Privacy Policy
Last updated: 17 April 2026
1. Introduction
This Privacy Policy explains how LevelUp Lore ("we", "our", "the Service") collects, uses, stores, and protects your personal information. We are committed to protecting your privacy and complying with the Australian Privacy Act 1988 and the Australian Privacy Principles.
2. Information We Collect
We collect only the information necessary to provide the Service:
- Account information: email address and display name when you sign up.
- Uploaded content: lecture files (PDF, DOCX, text) that you upload for game generation.
- Generated games: the game content produced from your uploads is stored in your account.
- Payment information: processed entirely by Stripe. We do not store credit card numbers, CVVs, or bank details. We only retain the Stripe customer ID, payment intent IDs, and transaction metadata needed for accounting and refunds.
- Usage data: basic information such as games generated, subscription status, and timestamps.
3. How We Use Your Information
- To provide the game generation service you have paid for.
- To process payments and issue refunds where applicable.
- To authenticate your account and send account-related emails (signup confirmation, password reset, billing notifications).
- To respond to contact form submissions and support inquiries.
- To improve the Service through aggregate, anonymised usage analysis.
4. Third-Party Services
We use the following third-party services to operate LevelUp Lore. Your data may be processed by these providers:
- Supabase — user authentication and data storage.
- Stripe — payment processing. Stripe handles all card data directly; we never see your card details.
- Anthropic (Claude AI) — used to generate game content from your lecture material. Lecture content is sent to Claude for the duration of generation only and is not retained by Anthropic beyond processing.
- fal.ai — used to generate game artwork and video content.
- Resend — used to deliver transactional emails (signup confirmation, password reset, etc.).
- Railway — hosting provider for our servers.
Each of these providers has its own privacy policy. Your use of LevelUp Lore is subject to their terms as well.
5. Data Storage and Security
- Uploaded lecture files are stored in a private storage bucket accessible only by you and our servers.
- Generated games are stored in your account and accessible only by you (gallery games are marked public by us).
- Databases are protected with Row Level Security so that users can only access their own data.
- All data is transmitted over HTTPS.
- Passwords are hashed by Supabase Auth and never stored in plain text.
6. Data Retention
- Account information and generated games are retained as long as your account is active.
- Uploaded lecture files are retained so you can regenerate games if needed.
- Payment records are retained for 7 years to comply with Australian tax law.
- If you delete your account, all your personal data, uploaded files, and generated games are deleted within 30 days (excluding payment records required by law).
7. Your Rights
Under Australian privacy law, you have the right to:
- Access the personal information we hold about you.
- Request corrections to inaccurate information.
- Request deletion of your account and associated data.
- Opt out of marketing communications (we currently do not send marketing emails).
- Lodge a complaint with the Office of the Australian Information Commissioner if you believe we have mishandled your personal information.
To exercise any of these rights, contact us via the contact form.
8. Cookies
LevelUp Lore uses only essential cookies and browser storage needed for authentication (managed by Supabase). We do not use tracking cookies or third-party advertising cookies.
9. Children's Privacy
LevelUp Lore is intended for university-level students. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will delete it.
10. International Users
LevelUp Lore is operated from Australia. By using the Service, you consent to your information being stored and processed in Australia and in the countries where our third-party providers operate (primarily the United States).
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent change. For material changes, we will notify you by email.
12. Contact Us
For any questions about this Privacy Policy or how we handle your data, please use the contact form.