Privacy Policy

1. Introduction

Welcome to Historacle ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and with our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.historacle.ai and use our AI-powered historical conversation platform.

2. Information We Collect

We collect information that you provide directly to us, as well as information automatically collected when you use our services.

A. Personal Information

• Account Information: When you register, we collect your name, email address, and password.
• Google User Data: If you choose to sign in with Google, we collect your name, email address, and profile picture associated with your Google account. We use this information solely for authentication and account management purposes.
• Communication: If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

B. Usage Data & Cookies

We automatically collect certain information when you visit, use, or navigate the Site. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Site, and other technical information.

We use cookies and similar tracking technologies to track the activity on our Service and store certain information. For more detailed information about the cookies we use, please see our Cookie Policy.

C. Session Recordings

If you accept analytics on the cookie banner, we may record a sample of sessions through a third-party analytics provider to find and fix usability problems. A recording shows page layout, mouse movements, clicks and scrolling.

Who is recorded: only signed-in account holders aged 18 or older. We never record guests, anyone under 18, or school accounts.

What is hidden: all text on the page, including your chats, and everything you type is masked before it leaves your browser. Network requests, browser console logs and payment details are not captured, and IP addresses are not stored.

How it is linked: a recording carries only a random account id, never your name or email.

How long: recordings are deleted after 30 days.

Without your consent nothing is recorded. You can change your choice at any time by clearing this site's cookies and choosing again on the banner.

3. How We Use Your Information

We use the information we collect or receive:

• To facilitate account creation and logon process.
• To provide and maintain our Service, including to monitor the usage of our Service.
• To manage your account and registration.
• To contact you regarding updates, security alerts, and support.
• To improve our AI models and user experience (anonymized data only).
• To comply with legal obligations.

4. Third-Party Services

We use a small set of third-party service providers to run the platform. To protect the security of our systems, we describe them here by category rather than by name. Schools and organizations receive the specific list of providers, and what each processes, as part of the data agreement we sign with them.

• Cloud hosting and database: Providers that host our infrastructure and store account information, profile information, chat history, and session metadata, located in the United States.
• AI model provider: A third-party large language model provider generates historical-character responses and, optionally, transcribes speech and synthesizes voice. Messages are processed under API terms that prohibit using our content to train the provider's models.
• Search/retrieval: A vector-search provider retrieves historically-grounded public-domain source material for responses. It stores embeddings of public-domain texts; no user data is sent.
• Analytics and error tracking: A product-analytics and error-tracking provider captures anonymized event data (screen views, taps, auth events) and crash reports. On web, session recording is limited to a sample of signed-in adults who accepted analytics, and masks all text and inputs; you can decline on the cookie consent banner. We do not sell this data or use it for advertising.
• Sign in with Apple: Authentication provider for the iOS app. Apple may share your email (real or a private relay) and optionally your name. See Apple's Sign in with Apple privacy policy.
• Sign in with Google: Optional authentication provider on web and iOS. Google may share your email, name, and profile picture. See Google's Privacy Policy.

5. Google User Data

Our use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. We do not sell your Google user data to third parties.

6. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Site is at your own risk. You should only access the services within a secure environment.

7. Children's Privacy

Historacle is an educational product, and children use it. We handle children's data in line with the Children's Online Privacy Protection Act (COPPA) and comparable school-privacy rules such as FERPA.

Consent. A child under 13 may use Historacle only with verifiable consent from a parent or legal guardian, or from a school or organization acting under appropriate authority. When a school provides Historacle to its students, the school may give consent on behalf of parents for educational use, and it acts as the account holder.

What we collect from children. We collect only what is needed to run the service: an account identifier and login credentials (often supplied by the parent or school), an age group, chat messages, and, if voice features are used, the audio of what the child says. We do not require a child to disclose more than is reasonably necessary to use the service.

What we do not do. We do not sell children's personal information, and we do not use it for behavioral advertising or serve targeted ads. We do not build advertising profiles of children. For accounts identified as belonging to a school, product-analytics session recording is disabled.

Parent and school rights. A parent, guardian, or school administrator can review the personal information we hold about a child, ask us to correct or delete it, and withdraw consent, which stops further collection. To make a request, email support@editlingo.com. We retain children's data only as long as needed for the educational purpose and delete it on request, as described below.

8. Data Retention

We keep personal information only as long as we need it for the purpose it was collected, then delete or anonymize it. Retention by data type:

• Chat messages. Kept while your account is active so you can return to your conversations. Deleted when you delete the conversation or your account, and on verified request.
• Voice audio. Audio captured for speech-to-text and any generated voice output is kept only briefly to produce the response, then discarded. We do not build a long-term archive of voice recordings.
• Analytics. Product-analytics events are retained in aggregated or de-identified form. Session recordings are deleted after 30 days and are never made of anyone under 18, guests or school accounts.
• Server logs. Operational and security logs are kept for a short period for debugging and abuse prevention, then rotated out.

You can ask us to delete your data at any time. See our Data Deletion page or email support@editlingo.com. We do not retain personal data indefinitely.

9. Contact Us

If you have questions or comments about this policy, you may email us at support@editlingo.com.