Privacy Policy

1. Introduction

Welcome to Historacle ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and with our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.historacle.ai and use our AI-powered historical conversation platform.

2. Information We Collect

We collect information that you provide directly to us, as well as information automatically collected when you use our services.

A. Personal Information

• Account Information: When you register, we collect your name, email address, and password.
• Google User Data: If you choose to sign in with Google, we collect your name, email address, and profile picture associated with your Google account. We use this information solely for authentication and account management purposes.
• Communication: If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

B. Usage Data & Cookies

We automatically collect certain information when you visit, use, or navigate the Site. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Site, and other technical information.

We use cookies and similar tracking technologies to track the activity on our Service and store certain information. For more detailed information about the cookies we use, please see our Cookie Policy.

C. Session Recordings

With your consent, we use anonymized session recordings through a third-party analytics provider to understand how users navigate our platform. These recordings capture mouse movements, clicks, and page scrolling to help us identify usability issues and improve the product experience.

What is automatically masked:

• Password fields and sensitive form inputs
• Elements marked with our privacy data attribute

What is NOT captured:

• Keystrokes in password fields
• Credit card or payment information
• Content from other browser tabs or applications

Session recordings are only enabled when you accept analytics via the cookie consent banner. You can opt out at any time by clearing your cookie preferences in your browser.

3. How We Use Your Information

We use the information we collect or receive:

• To facilitate account creation and logon process.
• To provide and maintain our Service, including to monitor the usage of our Service.
• To manage your account and registration.
• To contact you regarding updates, security alerts, and support.
• To improve our AI models and user experience (anonymized data only).
• To comply with legal obligations.

4. Third-Party Services

We use a small set of third-party service providers to run the platform. To protect the security of our systems, we describe them here by category rather than by name. Schools and organizations receive the specific list of providers, and what each processes, as part of the data agreement we sign with them.

• Cloud hosting and database: Providers that host our infrastructure and store account information, profile information, chat history, and session metadata, located in the United States.
• AI model provider: A third-party large language model provider generates historical-character responses and, optionally, transcribes speech and synthesizes voice. Messages are processed under API terms that prohibit using our content to train the provider's models.
• Search/retrieval: A vector-search provider retrieves historically-grounded public-domain source material for responses. It stores embeddings of public-domain texts; no user data is sent.
• Analytics and error tracking: A product-analytics and error-tracking provider captures anonymized event data (screen views, taps, auth events) and crash reports. On web, session recording (when enabled) auto-masks sensitive input fields such as passwords and email; you can opt out via the cookie consent banner. We do not sell this data or use it for advertising.
• Sign in with Apple: Authentication provider for the iOS app. Apple may share your email (real or a private relay) and optionally your name. See Apple's Sign in with Apple privacy policy.
• Sign in with Google: Optional authentication provider on web and iOS. Google may share your email, name, and profile picture. See Google's Privacy Policy.

5. Google User Data

Our use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. We do not sell your Google user data to third parties.

6. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Site is at your own risk. You should only access the services within a secure environment.

7. Children's Privacy

Historacle is an educational product, and children use it. We handle children's data in line with the Children's Online Privacy Protection Act (COPPA) and comparable school-privacy rules such as FERPA.

Consent. A child under 13 may use Historacle only with verifiable consent from a parent or legal guardian, or from a school or organization acting under appropriate authority. When a school provides Historacle to its students, the school may give consent on behalf of parents for educational use, and it acts as the account holder.

What we collect from children. We collect only what is needed to run the service: an account identifier and login credentials (often supplied by the parent or school), an age group, chat messages, and, if voice features are used, the audio of what the child says. We do not require a child to disclose more than is reasonably necessary to use the service.

What we do not do. We do not sell children's personal information, and we do not use it for behavioral advertising or serve targeted ads. We do not build advertising profiles of children. For accounts identified as belonging to a school, product-analytics session recording is disabled.

Parent and school rights. A parent, guardian, or school administrator can review the personal information we hold about a child, ask us to correct or delete it, and withdraw consent, which stops further collection. To make a request, email support@editlingo.com. We retain children's data only as long as needed for the educational purpose and delete it on request, as described below.

8. Data Retention

We keep personal information only as long as we need it for the purpose it was collected, then delete or anonymize it. Retention by data type:

• Chat messages. Kept while your account is active so you can return to your conversations. Deleted when you delete the conversation or your account, and on verified request.
• Voice audio. Audio captured for speech-to-text and any generated voice output is kept only briefly to produce the response, then discarded. We do not build a long-term archive of voice recordings.
• Analytics. Product-analytics events are retained in aggregated or de-identified form. Session recordings, where enabled, follow our analytics provider's retention window and are off for school accounts.
• Server logs. Operational and security logs are kept for a short period for debugging and abuse prevention, then rotated out.

You can ask us to delete your data at any time. See our Data Deletion page or email support@editlingo.com. We do not retain personal data indefinitely.

9. Contact Us

If you have questions or comments about this policy, you may email us at support@editlingo.com.