Privacy Policy

This Privacy Policy explains what Prakly collects, how the platform uses that information, and what choices you have. It reflects the current product as used by L&D teams, covering account creation, training content generation, learner progress tracking, course sharing, analytics, and support workflows.

Information We Collect

• Account data: email address, hashed password for email/password accounts, selected role, and basic account metadata.
• Authentication data: Google sign-in identity data when you choose Google OAuth, plus JWT session tokens used by the app.
• Learning data: saved lessons, courses, lesson metadata, progress history, XP, streaks, leaderboard stats, and share records.
• Generation inputs: prompts, uploaded files, pasted text, extracted text, and speaking-evaluation submissions you send to the app.
• Settings data: theme preference, role hints, analytics consent state, and custom API key configuration if you choose to store one.
• Support data: information you submit through the contact form or support email workflows.

Where Data Lives

• Database: user accounts, roles, quotas, progress, leaderboard stats, and sharing records.
• File storage: saved lesson JSON and course-related artifacts are stored under the application storage layer for your account.
• Browser storage: the frontend stores session and UX state in local storage, including auth tokens, login state, theme preference, analytics consent, user role, and post-login redirects for shared bundle links.

How We Use Information

• Authenticate users and keep sessions working across pages.
• Generate lessons, evaluate speaking answers, and save course content.
• Track quotas, rate limits, progress, leaderboard views, and course-sharing relationships.
• Send transactional email such as welcome messages, password resets, lesson invites, course invites, and contact-form forwarding.
• Operate, debug, secure, and improve the service.

AI Processing And Providers

When you generate lessons or use speaking evaluation, the content you submit is sent to the configured AI provider needed to produce the result. Depending on your setup, that may use Prakly-managed providers or a custom provider/API key you configure in Settings. Uploaded or pasted source material is processed to extract text and generate lesson content. Prakly also runs PII scanning on prompt and context inputs for safety and logging, but that scan does not block generation by itself.

Third-Party Services

• Resend: sends transactional emails.
• Google OAuth: used when you choose Google sign-in.
• Google Analytics: loaded for product analytics, but analytics collection is consent-based in the browser.
• AI providers: used to generate lesson content and speaking feedback.

Analytics Consent

Prakly shows an in-app analytics consent banner. Analytics storage is denied by default. If you accept, the app stores your consent choice in local storage and enables Google Analytics with anonymized IP settings. If you decline, analytics events are not sent from the client.

Sharing And Invitations

When a training designer shares a lesson or course, Prakly stores share records that link the training designer's account, the recipient's email address, and the shared lesson. Course-share emails may include a bundled link that opens multiple lessons at once after the learner authenticates.

Security

We use reasonable safeguards appropriate to the current app architecture. Passwords are stored as hashes, custom API keys are stored encrypted, and authenticated API routes require a bearer token. No internet service can guarantee absolute security, and you are responsible for keeping your device and credentials secure.

Data Retention And Deletion

Saved lessons, course content, progress records, and account data remain in the system until removed through available product actions or manual administrative action. At the time of writing, Prakly does not provide a self-serve account deletion or full data export feature inside the app.

Your Choices

• You can choose whether to create an account with email/password or Google sign-in.
• You can accept or decline browser-based analytics consent.
• You can add, replace, or remove a custom API key in Settings.
• You can request help with correction or deletion questions through the contact channel.

Contact Us

If you have questions about this Privacy Policy or want to request help with your data, please use the contact page.