the top shows the latest version. If a change materially affects how we use your personal data, including Google user data, we will tell you by email or in the app before it takes effect.
If you pay LamppAI directly, LamppAI decides how your account and practice data is used to run the Service. For privacy questions, requests, or complaints, including anything about Google user data, email team@lamppai.com. Please include the email address on your account so we can find it. We respond within 30 days. If an academy, school, or company gave you access, we may refer your request to that organization.
