Privacy policy

Last updated: June 13, 2026

Lorun is an AI study tutor that connects to your school's learning management system (such as Canvas) so it can answer questions about your own course materials. Lorun is operated by Derin Lowe, an individual based in Charlotte, North Carolina, USA ("Lorun", "we", "us"). This policy explains what data we collect, why, how we handle it, and the choices you have. Questions: derinscottlowe@gmail.com.

Information we collect

Account information — your email address. Sign-up and sign-in are handled by our authentication provider (Supabase); we do not store your password.
Course data from your LMS — when you connect Canvas and run a sync, the Lorun browser extension reads your courses, assignments (including titles, descriptions, and due dates), and course files (e.g. PDFs, slides, and documents), using your existing logged-in session. This content is sent to Lorun so it can be made searchable for your chats.
Google Drive documents — if you connect Google Drive, Lorun reads the specific Google Docs that are linked inside your assignments, so their text can be used to answer your questions. See "Google user data" below.
Your chats — the questions you ask and the answers Lorun generates, so you can return to your conversations.
Usage data — basic counts needed to enforce free-tier limits (e.g. messages per week) and to keep the service running.
Payment information — if you subscribe, payments are processed by Stripe. We do not receive or store your full card details.

How we use your information

To provide the core service: syncing your course materials, converting them into a searchable form, and answering your questions grounded in those materials with citations.
To operate, secure, and improve the product, and to enforce usage limits.
To process payments and manage your subscription.
To communicate with you about your account or the service.

We do not sell your personal data, and we do not use your course materials or Google data to serve advertising.

Google user data & Limited Use

When you connect Google Drive, Lorun requests read-only access (drive.readonly) and uses it solely to retrieve the Google Docs referenced in your assignments so their content can be used in your tutoring chats.

Limited Use disclosure. Lorun's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

We access only the Google Drive documents needed to provide Lorun's in-app tutoring features.
We do not transfer or sell this data to others, except as necessary to provide and improve the service, to comply with the law, or as part of a merger or acquisition.
We do not use this data for advertising.
We do not allow humans to read this data unless we have your consent, it is necessary for security or to comply with the law, or the data has been aggregated and anonymized.

You can disconnect Google Drive at any time from the extension, and revoke Lorun's access entirely from your Google account permissions.

Service providers we share data with

We use a small number of trusted providers ("subprocessors") to run Lorun. They process data only to provide their service to us:

Supabase — authentication, database, and file storage.
OpenAI — generating the embeddings that make your materials searchable.
Anthropic — generating chat answers (relevant excerpts of your materials are sent as context for the question you ask).
Google — when you connect Drive, to read your linked documents.
Stripe — payment processing for subscriptions.

Storage, security, and retention

Your data is stored on Supabase and in Lorun's own vector store, hosted in the United States. We use reasonable technical and organizational measures to protect it. We keep your data for as long as your account is active, or as needed to provide the service, and then delete it as described below.

Deleting your data

You can delete your account at any time from the Settings page. Deleting your account removes your synced courses, assignments, files, generated embeddings, chats, and your profile. You may also email derinscottlowe@gmail.com to request deletion or ask a question about your data.

Children

Lorun is intended for college and university students and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy as the product evolves. We will revise the "Last updated" date above, and significant changes will be communicated where appropriate.

Contact

Questions about this policy or your data: derinscottlowe@gmail.com.

← Back home