Privacy Notice

Who this is for

The current pilot platform is intended for adults age 18 and older. Schools and coordinators must not provide access to minors.

The Alchemy Lab is the controller of information collected directly through the adult learner challenge. The challenge is operated independently from a participant's existing school, program, or tutor.

Information we handle

Depending on how a school configures an activity, we may handle:

• Staff and student names, email addresses, school affiliations, and account identifiers.
• Optional participant names or email addresses collected before a guest activity.
• Audio recordings when teacher review requires them, written or dictated responses, activity instructions, scores, and feedback.
• Pronunciation analysis results. The pronunciation tool does not retain a transcript of the spoken response.
• Activity status, attempts, timestamps, AI usage records, and security or diagnostic information.
• For challenge applicants, first name, email address, country, English level, current program type and optional program name, learning goal, referral information, browser information, and a protected hash of the network address used to prevent abuse.

Participants should not submit sensitive personal information that an activity does not require.

Why we use it

We use this information to:

• Deliver assigned activities and AI-assisted feedback.
• Show work and results to authorized learners, teachers, and school staff.
• Secure access links, enforce attempt limits, prevent abuse, and investigate failures.
• Operate, support, and improve the reliability of the pilot platform.
• Evaluate challenge applications and analyze whether participants find AI feedback useful alongside their existing English instruction.

The Alchemy Lab does not sell participant information or use it for targeted advertising. We do not use participant content to train our own AI models.

AI and service providers

Responses and recordings may be sent to Google's Gemini API for transcription, analysis, or feedback. We also use Supabase for authentication, databases, and file storage, and Vercel for application hosting. These providers process information under their applicable service terms and data-protection commitments.

Who can see information

Information may be available to the participant, authorized staff at the relevant school, The Alchemy Lab personnel who need it to operate or support the service, and the providers described above. We may also disclose information when required by law or reasonably necessary to protect the platform and its users.

For the independent adult learner challenge, we will not contact a participant's current school, program, teacher, or tutor, or share the participant's application, recordings, responses, or results with them, unless the participant separately asks us to do so.

Retention and deletion

Raw pronunciation audio is processed without being stored unless teacher review requires playback or the activity explicitly enables 14-day recording playback. Under the standard teacher-review policy, audio is deleted when feedback is released or after 14 days, whichever comes first. When 14-day playback is enabled, the student and authorized staff may replay the recording until its automatic deletion deadline. Activity records, written responses, scores, and feedback may remain available while needed for the pilot, teacher review, security, and reliable operation.

Challenge applications, responses, scores, feedback, consent records, and related security information are normally deleted or de-identified within 12 months after the relevant challenge cohort ends. We may keep a limited record longer when reasonably necessary to document consent, honor a deletion request, investigate abuse, resolve a dispute, or meet a legal obligation.

A school or verified account holder may request deletion by emailing us. We will evaluate and act on verified requests within a reasonable period, subject to backup, security, legal, and recordkeeping needs.

International processing

Our providers may process information in the United States and other countries that may have different data protection laws from the participant's country. Contact us for information about safeguards applicable to a particular transfer.

Your choices and rights

Depending on location, participants may have rights to request access, correction, deletion, restriction, portability, or objection, and may be able to complain to a local data protection authority. A participant may withdraw from the challenge at any time. Withdrawal does not affect processing that occurred before the request or information we must retain for security, legal, or recordkeeping reasons.

Security

We use access controls, private activity links, limited-use passes, authentication, and provider security controls to protect information. No online service can guarantee absolute security.

Questions or requests

Contact Luke@thealchemylab.ai for privacy questions, access requests, corrections, or deletion requests. We may need to verify the requester and coordinate with the relevant school before acting.

Changes

We may update this notice as the pilot develops. The effective date above identifies the current version.