Privacy Notice

Updated October 16, 2026 · Version 2026-10-16

Operator and contact

CT Studio, LLC provides Lectern. Contact rcade.tullis@gmail.com or write to 1605 Oak Hollow Dr, Woodway, TX 76712, United States about privacy, security, access, correction, deletion, or an appeal.

The initial Lectern public beta accepts only United States users age 18 and older. We do not sell personal information, use cross-context behavioral advertising, or run advertising inside Lectern.

Information we process

Account information includes email, display name, provider identity, verification and security information, age band, country eligibility, policy consent, timezone, and preferences. Passwords are managed by the authentication provider; Lectern does not store your plaintext password. We do not require a student's home address, school, precise location, or phone number to create a standard account.

Study information includes the content you choose to create or upload, source citations, structured payloads, media, captions, academic metadata, tags, and sharing settings. Responses and learning evidence include answers, correctness or partial credit, selected options, assistance used, active response duration, question format, study history, and confusion between real source concepts.

Scheduling information includes events, exam dates, linked sets, and optional sleep-window preferences that you enter. Calendar actions export an event/file, open a destination you select, or provide a revocable Lectern schedule feed for your calendar application to subscribe to. Feed access tokens are retained to serve the connection. Lectern does not read your external Google, Microsoft, or Apple calendar.

Support and safety information includes reports, correspondence, attachments you submit, account actions, and records needed to investigate abuse or security issues. Technical operation uses request, browser, device, error, and security information. We avoid putting raw study answers or private source content into routine application logs.

Stripe processes payment credentials. Lectern receives customer/subscription identifiers, status, purchased plan, renewal and paid-through dates, and transaction/consent records needed to administer billing. Complete payment-card numbers and security codes are not stored in Lectern's application database. Test billing creates test transactions, not real charges.

Why we use information

We use information to provide your account and chosen study features; store and render content; grade answers; select source-grounded practice; track progress; identify concept confusion; support sharing and exports you request; administer subscriptions; provide support; correct errors; protect the service; and comply with legal obligations.

Learning estimates do not determine actual school grades, intelligence, diagnoses, employment, credit, or legal eligibility. You can inspect source material, report an incorrect activity or grade, and reset progress. Sharing a set does not share your personal answers, schedule, or learning history.

Optional analytics is separate from the processing needed to provide study features. It is off by default. If you opt in, first-party measurement records daily counts for a fixed list of public pages and actions, signup completion, first Set creation, and study starts. These counts contain no visitor or account identifiers, study content, search terms, or referrer URLs and become eligible for scheduled removal after 180 days. Website measurement is a browser-local choice for each website address; account activity requires the separate Settings preference. Browser privacy signals override website measurement. We do not conduct identifiable-data research or use private study content for general-purpose model training without separate affirmative permission. Declining optional analytics does not remove ordinary study access.

Automated models and source content

Plus variations and source extraction may send relevant source content to the OpenAI API. Optional semantic review may send bounded source facts, question and response to TypeSafe/Jev; OpenAI also supports selected model-assisted features. Public-content screening may send content being considered for publication. We minimize the scope of each request; these features do not require sending your entire account by default. Many study questions, grading rules, and scientific validators run without a model call.

Our API requests use the provider's no-stored-response option where supported. OpenAI states that API data is not used for training by default. Its standard abuse-monitoring retention may nevertheless retain request information for up to 30 days, or longer when legally required. Lectern does not represent this configuration as Zero Data Retention. TypeSafe/Jev has separate provider practices; Lectern does not claim that the OpenAI retention or training terms apply to Jev. Current contractual retention and processing terms are available through the privacy contact. Provider-generated text can be wrong; source checks and reporting remain available.

Visibility and sharing

Check the visibility control before publishing. New creator sets default to Public. A public set can expose its content, selected metadata, and creator display information; unlisted links can be forwarded. Choose Private to restrict access.

Recipients may make copies where permissions and licenses allow. Revocation cannot always recall prior lawful exports or independent copies. Avoid publishing sensitive personal information, student records, confidential material, or copyrighted material you cannot share. Set sharing never makes your individual study evidence public.

Providers and disclosures

OpenAI Sites provides website hosting, using Cloudflare runtime, application database, and object-storage bindings. Google Firebase provides authentication and credential verification. Google Cloud runs the media service, media database and storage, encrypted recovery copies, and operational monitoring. Resend delivers Lectern account-verification, reset, billing, and operational messages. OpenAI API and TypeSafe/Jev provide the model services described above. Stripe provides subscription billing. Current providers are listed at /legal/subprocessors.

Providers process relevant account, content, technical, or billing information to perform their services. Their infrastructure may process data in the United States and other countries where they operate; Lectern does not promise US-only storage. We do not send study answers to calendar destinations merely because an event is exported.

We may disclose information required by law, necessary to protect rights and safety, or needed to investigate fraud or serious abuse. A business transfer remains subject to applicable privacy law and notice requirements. We do not give private learning histories to teachers, employers, or other students simply because they ask.

Retention and deletion

Source content and derived learning evidence remain while needed for the account and features you request, unless you delete them or an applicable exception requires retention. Raw answer text and grading excerpts become eligible for removal after 30 days and are removed by a bounded, retryable scheduled process. Derived outcomes can remain to preserve progress until you reset or delete it. Model response intermediates become eligible for cleanup after seven days, except requests still awaiting provider-batch completion; approved reusable variations follow their authorized source. Quarantined generation candidates expire after 30 days, and resolved content reports expire after one year.

Unused prepared study rounds become eligible for cleanup after one day. Cleanup runs asynchronously; operational backlog and failures are monitored rather than represented as an exact universal deletion deadline. Browser offline copies remain on the device until removed, expired, or cleared through sign-out/device controls. Exports that you save are under your control and cannot be remotely recalled.

Account deletion revokes access and sharing and removes account content and media from active primary storage through a retryable deletion process. Authentication-provider cleanup may complete separately; the deletion receipt describes its state. Necessary billing, tax, consent, security, and dispute records may be retained for legal/accounting purposes with restricted use, rather than for future study or marketing.

Lectern's encrypted application recovery copies have a 35-day retention policy. Independent provider backups are separate from active storage and expire under the provider's retention rules. Lectern's primary-data deletion receipt does not certify that every provider backup has already expired. Restoration procedures must reapply deletion records before restored information is returned to service. A legal hold or security investigation can require limited additional retention. Contact us for the status of a particular request.

Your choices and rights

Settings and set controls let you change visibility, edit information, manage analytics/offline preferences, export authored Sets, revisions, retained owned files and study records in a versioned download, reset progress, and request deletion. The self-service download excludes security credentials, internal operator records and external billing/provider/mailbox copies. Contact the privacy address above for a broader verified access request or help reconstructing a large download. Cancel a subscription in Billing; privacy choices do not require a purchase.

Depending on applicable law, you may have rights to access, correct, delete, obtain a portable copy, appeal a denied request, or use an authorized agent. Email the contact above. We verify identity proportionately, explain any applicable exception, and respond within the legally required period. We do not discriminate against you for exercising privacy rights. Because Lectern does not sell information or use targeted advertising, there is no advertising sale to opt out of; legally applicable privacy signals are respected.

Children and teens

The initial Lectern public beta is for adults age 18 and older. We do not offer accounts for people under 18 or a guardian-consent exception during this beta. Contact us if you believe an ineligible person under 18 has submitted personal information so we can investigate and remove it as appropriate. Do not put children's private information in public sets.

Security and changes

We use access controls, encryption in transit, provider security controls, restricted credentials, and account/session protections. No system guarantees absolute security. Report suspected vulnerabilities to rcade.tullis@gmail.com without accessing another person's data.

Material changes receive appropriate notice, and new consent where required. This notice describes Lectern, not the independent practices of websites you visit through external links. Archived policy versions and a record of substantive changes are available on request.