Privacy policy

This policy explains what information Leurons collects, why, who helps us with it and what your rights are. We collect as little as we can and try to be plain about it. We don't sell your data and we don't use it for advertising.

1. Who's responsible

Renewed Energy (renewedenergy.nl) owns and runs Leurons and is responsible for your personal data (the "controller" under the GDPR). Address: Van 't Hoffstraat 224, 2014 RL Haarlem, Netherlands. KvK number: 88110176. For anything about your data, email support@leurons.com.

2. What we collect

• Account details: your name, email address and password (stored only as a scrambled hash we can't read back). If you sign in with Google, we get your name, email address and profile photo from Google.
• Your study material: when you upload a PDF or PowerPoint we extract the text, and keep that text and everything Leurons makes from it: summaries, flashcards, tests, podcasts, lessons, mind maps, notes and highlights. We don't keep your original uploaded files.
• What you do while studying: your test answers and marks, flashcard reviews, Brain Dumps and mind maps, so Leurons can show your progress and bring back what you got wrong.
• AI tutor conversations: what you type and the tutor's replies, so you can carry on later.
• Usage and coins: how much of your monthly allowance you've used, your coin balance and what coins went to.
• Payments: your plan, a reference to each payment, the amount, what it was for, and for receipts how you paid (like iDEAL and the last 4 digits of the account or card). We never see or store your full card number or bank login.
• Feedback you send us: your message, and your name and email if you choose to add them. You can send feedback without an account.
• Technical data: your IP address and browser details in our server logs, to keep Leurons secure, stop abuse and fix problems.

3. Why we use it, and on what basis

• To give you Leurons (your account, your study material, the AI, your plan and coins): because it's needed for our agreement with you.
• To keep payment records for 7 years: because Dutch tax law requires it.
• To keep Leurons secure, prevent abuse and improve it with overall numbers (like how many people use a feature): because we have a legitimate interest in that, and it hardly affects you.
• Emails: we only email you about your account, your study material and your payments. No newsletters unless you ask for them.

4. AI processing

To make your study material, mark written answers and write tutor replies, the text from your uploads, your answers and your tutor messages are sent to our AI provider, Anthropic (Claude). It processes them for us to return the result, and doesn't use them to train its models. For a podcast or lesson, its script is turned into speech by Google. Neither of us uses your material for anything else.

The AI decides some things on its own, like whether a written answer is right and what goes into a Map Check. That only shapes your study feedback and has no legal or similar effects on you. If you think a mark is wrong, email us and a person will look at it.

5. Who helps us

These companies process data for us, only to do their part for Leurons and under an agreement that protects your data:

We only share your data with others when the law requires it, for example when a court orders it.

6. Payments

Plans and coins are sold by Renewed Energy and paid through Mollie B.V. in Amsterdam. Mollie handles the payment details you give it under its own privacy policy. We only get back what we need to give you your plan or coins and send a receipt: that you paid, how much, for what, how you paid and a reference to the payment.

7. Cookies and storage on your device

We only use what Leurons needs to work. No advertising or tracking cookies, so there's nothing to accept beyond the notice.

• Session and security: keeps you signed in and protects forms from misuse.
• Remember me: only if you tick it when signing in, so you stay signed in longer.
• Guest study set: lets a study set you make before signing up move to your account when you register.
• Language: remembers the language you picked.
• Settings in your browser: your light or dark choice, that you've seen the cookie notice, and how you like panels laid out. These stay on your device and aren't sent to us.

To see how many people visit, we use privacy-friendly analytics on our public pages only. It sets no cookies, stores nothing on your device and doesn't build a profile of you or follow you across websites. It only counts things like page views and which site linked to us. It's never used inside your account, so your study sets and tutor conversations are never sent to it.

8. How long we keep it

• Your account and study material: for as long as you have an account. Delete a study set and it's gone; delete your account and everything in it is erased.
• Payment records: 7 years, because Dutch tax law requires it. After you delete your account they stay without your name or email.
• Feedback: as long as we need it to act on it, and you can ask us to remove it sooner.
• Server logs: only for a short time, for security and fixing problems.
• Backups: our host keeps backups of the database for a limited time. Something you deleted disappears from them as old backups are replaced.

9. Keeping it safe

Everything travels over an encrypted connection, passwords are stored as hashes we can't read, and only the people who run Leurons can reach the systems, only when needed. No system is perfectly safe, but if something ever goes wrong with your data, we'll tell you and the authorities as the law requires.

10. Age

Leurons is for students aged 16 and over. If you're younger, a parent or guardian has to agree to you using it. If you're a parent and think your child gave us data without that permission, email us and we'll remove it.

11. Outside the EU

Some of the companies above (Anthropic, Google, Resend) may process data in the United States. That's only done with the protections the GDPR requires, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contract clauses.

12. Your rights

You can ask to see your data, correct it, get a copy of it, have it deleted, limit how we use it, or object to how we use it. You can delete your account and all its data yourself in your account settings. For the rest, email support@leurons.com. We answer within a month, and it's free.

Think we're not handling your data properly? Please tell us first, so we can fix it. You can also complain to the Dutch data protection authority, Autoriteit Persoonsgegevens, or to the authority in the country where you live.

13. Changes

If this policy changes, we update this page and its date. If a change matters for how we use your data, we'll also tell you by email or in Leurons.

14. Contact

Questions or requests about your data: support@leurons.com. Or by post: Renewed Energy, Van 't Hoffstraat 224, 2014 RL Haarlem, Netherlands.