Ilumiera, LLC (“Ilumiera”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI-powered study tools and related services (“Services”).
By using the Services, you consent to the practices described below. If you do not agree, please do not use the Services.
1. Information We Collect
We collect the following types of information:
a. Information You Provide
- Email address and account credentials (if applicable)
- Educational content or queries you enter into the platform
- Feedback or support messages you send us
b. Audio You Choose to Record
- Lecture recordings you make with the lecture recorder
- AI Tutor class recordings, if you turn recording on for a class
c. Automatically Collected Data
- Device and browser information, and IP address
- Sign-in sessions (device, IP address and browser per session)
- Usage data (e.g., pages visited, features used)
- If you accept analytics cookies: analytics events and, on public pages, session recordings (see Section 6)
2. How We Use Your Information
We use your data to:
- Provide and improve the Services
- Personalize your experience
- Respond to support requests
- Communicate updates or promotional offers
- Ensure security and detect fraud
We do not sell your personal data.
3. AI and Data Usage
Ilumiera uses AI to generate content based on your input. We may use aggregated usage data to improve our features. We do not sell your data and we do not use your individual inputs or outputs to train our own models. Your inputs are sent to the AI providers listed in Section 7, which process them under their API terms.
You retain ownership of the content you submit, but you grant us permission to process it solely to operate and improve the platform.
AI Tutor (voice classes)
When you use the AI Tutor, we process the following on your behalf:
- Voice audio: your microphone audio is streamed to OpenAI's speech-to-speech service (the “Realtime API”) so the tutor can hear you and respond. The live stream itself is not kept. If you turn on class recording, the combined audio of you and the tutor is stored in our file storage (Amazon S3) so you can play it back, until you delete it or your account.
- Lecture recordings: audio you record with the lecture recorder is stored in Amazon S3 for playback and sent to a transcription provider. It may include other people's voices; get permission from the speaker and follow your institution's rules before recording.
- Transcripts: what you and the tutor said is transcribed and stored in your account so you can review past classes, resume paused sessions, and so the tutor can recall context in future classes.
- Uploaded materials: files and YouTube URLs you drop into a class are parsed, embedded, and used to ground the tutor's questions. We retain a parsed copy until you delete the class or your account.
- Semantic memory: a compact summary of each class is stored with our memory provider (Mem0) so the tutor can personalize future classes. This summary excludes raw audio and is purgeable on request.
You can delete everything the tutor has learned about you at any time from Settings → AI memory, or delete your whole account from Settings → Privacy & data.
4. Children and Parental Consent
Minors under 18 may use the Services only with parental or guardian consent. We do not knowingly collect personal information from minors without such consent. If you are a parent and believe your child has provided data without your permission, please contact us at support@ilumiera.ai.
5. Data Retention and Security
We keep your account data until you delete it or your account. When you delete your account from Settings → Privacy & data we permanently delete your content, uploaded files and recordings, search indexes, AI memory, profile photo, calendar connection and sign-in, and turn off your public share links. We keep payment records where the law requires it, and work you handed in to a teacher's class stays with that class.
Content created without an account (as a guest) is deleted after 30 days without activity. Some providers keep copies for a limited time under their own terms (for example, AI providers' abuse-monitoring logs).
We implement reasonable technical and organizational safeguards to protect your data, but no system is 100% secure.
7. Third-Party Services and Sub-Processors
To deliver our Services we rely on the sub-processors below. We share with each only what it needs to perform the function listed.
| Sub-processor | Purpose | Data shared |
|---|---|---|
| OpenAI | Realtime voice tutoring, speech transcription (Whisper), text generation, embeddings | Microphone audio, transcripts, prompts, uploaded text |
| OpenRouter (routing to OpenAI and Google Gemini models) | Non-voice AI generation: notes, quizzes, flashcards, mind maps, chat, concept extraction | Text content from your uploads, chats and classes |
| Deepgram | Speech-to-text for lecture recordings | Lecture audio |
| ElevenLabs and Fish Audio | Text-to-speech for podcasts and voices | Generated script text |
| SupaData | YouTube transcript retrieval | YouTube links you import |
| Mem0 | Semantic memory store for personalized tutoring across sessions | Compact end-of-class summaries (no raw audio) |
| MongoDB Atlas | Primary database (account, classes, transcripts) | All account and class data |
| Pinecone | Vector index for searching your uploaded materials | Embeddings derived from your uploads |
| Amazon Web Services (S3) | File and audio storage | Files you upload, lecture recordings, AI Tutor class recordings (when you turn recording on), generated podcast audio |
| Google (Firebase Auth, Firestore, Firebase Storage) | Sign-in, account records, profile photos | Email, name, account identifiers, profile photo, subscription status |
| Google (Calendar API) | Adding study sessions to your calendar, if you connect it | Calendar access token, events we create |
| Google (YouTube Data API) | Reading details of videos you import | YouTube links you import |
| Stripe | Payment processing | Billing details (card numbers are handled by Stripe, never by us) |
| Inngest | Background jobs (e.g. podcast generation) | Job parameters such as content IDs and user IDs |
| Resend | Transactional email | Email address, name, message content |
| Langfuse | AI usage monitoring (cost and quality) | Model, token counts and your user ID; not your content |
| Sentry | Error monitoring | Error reports and technical metadata |
| Better Stack | Server logs | Technical logs, which can include account identifiers |
| Slack | Internal error alerts to our team | Error details and account identifiers |
| PostHog | Product analytics and, on public pages, session recording (only if you accept analytics cookies) | Usage events linked to your account ID once you sign in (never your email), your plan, language and role, page URLs (with sign-in tokens removed), device and browser data, IP address, screen recordings of public pages with form inputs masked |
| Google Analytics | Website analytics (only if you accept analytics cookies) | Page views, device data, IP address |
| Hotjar | Heatmaps and session recording (only if you accept analytics cookies) | Page interactions, device data |
| Rewardful | Affiliate referral tracking (only if you accept analytics cookies) | Referral cookie, and your email if you subscribe through a referral link |
| Vercel | Hosting and web analytics | Page views and technical metadata (no cookies) |
We update this list when our infrastructure changes. Sub-processors are selected for security posture and relevant certifications (SOC 2, ISO 27001, GDPR readiness) where available.
8. Your Rights
Depending on your location, you may have rights to:
- Access your personal data
- Request correction or deletion
- Object to processing
- Withdraw consent
You can download a copy of your data and delete your account yourself in Settings → Privacy & data. For anything else, contact us at support@ilumiera.ai.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users by updating the “Last Updated” date. Your continued use of the Services constitutes acceptance of the revised policy.
10. Contact Us
If you have any questions or concerns about this policy, contact us at: