LarnnitAll policies

California Privacy Notice

Last updated: 2026-06-05

This notice supplements our Privacy Policyfor California residents and is intended to satisfy the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively the “CCPA/CPRA”).

1. Categories of personal information we collect

In the past 12 months we have collected the following categories of personal information about California residents:

  • Identifiers — name, email, username, IP address, device identifiers.
  • Customer records — account information, payment-method references (not full card numbers), university affiliation.
  • Commercial information — purchases, listings, subscriptions, refunds.
  • Internet / network activity — pages visited, features used, app version, crash reports.
  • Geolocation — approximate location derived from IP. We do not collect precise geolocation unless you grant a mobile permission for a specific feature.
  • Audio / visual — profile photo, uploaded media, voice/video call metadata (start time, duration; not the call audio itself).
  • Education — affiliation, courses, tutor materials. Where Larnnit acts on behalf of a school, the school is the controller.
  • Inferences — limited inferences about feature use to recommend content (e.g. communities related to your subjects).
  • Sensitive personal information — government ID images uploaded for verification. We use these only for the verification purpose and do not use them to infer characteristics about you.

2. Sources

  • Directly from you when you create an account or upload content.
  • Automatically when you use the platform.
  • From our payment processors when you make a purchase.
  • From institutions where Larnnit is provided as part of a school programme.

3. Business or commercial purposes

  • Operating, maintaining, and securing the platform.
  • Authenticating users and preventing fraud.
  • Communicating with you (transactional notifications, support).
  • Processing payments and complying with tax/AML obligations.
  • Improving the product through analytics and limited A/B testing.
  • Complying with the law and responding to lawful requests.

4. Categories of third parties we disclose to

  • Service providers (hosting, storage, email, error tracking, push) — see Subprocessors.
  • Payment processors.
  • Other users, to the extent your profile, posts, comments, and listings are public.
  • Authorities, when required by valid legal process.
  • A successor entity in connection with a merger, acquisition, or sale of assets.

5. Sale or sharing of personal information

Larnnit does not sell personal information for money. We do not share personal information for cross-context behavioural advertising.

We honour the Global Privacy Control (GPC) signal as a request to opt out of any future sale or sharing.

6. Use of sensitive personal information

We use sensitive personal information (e.g. government ID uploaded for tutor or seller verification) only for the verification purpose. We do not use it to infer characteristics about you, and we do not need to offer a separate “limit use” option under §1798.121.

7. Retention

See Privacy Policy §4. We keep each category of personal information for the period needed to provide the service, comply with law, resolve disputes, and prevent fraud — generally for the life of the account, plus up to 7 years for transactional records to satisfy tax obligations.

8. Your rights

California residents have the right to:

  • Know what personal information we have collected, used, disclosed, and the categories of sources and recipients.
  • Access a copy of your personal information.
  • Correct inaccurate personal information.
  • Delete your personal information.
  • Opt out of any sale or sharing (we do not currently sell or share, but you can confirm your preference at any time).
  • Limit our use of sensitive personal information (we already limit it as described above).
  • Not be discriminated against for exercising your rights.

9. How to exercise your rights

  • Open Settings → Privacy in the app or web dashboard.
  • Or email privacy@larnnit.com with the subject “California privacy request”.
  • We will verify your identity (typically by asking you to respond from the email on file) before fulfilling access, correction, or deletion requests.
  • An authorised agent may submit a request on your behalf with written authorisation.
  • We respond within 45 days, extendable to 90 days where reasonably necessary.

10. Shine the Light

California Civil Code §1798.83 lets California residents request a notice describing what categories of personal information we share with third parties for direct marketing purposes. Larnnit does not share personal information with third parties for their direct marketing purposes.

11. Contact

Email privacy@larnnit.com or write to the address listed on the legal centre.