Privacy Policy

Lira Learning LLC | Lira Studio

Effective date: July 21, 2026

Lira Learning LLC ("Lira," "we," "us," or "our") operates Lira Studio, a web-based, AI-assisted curriculum and learning design platform. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, create or use a Lira Studio account, communicate with us, or otherwise use our services (collectively, the "Services").

This Policy describes our current practices. We will update it before introducing materially different practices, such as online payments, promotional email programs, third-party analytics, or advertising technologies.

1. Scope and Who We Are

The controller responsible for the personal information described in this Policy is Lira Learning LLC, a United States company. You may contact us at support@liralearning.com.

This Policy applies to personal information that Lira handles for its own purposes. When an organization uses Lira Studio and asks Lira to process personal information on its behalf, the organization may act as the controller or business and Lira may act as its processor or service provider. A separate agreement may apply to that processing.

2. Who May Use the Services

Lira Studio is intended for adults who are at least 18 years old, or the age of legal majority where they live. It is designed for educators, instructional designers, curriculum teams, publishers, training teams, and other adult professionals. It is not directed to children or students.

Do not submit personally identifiable information about students or other minors. This includes names, email addresses, student identification numbers, education or health records, photographs, precise locations, or other information that could reasonably identify an individual student. Use anonymized, aggregated, or fictional information when examples are needed. If we learn that personal information about a child or student was submitted in violation of this restriction, we may delete it and take other appropriate steps.

The Services are not intended to collect government identification numbers, financial account information, health information, biometric information, or other highly sensitive personal information. Please do not submit this information unless Lira expressly requests it for a specific lawful purpose.

3. Personal Information We Collect

Account and authentication information

Email address and account identifiers.
Name and profile image, when provided through Google sign-in or otherwise added to an account.
Authentication and session information. If you use email-and-password sign-in, Clerk processes your password or authentication credential on our behalf. Lira does not receive or store a readable copy of your password.
Google account identifier and basic profile information when you choose Sign in with Google.

Project and content information

We collect information you enter, upload, create, or save in Lira Studio, such as project descriptions, prompts, source material, standards or alignment information, instructional content, feedback, generated outputs, review notes, and other project materials. If this content includes personal information, we will process that information as described in this Policy.

Communications and support information

We collect the information you provide when you contact us, request support, participate in a product discussion, submit feedback, or make a privacy request. This may include your name, email address, organization, message content, and information needed to respond.

Information collected automatically

When you use the Services, Lira and its service providers may automatically collect limited technical and activity information, including:

Internet Protocol (IP) address, browser type, device type, operating system, and similar technical information.
Login, authentication, session, security, error, and performance records.
Information about interactions with the Services, such as access times and features used.
Approximate general location inferred from an IP address for account security and service operation. We do not collect GPS coordinates or precise device location.

Information from Google

When you choose Sign in with Google, Google may provide an account identifier, email address, name, and profile image, depending on the permissions and profile information associated with your Google account. Lira does not receive your Google password and does not use Google sign-in to access Gmail, Google Drive, Google Calendar, contacts, or other Google content.

Lira's use of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements, to the extent applicable.

Payment information

Lira Studio does not currently accept online payments through the Services and does not currently collect payment card information. We will update this Policy before enabling online billing or payment processing.

4. How We Use Personal Information

We use personal information to:

Create, authenticate, secure, maintain, and administer user accounts.
Provide Lira Studio and its project, authoring, review, export, and AI-assisted features.
Process project content and return requested outputs.
Respond to questions, support requests, privacy requests, and feedback.
Send account, authentication, security, service availability, policy, and other administrative notices.
Operate, troubleshoot, maintain, test, and improve the Services.
Understand general usage trends and evaluate feature performance without using personal information for targeted advertising.
Prevent fraud, misuse, unauthorized access, and security incidents.
Enforce our agreements, protect legal rights, and comply with applicable law.

We do not currently use personal information to send promotional marketing emails, serve targeted advertisements, or build advertising profiles.

5. AI-Assisted Features

Lira Studio uses artificial intelligence to help users generate, revise, translate, organize, analyze, and review instructional content. When you choose to use an AI-assisted feature, Lira may send the instructions, project content, and related context needed to complete the request to Anthropic for processing through its commercial API.

Do not include student names or other personally identifiable information about students or minors in prompts, uploads, source materials, or other content submitted to AI-assisted features.

Under Anthropic's current standard commercial API practices, API inputs and outputs are not used to train Anthropic's models by default and are generally deleted from Anthropic's backend within 30 days, subject to Anthropic's contractual exceptions, safety requirements, and legal obligations. Anthropic's practices may change under its terms and privacy documentation.

Lira does not use personal information to make decisions that produce legal or similarly significant effects about users, and it does not create consumer profiles based on inferred personal characteristics.

6. Cookies and Similar Technologies

The Services use cookies and similar technologies that are necessary to operate the platform, authenticate users, maintain sessions, and protect accounts. Clerk sets authentication cookies when users sign in or create accounts. These cookies are required for account functionality.

We do not currently use advertising, retargeting, social media tracking, or third-party analytics cookies. Our separate Cookie Policy, available wherever this Privacy Policy is posted, provides more information about the cookies used by the Services.

7. How We Disclose Personal Information

We disclose personal information only as reasonably necessary for the purposes described in this Policy, including to the following categories of recipients:

Authentication and account-management providers, including Clerk.
Google, when you choose Sign in with Google.
Cloud hosting, infrastructure, and data-storage providers, including Render.
AI service providers, including Anthropic, when you choose an AI-assisted feature.
Email, support, security, and technical service providers that help us operate or protect the Services.
Professional advisers, auditors, insurers, and legal counsel when reasonably necessary.
Government authorities, courts, law enforcement, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, security, or the integrity of the Services.
A buyer, investor, successor, or other participant in a merger, financing, acquisition, reorganization, sale of assets, or similar business transaction, subject to appropriate safeguards and applicable law.
Other parties when you direct us to disclose information or provide consent.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use it for targeted advertising.

8. International Data Transfers

Lira is based in the United States. Personal information may be processed in the United States and in other countries where our service providers operate. Those countries may have privacy laws that differ from the laws where you live.

When required by applicable law, we rely on recognized transfer mechanisms and contractual safeguards, which may include the European Commission's Standard Contractual Clauses, the United Kingdom transfer addendum, adequacy decisions, or a service provider's participation in an approved data-transfer framework. Lira Learning LLC is not currently self-certified under the EU-U.S. Data Privacy Framework. You may contact us for additional information about applicable transfer safeguards.

9. Legal Bases for EEA and UK Users

When European Economic Area or United Kingdom data protection law applies, we rely on the following legal bases:

Performance of a contract: to create and administer accounts, authenticate users, provide the Services, process requested content, and respond to service-related requests.
Legitimate interests: to secure, operate, troubleshoot, maintain, and improve the Services; prevent misuse; understand general usage trends; and protect our rights, provided those interests are not overridden by your rights and interests.
Legal obligations: to comply with applicable legal, regulatory, tax, accounting, security, and law-enforcement requirements.
Consent: when we specifically ask for consent for an optional activity. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. We generally retain account and project information while an account is active and delete or anonymize it within three months after account termination, subject to the exceptions below.

We may retain information longer when reasonably necessary to:

Comply with legal, tax, accounting, or regulatory obligations.
Resolve disputes, enforce agreements, or protect legal rights.
Investigate fraud, abuse, security incidents, or violations of our policies.
Complete ordinary backup, archival, and disaster-recovery cycles.

When retention is no longer necessary, we delete or anonymize the information. Aggregated or de-identified information that cannot reasonably identify an individual may be retained and used for lawful purposes.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encrypted connections, managed authentication, and security features provided by our infrastructure vendors. No system or method of transmission is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account credentials and notifying us promptly if you believe your account has been accessed without authorization.

12. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

Confirm whether we process your personal information and request access to it.
Correct inaccurate or incomplete personal information.
Request deletion of personal information.
Receive certain personal information in a portable format.
Restrict or object to certain processing.
Withdraw consent where processing is based on consent.
Appeal a decision regarding a privacy request, where applicable.
Lodge a complaint with a data protection or privacy authority.

To submit a request, use the privacy request form available with this Policy or email support@liralearning.com. You may use the same email address to appeal a decision. We may need to verify your identity before completing a request. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and verification of the individual's identity.

We will not discriminate against you for exercising an applicable privacy right. Some rights apply only when the relevant law covers Lira or the particular processing activity, and we may deny or limit a request when permitted by law.

13. Supplemental Notice for U.S. State Privacy Laws

This section summarizes the categories of personal information Lira has collected and disclosed for business purposes during the preceding 12 months. The examples reflect our current Services and do not mean that we collect every item listed in a statutory category.

Category	Examples collected	Sources	Business purposes and recipients	Sold/shared for targeted advertising?
Identifiers and account information	Email address, name if provided, internal account ID, Google account identifier, IP address, session and authentication identifiers	Directly from you; Google sign-in; service operation	Account creation, authentication, security, support, and service delivery; disclosed to Clerk, Google, Render, and related service providers as needed	No
California customer-record information	Name and contact information, when provided	Directly from you; Google sign-in	Account administration, communications, support, and service delivery; disclosed to service providers as needed	No
Internet or other electronic network activity	Browser and device information, login and session records, access times, security records, feature interactions, and error logs	Collected automatically through the Services	Service operation, security, troubleshooting, and improvement; disclosed to authentication, hosting, infrastructure, and security providers	No
Geolocation information	Approximate general location inferred from IP address; no GPS or precise location	Collected automatically through service providers	Security, fraud prevention, and service administration; disclosed to authentication and infrastructure providers	No
Sensitive personal information	Account login information combined with a password or authentication credential	Directly from you during email-and-password authentication	Account authentication and security; processed by Clerk. Lira does not receive or store a readable copy of your password	No
User-provided content and communications	Project content, prompts, source materials, feedback, generated content, and support communications that may contain personal information	Directly from you	Provide requested features, support, hosting, storage, and AI processing; disclosed to Render, Anthropic, and support providers as needed	No

We do not knowingly collect protected characteristics, biometric information, professional or employment information, financial account information, medical information, or consumer inferences through the current account and platform workflow, unless a user voluntarily places such information in content despite our instructions not to submit sensitive information.

We do not provide financial incentives in exchange for personal information. We do not disclose personal information to third parties for their own direct-marketing purposes. Because we do not sell personal information or share it for targeted advertising, there is no current sale or targeted-advertising processing to opt out of.

Retention for these categories is described in Section 10. The specific period may vary based on the nature of the information, the purpose for processing it, legal requirements, security needs, and backup cycles.

14. Information for Canadian Users

Canadian users may request access to personal information Lira holds about them and ask that inaccurate or incomplete information be corrected, subject to applicable law. They may also raise questions or concerns about our privacy practices by contacting us. We limit collection, use, disclosure, and retention to the purposes described in this Policy and apply safeguards appropriate to the nature of the information.

15. Third-Party Services and Links

The Services may contain links to third-party websites or services. This Policy does not govern third parties' independent privacy practices. Their privacy policies and terms apply when you interact with them directly.

16. Changes to This Policy

We may update this Policy to reflect changes in the Services, our practices, technology, or legal requirements. We will post the updated Policy and revise the effective date. When changes are material, we may also provide notice through the Services or by email, as appropriate. We will obtain consent when required by law before using personal information for a materially different purpose.

17. Contact Us

Questions, privacy requests, and appeals may be sent to:

Lira Learning LLC
United States
support@liralearning.com