Privacy Policy

Version 2.0 · Effective date: 4 October 2026

1. Who is responsible for your data

The controller of your personal data is Individual Entrepreneur Nikita Dobroslavovich Udartsev, registered in the Unified State Register of the Ministry of Justice of the Republic of Armenia, state registration number 286.1609699, TIN 20400133, registered address: 22A N. Zaryan St., Arabkir district, Yerevan 0051, Republic of Armenia. Contact for privacy questions: info@lectify.app.

2. What data we collect

2.1. Account data

• Sign in with Apple: a unique user identifier from Apple, email address (this may be an Apple private relay address if you chose "Hide My Email"), and your name, which Apple shares only the first time you sign in.
• Sign in with Telegram (in the app or via the @lectify_bot bot): your Telegram ID, @username, first and last name from your Telegram profile, and your profile photo, which we copy and use as your avatar.
• Profile: name, @username, avatar, profile colour and badge, referral code, and information about invitations.
• Settings: app, transcript and summary languages, recording length limit and other preferences.

2.2. Your content

• audio and video recordings of lectures, uploaded files and documents, YouTube links, pasted text;
• photos, notes and marked moments taken during a recording, and AI-generated descriptions of those photos;
• transcripts, summaries, diagrams, flashcards, quizzes and your answers, AI podcasts, and results of study games and duels;
• your conversations with Lecty: in lecture chats, in exam mode (text and voice), with the tutor on the summary screen, and with the Telegram bot;
• what you tell us about yourself under Personalization, and facts Lecty has remembered from your conversations (you can turn memory off and clear it);
• your answers to the questions we ask when you first open the app (where you study, what you study, how you heard about Lectify).

Voice input. When you dictate a message, the audio is streamed for real-time speech recognition. We do not store voice input audio; only the text you send is kept.

2.3. Groups

Messages, photos, voice messages, materials, events and deadlines you post in Groups; reactions, mentions and pins; questions you ask Lecty in a Group; join requests; users you have blocked and reports you have made.

2.4. Purchases

For App Store purchases we receive, via RevenueCat, transaction and subscription identifiers, product, status and dates. We never receive your card details. We also keep track of how many Minutes and AI credits you have used.

2.5. Technical data

• an installation ID (a random identifier the app creates on first launch), device type (iPhone or iPad), iOS version, app version and build, device language and time zone;
• your push notification token;
• your IP address and user agent, in server logs and sign-in sessions. We do not use your IP address to determine your location;
• app usage events, including before you sign in: which screens and features were opened, whether actions succeeded and how long they took, and, to detect interface problems, the screen coordinates of repeated taps. The content of your materials and messages is not included in events;
• crash and error reports: the error message, a technical log of the app's recent actions, device model and OS version. Tokens, keys and email addresses are masked before a report is sent;
• which devices use your account and when recordings take place, so that we can enforce "one recording at a time per account" and detect account sharing.

2.6. Support requests

Messages you send us through the in-app feedback form, the Telegram bot or email, together with your name, email or Telegram @username and account ID.

2.7. What we don't collect

We don't collect your location, contacts or advertising identifier (IDFA), and we don't track you across other apps or websites. Usage statistics are kept in our own system. App builds released before October 2026 also sent usage events to Mixpanel; current builds do not. The app includes the YooKassa payment SDK, used only for payments in Russia, which contains components from YooMoney and Yandex (AppMetrica) that may collect device information for fraud prevention and analytics.

3. How we use your data and our legal bases

We do not make decisions with legal or similarly significant effects about you based solely on automated processing.

Providing data is not a legal requirement, but we cannot provide the Service without your account data and content.

4. What other users can see

• Your profile (name, @username, avatar) is visible to members of Groups you are in and to any signed-in user who finds you through Community search.
• Posts in a Group are visible to all its members. If you ask Lecty a question publicly, the answer is visible to everyone in the Group.
• A shared lecture link opens a web page with the lecture's title, date, length and summary, and your name in short form ("Anna K."). Anyone with the link can open it. A recipient with an account can save a copy of the lecture, including the audio and transcript.
• A duel shows your opponent your profile and score.
• Invite links to a Group or a duel open a public web page with basic information about it, such as the Group's name and number of members.

5. Who we share data with

We do not sell your personal data and do not share it for advertising. We share it only with service providers that process it on our behalf or help us provide the Service, and only as needed for a specific task.

AI providers receive data through their APIs to fulfil a specific request. We do not train AI models on your data. What a provider may do with the data and how long it keeps it are set by its own API terms; in particular, DeepSeek's privacy policy states that it stores data in China and may use submitted data to improve its models.

When you open an interactive diagram or visualisation, the app loads libraries from public content delivery networks (cdnjs, jsDelivr, unpkg, esm.sh). These services receive your device's IP address but not the content of the diagram.

We may also disclose data when required by law or a court, to protect the rights and safety of our users and Lectify, or to a new owner if the business is sold or reorganised, on terms no less protective than this policy and with notice to you.

6. International transfers

6.1. Our primary storage is in Sweden (Supabase, Stockholm region) and our servers are in the Netherlands (Railway and Friendhosting), so most processing takes place in the European Union.

6.2. Some providers process data in the USA and China (see section 5). For transfers from the EU, we rely on the EU–US Data Privacy Framework where the provider is certified and otherwise on the European Commission's Standard Contractual Clauses included in the providers' data processing terms. Transfers to China (DeepSeek) are made because they are necessary to provide the features you request (Art. 49(1)(b) GDPR); China does not have an EU adequacy decision.

6.3. Under the Law of the Republic of Armenia "On Protection of Personal Data", transfers to countries that are not recognised as providing adequate protection are made with your consent or where they are necessary to perform our agreement with you.

6.4. You can ask us for information about the safeguards for a particular transfer by writing to info@lectify.app.

7. How long we keep data

When a retention period ends, the data is deleted or anonymised.

8. Deleting your data

8.1. You can delete any lecture, chat, quiz or other item in the app. A deleted lecture disappears from your library on all devices, and its audio, photos and other files are deleted from our cloud storage within 30 days.

8.2. To delete your account, use the link at the bottom of the app's Settings. Your account, content and files are removed from our live systems, usually immediately and in any case within 30 days; usage events are anonymised; the data then disappears from backups within 30 days. If you have an App Store Subscription, cancel it in your Apple ID settings — deleting your account does not cancel it.

8.3. After deletion, the following remain: copies of lectures that other users saved from your links; your messages and materials in Groups, without your name and avatar; and records we are required by law to keep, if any.

8.4. If you can't delete your account in the app, email info@lectify.app and we will delete it for you.

9. Your rights

9.1. Depending on where you live, you have the right to:

• know whether we process your data and get information about how;
• access your data and receive a copy;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to processing, including processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing that took place before;
• lodge a complaint with a data protection authority — in Armenia, the Personal Data Protection Agency of the Ministry of Justice; in the EU, the authority of the country where you live or work.

9.2. To use these rights, email info@lectify.app from the email address or Telegram account linked to your Lectify account. We may ask you to confirm that the account is yours. We respond free of charge within the time limits set by law: within 5 days for requests under Armenian law, and within one month for requests under the GDPR (extendable by two further months for complex requests, in which case we will tell you why).

9.3. If you withdraw consent, we stop the processing that relied on it and delete that data within 10 working days. Processing needed to perform our agreement or comply with the law continues; if the Service cannot work without it, we will tell you that deleting your account is the way to stop it completely.

10. Security

• All connections between the app, our servers and our providers are encrypted (TLS).
• Data is stored with our providers using disk encryption.
• Row-level access control in our database ensures each user can access only their own data and what others have shared with them.
• Files are served to the app through links that expire after a limited time.
• We don't store passwords: you sign in with Apple or Telegram.
• Only the controller has access to the infrastructure that holds personal data.

If a personal data breach occurs, we will notify the competent authorities within the time required by law and inform affected users without undue delay where the breach is likely to put their rights at risk.

11. Children

Lectify is not directed to children under 13 and requires users to be at least 13. Users under 18, or under the age of digital consent in their country (16 in Armenia and in some EU countries), need the consent of a parent or guardian. If we learn we have collected data from a child under 13, or from a younger user without required parental consent, we will delete it. Parents and guardians can contact us at info@lectify.app.

12. Users in the United States

We do not sell personal information and do not share it for cross-context behavioural advertising. Our service providers may use personal information only to provide services to us. You can ask to know, access, correct or delete your personal information by writing to info@lectify.app; we will not treat you differently for doing so.

13. Websites

lectify.app and share.lectify.app do not use advertising or analytics cookies. If you leave your email in the "Get notified" form on the website, we use it only to tell you about the launch and delete it after the launch announcement, or earlier if you ask us.

14. Changes to this policy

We update this policy when our features, providers or the law change. The current version is always available at lectify.app/en/privacy. We will tell you about material changes in the app at least 14 days in advance.

15. Contact

Individual Entrepreneur Nikita Dobroslavovich Udartsev
State registration number 286.1609699, TIN 20400133
22A N. Zaryan St., Arabkir district, Yerevan 0051, Republic of Armenia
info@lectify.app