Privacy Policy

This beta policy is a product implementation draft and should be reviewed by counsel before launch.

Data we process

Lattice stores account identity, subscription state, study decks, cards, review history, settings, conversations, and operational metadata needed to run the review app.

AI providers

When AI-assisted card creation or tutoring is enabled, Lattice scans model-bound text for likely personal data before any provider call. Strict mode blocks likely personal data, strips direct app identifiers from model-visible context, omits free-text personalization, and stores no raw source excerpts for generated decks.

Account-linked hosted data is pseudonymized and minimized, not described as truly anonymous. Operational logs must not include prompts, notes, messages, card text, provider keys, or environment values.

Billing

Stripe hosts Checkout and Customer Portal. Lattice stores Stripe customer and subscription identifiers, not raw payment card details.

Your controls

Signed-in users can export account data and delete hosted beta accounts from the account surface. Deletion removes app-owned study data and private backup/export objects while legally required billing records remain in Stripe.