Privacy policy

1. Introduction

Loola AI Inc. ("we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy describes how we collect, use, process, store, and disclose your personal information in connection with your access to and use of Caalim, our AI-powered study application, and the website at caalimapp.com (together, the "Services").

By using the Services, you understand and agree to the collection and use of your information in accordance with this Privacy Policy.

2. Information we collect

A. Information you provide directly

When you create a Caalim account we collect the mobile phone number you register with, and the name you choose to display. If your school uses Layli, our platform for schools, your account may also carry your school and class affiliation so that work set for your class reaches you.

We also collect what you put into the app:

• Text you enter, photographs of problems you ask about, and material you submit for summarisation or revision.
• Your answers to homework, quizzes and tests, together with the results of marking them.

B. Information we collect automatically

We automatically collect information about your interactions with the Services: features you use, screens you view, the time and duration of activities, and referring and exit pages. We also collect technical data such as your IP address, device identifiers, operating system, application version, and mobile network information.

Our website uses cookies and similar technologies to recognise your device, remember your preferences, and analyse usage. You can manage cookie preferences through your browser settings.

C. Information from third parties

Where you register or link your account through a third-party authentication or payment provider, we may receive information from that provider. The scope of what we receive is governed by that provider's own privacy policy and your settings with them.

3. How we use your information

Provide and maintain the Services

We use your information to operate, maintain and deliver Caalim, including account creation, authentication, generating summaries and revision material, marking your answers, and keeping your coin balance and transaction history.

Improve and develop the Services

We analyse how the Services are used in order to improve functionality, performance and reliability, and to develop new features.

Communicate with you

We send service-related communications such as account updates, security alerts and technical notices. Where you have opted in, we may send product updates. You can opt out of marketing messages at any time.

Safety, security and compliance

We use your information to protect the security and integrity of the Services, to detect and prevent fraud and abuse, to enforce our Terms of Service, and to comply with applicable law and lawful governmental requests.

4. How we share your information

We do not sell or rent your personal information to third parties for marketing purposes. We may share information in the following circumstances.

Service providers

We engage third-party companies to perform services on our behalf, including hosting, data analysis, customer support and AI processing. Content you submit to the study tools is processed by our AI provider in order to generate a response. We share phone numbers with Sifalo and Waafi for payment services. All providers are obliged not to disclose or use your data for any other purpose.

Your school

If you link your Caalim account to a school that uses Layli, the work you submit through the School tab and the marks that follow are shared with that school and its teachers, for the purpose of managing assignments and tracking progress. Material you generate with the study tools on your own is not shared with your school.

Business transfers

In the event of a merger, acquisition or sale of assets, your information may be transferred as part of that transaction. We will notify you before any such transfer takes effect.

Legal requirements

We may disclose your information where required by law, to comply with legal obligations, to protect our rights or property, to prevent wrongdoing, or to protect the personal safety of our users or the public.

With your consent

We may share your information for any other purpose with your explicit consent.

5. Legal basis for processing

For users in the European Economic Area, the United Kingdom and Switzerland, we rely on the following legal bases:

• Performance of a contract: processing necessary to provide access to and functionality of the Services.
• Legitimate interests: processing for our legitimate business interests, such as improving the Services, ensuring security and conducting analytics, where these do not override your rights.
• Consent: where we rely on your consent for a specific activity, you may withdraw it at any time.
• Legal obligation: processing required to comply with applicable law or a lawful governmental request.

6. Data security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. These include encryption of data in transit and at rest, access controls and authentication mechanisms, regular security assessments, employee training, and incident response plans.

While we use commercially acceptable means to protect your data, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Data retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting and reporting requirements.

• Input to the study tools is generally not stored beyond the session, except as necessary to process a request and to keep the result you asked for.
• Where your account is linked to a school, retention of the work and marks held in the School tab is determined in conjunction with that school.

When your personal information is no longer needed, we securely delete or anonymise it.

8. Your data protection rights

Depending on your location and the law that applies to you, you may have the right to request a copy of the personal information we hold about you, to have inaccurate information corrected, to have your information deleted subject to legal exceptions, to restrict how we use it, to receive it in a structured machine-readable format, to object to certain processing, to withdraw consent where we rely on it, and to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us using the details below. We may ask you to verify your identity before we respond.

9. Children's privacy

The Services are not intended for children under the age of 13, and we do not knowingly collect personal information from them. Where a school registers a pupil, it does so on the basis that it holds the necessary consent. If we become aware that we have collected information from a child under 13 without verifiable parental consent, we will take reasonable steps to delete it promptly.

10. International data transfers

Your personal information may be stored and processed in any country where we have facilities or engage service providers, including the United States. When transferring data internationally we implement appropriate safeguards, such as Standard Contractual Clauses, so that it receives adequate protection as required by applicable law.

11. Links to other services

The Services may contain links to third-party websites or services that we do not own or control, including the Google Play Store and our payment partners. This Privacy Policy applies only to our Services. We encourage you to review the privacy policies of any third party before interacting with it.

12. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or for operational, legal or regulatory reasons. We will notify you of material changes by posting the updated policy on this page and updating the "last updated" date, and may also notify you in the app. Your continued use after the effective date constitutes acceptance of the revised policy.