Privacy Policy
This policy explains what information Lomeda collects when you use the Lomeda app and the lomeda.app website (together, the “Service”), why we collect it, who we share it with, and the choices and rights you have. We do not sell your personal information and we do not use it for advertising.
1. Who we are
The Service is operated by Lomeda (“Lomeda”, “we”, “us”). For the purposes of data protection law, Lomeda is the controller of the personal information described in this policy. You can reach us about anything in this policy at hello@lomeda.app.
Lomeda is currently in early access. Features may change, and we will update this policy when a change affects how we handle your information.
2. Information we collect
Account information
When you create an account we collect your email address and a password (stored by our authentication provider in hashed form, never readable by us). If you sign in with Google, we receive your name, email address and a Google account identifier. We assign each account a unique user ID.
Material you add
Lomeda lets you learn from your own material. This includes photos you take or import, pages you scan, text you paste or type, and words or phrases you say. We store the lessons created from this material, and the photos they were created from, so they are available on your devices.
Learning activity
We store the flashcards you create, the words you mark as known or unknown, your study sessions and streaks, your reading progress, and your settings such as your native and target languages.
Content generated for you
To help you learn, the Service creates translations, explanations, example images and audio for words and texts. Generated images and audio attached to your flashcards are stored with your account.
Usage limits and security information
We count how many pages you scan and how much text you listen to each day, so we can apply fair-use limits. To protect the Service from abuse, the app uses Firebase App Check, which asks Google Play Integrity (on Android) or Apple’s App Attest and DeviceCheck (on iOS) to confirm that requests come from a genuine copy of the app. Our servers and providers also record technical information such as IP address, device and operating system type, and request times in their logs.
Crash diagnostics
When the app closes unexpectedly, Firebase Crashlytics sends us a report so we can fix what went wrong. A report contains the error and where in the app it happened, your device model, operating system version and app version, and an identifier Crashlytics generates for that installation. It does not contain your lessons, flashcards, photos or the text you are reading.
Usage analytics
On Android, the app uses Google Analytics for Firebase to show us how Lomeda is used, so we can see what works and what to improve. It records which screens you open and for how long; which catalog books you open and how long you read and listen to them; which way you add material with the “+” button; your interface language, the language you are learning and your level; your answers to the onboarding and “Customize your experience” questions; and the titles you suggest or vote for in the Library. These events are linked to your account’s user ID, together with your device model, operating system, app version and approximate country. The same data also gives crash reports the steps that led up to them.
We never send the title or text of material you add yourself — only whether it came from a scan, a photo, typed or pasted text, or speech. We do not collect an advertising identifier, and we do not use any of this for advertising. You can switch it off at any time in Profile → Share usage data; the app then stops sending usage events from that device.
Device permissions
With your permission, the app uses your camera to scan pages, your microphone and your device’s speech recognition so you can say a word or practise pronunciation, and notifications to show read-aloud playback controls. Speech recognition is performed by your device’s operating system (Google on Android, Apple on iOS), which may process the audio on its own servers under its own privacy terms. Lomeda does not store recordings of your voice. You can turn any permission off in your device settings at any time.
Waitlist
If you join the waitlist on lomeda.app, we collect your email address, which form you used and when. To limit abuse we keep a one-way hash of your IP address with a signup counter; we do not store the address itself, and the hash is not linked to your email.
When you contact us
If you email us, we receive your email address and whatever you choose to include in your message.
Information stored only on your device
The app keeps a local copy of your lessons, flashcards and settings on your device so it works offline. The website remembers the language you chose in your browser’s local storage. This information stays on your device unless it is synced to your account as described above.
3. How we use information
- To create and secure your account and sign you in.
- To provide the Service: turn your material into lessons, recognise text in photos, translate and explain words, read text aloud, and build flashcards and practice.
- To sync your lessons, flashcards and progress across your devices.
- To apply usage limits, prevent fraud and abuse, and keep the Service secure.
- To fix problems and improve how the Service works.
- To send you service messages, such as password-reset emails, and to tell waitlist members about the launch and early testing.
- To answer your questions and requests.
- To comply with the law and enforce our Terms of Service.
We do not sell your personal information, share it for cross-context behavioural advertising, or use the material you add to train our own or anyone else’s AI models.
4. Legal bases (EEA, UK and Switzerland)
If the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection applies to you, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Account, lessons, sync, AI features, read-aloud | Performance of our contract with you (Art. 6(1)(b)) |
| Usage limits, security, abuse prevention, service logs | Our legitimate interest in running a safe and reliable service (Art. 6(1)(f)) |
| Usage analytics | Our legitimate interest in understanding how the Service is used so we can improve it (Art. 6(1)(f)); you can object at any time with Profile → Share usage data |
| Camera, microphone, speech recognition, notifications | Your consent, given through your device’s permission prompt (Art. 6(1)(a)) |
| Waitlist emails | Your consent when you join (Art. 6(1)(a)) |
| Legal and tax obligations, responding to authorities | Compliance with a legal obligation (Art. 6(1)(c)) |
Where we rely on consent, you can withdraw it at any time; this does not affect processing that already took place.
5. AI and automated processing
Several features send content to AI and cloud services to work:
- Text recognition: photos and scanned pages you choose are sent to Google Cloud Document AI to recognise the text.
- Translations, explanations and images: words, phrases and the sentences around them are sent to Google’s Gemini API.
- Read-aloud: text you listen to may be sent to Google Cloud Text-to-Speech; on some devices the built-in speech engine is used instead.
Only the content needed for the feature you use is sent. AI output can be wrong, so please treat it as a learning aid. Lomeda does not make decisions that produce legal or similarly significant effects about you by automated means. Please avoid adding material that contains sensitive personal information about you or anyone else.
7. International transfers
Our providers process information in the United States and other countries that may not offer the same level of protection as the country you live in. When we transfer personal information from the EEA, the UK or Switzerland, we rely on adequacy decisions (including the EU–U.S. Data Privacy Framework and its UK and Swiss extensions, where the provider is certified) or the European Commission’s Standard Contractual Clauses and their UK and Swiss equivalents. You can ask us for more information about these safeguards.
8. How long we keep information
- Account, lessons, flashcards and progress: for as long as your account exists. When you delete your account, we delete this information within 30 days, and from any backups within a further 90 days.
- Daily usage counters: overwritten each day and deleted with your account.
- Usage analytics: kept for 14 months, then deleted automatically.
- Security and abuse-prevention data: hashed IP addresses used to limit waitlist signups are kept until the waitlist ends; server logs are kept for up to 30 days unless needed to investigate abuse.
- Waitlist: until the waitlist ends or you ask to be removed, whichever comes first.
- Emails to us: for as long as needed to handle your request, and no longer than 2 years afterwards.
We may keep information longer where the law requires it or to establish, exercise or defend legal claims.
9. Security
Information is encrypted in transit and at rest by our providers. Access to your data in our database is restricted to your own account, and server-side data is only accessible to Lomeda’s backend. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities where the law requires.
10. Your choices and rights
Everyone
Wherever you live, you can ask us for a copy of your information, ask us to correct it, or ask us to delete your account and its data by emailing hello@lomeda.app from the address linked to your account. To leave the waitlist, reply to any waitlist email or write to us. We will respond within 30 days and may need to verify your identity first. We will not treat you differently for exercising your rights.
Deleting your account
You can delete your account from inside the app: open Profile → Delete account and confirm by typing the word the dialog asks for. Deletion is immediate and permanent. It removes your login, your lessons and the photos they were made from, your flashcards and their generated images and audio, your word statuses, study sessions, streaks and settings, and your usage counters. Nothing is kept for later and there is no recovery period, so export anything you want to keep first. If you cannot reach the app, write to hello@lomeda.app from the address linked to your account and we will delete it for you.
EEA, UK and Switzerland
You have the right to access, rectify and erase your personal data; to restrict or object to processing, including processing based on legitimate interests; to data portability; and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority.
United States
Depending on your state (for example California, Colorado, Connecticut, Virginia or Utah), you may have the right to know what personal information we collect, use and disclose; to access and receive a copy of it; to correct it; to delete it; and to opt out of its sale, sharing for targeted advertising, or profiling. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act, and we do not use sensitive personal information to infer characteristics about you. You may use an authorised agent to make a request. If we deny your request, you can appeal by replying to our decision; if the appeal is denied, you may contact your state attorney general.
Israel
Under the Israeli Protection of Privacy Law, you may review the information we hold about you and ask us to correct or delete information that is incorrect, incomplete, unclear or out of date.
Other regions
If you live elsewhere, for example in Ukraine, Brazil, Canada or Switzerland, you may have similar rights under local law, such as rights of access, correction, deletion, portability and to object. We honour these rights as described above.
11. Children
The Service is not intended for anyone under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.
12. Cookies and local storage
The lomeda.app website does not use advertising or tracking cookies. It stores your language choice in your browser’s local storage, which you can clear at any time in your browser settings. When the page loads, your browser fetches the typeface from Google Fonts, which receives your IP address as part of that request.
13. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date above and, if the changes are significant, tell you in the app or by email before they take effect.
14. Contact us
Questions, requests or complaints about privacy: hello@lomeda.app.
If this policy is available in several languages and the versions differ, the English version prevails, except where the law of your country requires otherwise.