Privacy Policy

What we collect

LoreAcademy stores the information an academy chooses to record: adult accounts (name, email), learner profiles (display name or alias, age band, guardian links), curriculum and lore content, session records, chronicles, and any media an academy uploads. We do not collect general medical or emergency records.

Who can see it

Every record belongs to exactly one academy and is protected by row-level security in the database. Staff see their academy; guardians see only the learners they are linked to; learners see only what has been shared with them. Platform operators cannot casually browse customer content — content access requires a specific, audited support grant.

Children’s information

Learner profiles are created and managed by a responsible adult. Guardians control photo, video, voice, and internal-sharing consent separately, and can withdraw any of them at any time. Consent changes are never automated by AI.

AI processing

Some features send academy content to our AI provider to draft or answer questions. See the AI disclosure for exactly what is sent and what is retained.

Retention, export, and deletion

Academy owners can export their academy’s data and request deletion from Academy Settings. Deleted academies enter a restoration window before permanent removal. Audit events are immutable and retained for security purposes.

Contact

Privacy questions can be sent to the address listed on your academy’s settings page, or to the operator of your academy.