How we handle data.
This policy explains what data lacinii collects, why we collect it, how long we keep it, and what rights you have. It is designed to support the requirements of the EU General Data Protection Regulation (GDPR).
1. Who we are
lacinii is an early-stage education technology project developing an AI-native classroom workflow. The service is operated by the lacinii team. For data-protection questions, contact us at info@pineweb.eu.
2. What this policy covers
This policy applies to the lacinii website, web application, and any classroom workflow services we provide to schools, teachers, pupils, and parents. It does not cover third-party websites or services that we link to.
3. Data we collect
We collect only the data needed to run the workflow:
- Account data: name, school email address, role, and school affiliation provided when an account is created.
- Lesson transcripts: text generated from classroom audio, which becomes the primary output of the service.
- AI-generated summaries: key takeaways, revision notes, and other structured outputs derived from transcripts.
- Technical logs: anonymised error and usage data used to keep the service stable and secure.
We do not store raw audio recordings beyond the short processing window described below, and we do not collect video recordings.
4. Audio processing and biometric data
Classroom audio is converted to text as quickly as possible. The raw audio file is automatically and permanently deleted within 60 seconds of processing. Only the resulting transcript and summary remain.
Because voice recordings can be considered biometric data under some interpretations, we treat them as high-risk and apply additional safeguards: minimal retention, encrypted transport, and no sale or sharing of raw audio.
5. How we use your data
- To provide, maintain, and improve the lacinii workflow.
- To generate lesson transcripts, summaries, and revision materials.
- To authenticate users and keep accounts secure.
- To respond to support requests and legal notices.
- To comply with applicable laws and school obligations.
We do not use pupil or teacher data to build general advertising profiles, and we do not sell personal data.
6. Legal basis for processing (GDPR)
We rely on the following lawful bases under GDPR:
- Contract: processing necessary to deliver the service under a school agreement.
- Legitimate interests: keeping the service secure, stable, and fraud-free.
- Consent: where explicit consent is obtained, for example for marketing communications or optional features.
- Legal obligation: where we are required to disclose data by law or a court order.
For pupils, the school remains the data controller for much of the information processed, and lacinii acts as a processor under the school's instructions. We encourage schools to confirm that the necessary consents or notices are in place under local law.
7. How long we keep data
Raw audio is deleted within 60 seconds. Transcripts, summaries, and account data are kept for as long as the school's agreement is active and for a reasonable period afterwards to allow for disputes, audits, or legal obligations. Exact retention periods are set out in the school's individual contract.
When an account is closed, we delete or anonymise personal data unless we are required to keep it by law.
8. Who we share data with
We share personal data only where necessary:
- Within the school: teachers, pupils, and administrators authorised under the school's account.
- Service providers: cloud hosting, transcription, and AI providers who process data on our behalf under strict data-processing agreements.
- Legal authorities: when required by law or to protect our rights and users' safety.
All processors are chosen for their ability to meet EU data-protection standards. Where data is transferred outside the European Economic Area, we use appropriate safeguards such as Standard Contractual Clauses.
9. Security
We use encryption in transit, access controls, regular backups, and ongoing security reviews. No system is completely secure, and we encourage schools to follow strong password and device-management practices.
10. Your rights
Depending on your location and role, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data, subject to legal and contractual limits.
- Object to or restrict certain processing.
- Receive your data in a portable format.
- Withdraw consent at any time.
To exercise these rights, email info@pineweb.eu. Pupils and parents should normally raise requests through the school first.
11. Children's data
lacinii is intended for use in schools. We do not knowingly process data from children outside a school context. Schools are responsible for obtaining any parental or guardian consent required by local law and for ensuring that use of the service complies with their obligations.
12. Cookies and analytics
We use only the cookies and similar technologies necessary to keep the site secure and to understand how visitors use it. We do not use invasive tracking or advertising cookies.
13. Changes to this policy
We may update this policy as the service or the law changes. We will post the revised version on this page with an updated effective date. Continued use of the service after changes means you accept the revised policy.
14. Contact us
Questions about this policy or a data-protection request? Email info@pineweb.eu.
Last updated: 3 August 2026
Want the shorter version?
Our /privacy page explains the security and design choices behind lacinii in plain language.