Privacy Policy — Didactical

Who we are

LORE (the Learning, Operations and Readiness Engine) is made by Didactical. In this policy, "Didactical", "we" and "us" mean Didactical Inc., a Delaware corporation, 140 Lane 570 Lake James, Fremont, Indiana 46737, USA.

Most people use LORE because their university, college or employer (your "institution") gave them access to a course. For the records your institution keeps about your training, your institution decides what is collected and why, and Didactical processes that information on its behalf and under its instructions. Where you created an account yourself without an institution, Didactical is responsible for your information.

The short version

We collect your account details and a record of your learning, so the app can teach you and your instructors can help you.
We do not show advertising, sell your data, share it for advertising, or use tracking or analytics tools from other companies.
We never collect your location, contacts, photos, microphone audio or any biometric data. Fingerprint and face sign-in are checked by your phone, not by us.
You can delete your account from inside the app, or from the web.

What we collect

Your account

Email address and name, as you or your institution entered them. Accounts are created when you accept an invitation from your institution, join a class with a link or code, or sign up yourself.
Your password, stored only as a one-way hash. We never store the password itself and cannot read it.
An account number that LORE assigns, and the institution, classes and courses you are enrolled in.
If you use Sign in with Apple (iPhone and iPad), the account identifier Apple provides and the email address Apple shares with us, which may be a private relay address if you chose to hide your email. Your name only if you let Apple share it. Never your Apple ID password. When you delete your LORE account, we also ask Apple to revoke LORE's access to your Apple ID.
If your account was created with Google sign-in (not offered in the current Android and iPhone apps), the account identifier Google provides. Never your Google password.

Your learning record

What you listen to and how: which lessons you play, pause, finish or replay, where you are in each lesson, the playback speed and narrator voice you choose, when you seek, whether read-along is on, and when playback was interrupted (for example by a phone call).
Your answers: the answer you chose to each question, whether it was right, and how long it took.
Your review schedule: when each question is due to come back, and how that schedule has changed over time.
Course corrections: when you are given a re-explanation of a lesson, which one, how you used it, and how you did afterwards. Some corrections are written just for you (see "AI-generated corrections" below), and are stored with your record.
Completions and certificates: the lessons and courses you complete, and any certificate issued, with its serial number and score.

Sign-in and security

Session cookies that keep you signed in. They are needed for the app to work and are not used for advertising or tracking.
If you turn on fingerprint or face sign-in: a device name you can edit (for example "Pixel 8"), the platform (Android or iOS), and a hashed copy of a sign-in key kept on your phone. The key itself stays in your phone's secure storage, which releases it only after your phone confirms your fingerprint or face.
If you add a passkey in the web app: the passkey's public key and identifier, the name you give it, and when it was last used. The private part never leaves your device.
Your IP address, which our servers see on every request. We use it to limit repeated sign-in attempts and in routine server logs kept for security and troubleshooting. We do not use it to work out where you are.

Email we send you

When we send you an invitation or a password-reset link, we keep a record of the message (address, subject, and when it was sent). The message body, which may contain a one-time link, is erased about a week after it is sent.

What we do not collect

The LORE app does not ask for or collect your location, contacts, photos or files, calendar, microphone or camera, advertising identifiers, or any biometric data. Fingerprint and face checks happen entirely on your phone: the operating system tells the app only that the check passed. No fingerprint, face image or face data ever reaches us, and none is stored by LORE on your phone.

The app contains no advertising, and no analytics, crash-reporting or tracking tools from other companies.

How we use it

To teach you: to remember where you are, choose which questions you see and when a topic comes back for review, decide when to offer a course correction and which kind has worked for you before, and show you your own progress.
To let your instructors help you (see "Who sees your information").
To run your account: sign-in, password resets, invitations, and keeping your account secure.
To improve how courses teach: we look at which lessons and which kinds of explanation work, across a class or a course, so that courses and corrections get better. Where we do this beyond your own class, we use combined figures that do not identify you.

We do not use your information for advertising, we do not sell it, and we do not build a profile of you for use outside LORE. We do not try to infer your emotional or psychological state.

AI-generated content

Lessons, questions, podcast episodes and prepared corrections are written with the help of an AI model from course material your institution's staff provide, and are reviewed by that staff or checked automatically against the approved lesson before you see them.

AI-generated corrections. If you fall short on a lesson and have already had the prepared corrections, LORE may write a new explanation for you. To do that, our servers send the AI provider the approved lesson text, the topics of the questions you missed, the style of explanation wanted, and a reference to your institution. We do not send your name, email address, account number or answers. The explanation that comes back is stored in your learning record.

Who sees your information

Your institution. Your instructors and your institution's LORE administrators can see your name, email, enrolments, progress, answers, corrections and completions for their own classes and courses, so they can help you. They cannot see other institutions' learners.
Didactical staff, only as needed to run, support and secure the service.
Anyone you give a certificate to. A certificate's verification link shows the course, date, issuer and score. It does not show your name or email.
Service providers who work for us under contract and only on our instructions:
- server hosting, where LORE's servers and database run (IONOS, in the United States);
- email delivery, through Google Workspace (Gmail), which handles the invitations and password-reset messages we send you;
- AI model providers, which receive course material and the correction requests described above, not your account details (currently OpenAI);
- GPU computing, which turns lesson text into narration (currently RunPod).
When the law requires it, for example in response to a valid legal order, or to protect people's safety or the security of the service.

We do not sell or rent your information, or share it with anyone for advertising.

How long we keep it

We keep your account and learning record for as long as your account exists and your institution uses LORE, unless you or your institution delete it sooner. When an institution stops using LORE, we delete its learners' accounts and learning records within 90 days, unless the institution asks us to return them first. If you created an account yourself and do not sign in for three years, we delete it. Email message bodies are erased about a week after sending. Server logs are kept for 30 days.

Deleting your account

In the app: open the menu, choose Account, then Delete my account, and confirm with your password.
On the web: app.didactical.ai/delete-account.
Through your institution, whose administrators can also delete a learner's account.

Deletion is permanent. It erases your account, your learning record, your enrolments, your sign-in devices and passkeys, and any corrections written for you. Two things remain:

Certificates are kept, de-identified. A certificate your institution issued is an award record, so it stays and its verification link still works, but it is no longer linked to you in any way.
A deletion record is filed for your institution: that an account was deleted and when, with counts of what was removed. It contains no name or email address.

Accounts that teach or administer a class, and accounts managed through an institution's own portal, cannot delete themselves from the app, because doing so would take the institution's classes with them. Contact your institution or us.

Your rights

Depending on where you live, you may have the right to see the information we hold about you, get a copy of it, correct it, delete it, or object to or restrict how it is used. Your institution can export your learning record and correct your details. You can also write to us at the address below, and we will respond within the time the law requires. If your institution controls your records, we may pass your request to them.

Security

All traffic between the app and our servers is encrypted with HTTPS.
Passwords are stored only as one-way hashes; sign-in keys and passkeys are stored as hashes or public keys.
Sign-in keys change every time they are used, and a copied key is detected and switched off.
Changing your password, or signing out everywhere, ends every other session and device.
Sign-in attempts are rate-limited, and each institution's staff can see only their own learners.

No system is perfectly secure. If we learn of a breach that affects you, we will tell you and your institution as the law requires.

Children

LORE is designed for adults in higher education and workforce training. It is not directed at children, and we do not knowingly collect information from children under 13 (or under 16 where local law sets that age). An institution that enrols learners under 18 is responsible for obtaining any consent the law requires. If you believe a child has given us information, contact us and we will delete it.

International transfers

LORE's servers and database are in the United States. If you use LORE from outside the United States, your information is transferred to and stored in the United States. The service providers listed above work under contracts that require them to protect it.

Changes to this policy

We will update this page when what we collect or how we use it changes, and change the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

Contact

Questions or requests about your information: chris@didactical.ai
Post: Didactical Inc., 140 Lane 570 Lake James, Fremont, Indiana 46737, USA

What LORE records about you, and why.