Privacy Policy

Lore ("we", "us") operates from Amsterdam, the Netherlands. We are the data controller for the personal data we process about you. For any privacy question or to exercise your rights, contact chris@lore.ai.

Lore is intended for users aged 16 or older. We do not knowingly collect data from anyone under 16. If you believe a minor has created an account, contact us and we will delete it.

We only collect what is needed to run the service:

• Account data: email address and display name.
• Study material you upload: documents, notes, images.
• Learning activity: quiz answers, scores, streaks, progress.
• Technical data needed to run the service: session cookies, basic server logs, device/browser info.
• Optional profile data you choose to add: bio, avatar choice, preferred study mode.

We process personal data only for these purposes and on these legal bases:

• Provide the service (lessons, Oracle, account features) — performance of a contract.
• Keep accounts secure, prevent abuse, fix bugs — legitimate interests.
• Comply with legal obligations (e.g. tax for paid plans) — legal obligation.
• Aggregate, anonymous product analytics — legitimate interests; no profiling that produces legal effects.

We do not sell your personal data and we do not share it for cross-context behavioral advertising.

All personal data and uploaded materials are stored on servers located in the European Union. Where a sub-processor processes data outside the EU (for example, an AI inference provider), we rely on the European Commission's Standard Contractual Clauses and additional safeguards required by GDPR Chapter V.

We share personal data only with the limited set of vendors needed to run Lore, each under a written data-processing agreement:

• Cloud hosting and database (EU region) — to store your account and content.
• AI inference providers — to generate Oracle answers and quizzes from your materials.
• Email and payment providers — only when you sign up or subscribe.

We never sell, rent or trade your personal data, and we never share it for advertising. We may disclose data when required by law (e.g. a valid court order).

We keep personal data only as long as we need it:

• Account data and uploaded materials: as long as your account is active.
• Server logs: maximum 30 days, then automatically purged.
• After you delete your account: all personal data is removed within 30 days, except records we are legally required to keep (e.g. invoices for up to 7 years under Dutch tax law).
• Backups containing deleted data are overwritten on a rolling basis within 30 days.

Lore uses a small number of cookies and similar local-storage entries:

• Strictly necessary: session cookie that keeps you signed in, language preference, cookie-consent choice. These do not require consent.
• Functional: UI preferences such as sidebar state, theme, learning mode. Used only to improve your experience.
• Analytics: only if you choose "Accept all" in the cookie banner. Aggregated, no advertising IDs.

On your first visit you can choose "Accept all" or "Necessary only". You can change your choice at any time by clearing site data in your browser.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (rectification).
• Delete your account and all associated data (erasure).
• Receive your data in a portable format (data portability).
• Object to or restrict certain processing.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

You can delete your account directly from your profile settings. For other requests, email chris@lore.ai — we respond within 30 days.

If you are a California resident, you have the right to:

• Know what personal information we collect, the sources, the purposes, and the categories of recipients.
• Request a copy of the personal information we hold about you.
• Request deletion of your personal information.
• Correct inaccurate personal information.
• Limit use of sensitive personal information.
• Opt out of the "sale" or "sharing" of personal information.
• Be free from discrimination for exercising any of these rights.

Categories of personal information collected in the past 12 months: identifiers (email, account ID), customer records (display name, bio), internet activity (uploaded study material, quiz interactions), and inferences drawn from that activity to personalize learning. We collect no precise geolocation, biometric data, or sensitive identifiers.

Lore does not sell your personal information for money and does not share it for cross-context behavioral advertising. We have not done so in the past 12 months and have no plans to do so.

Even though we do not sell or share your data, you can still record a formal opt-out request. We will honor it for your account permanently.

We protect your data with TLS in transit, encryption at rest, row-level access controls in our database, and strict service-role access for administrative operations. Access to production systems is limited and logged.

We do not make decisions that produce legal or similarly significant effects about you using only automated means.

We may update this Privacy Policy. Material changes will be communicated in the app or by email at least 14 days before they take effect.

Questions or requests? Email chris@lore.ai. Postal mail: Lore, Amsterdam, the Netherlands.