Privacy Policy

1. Introduction

Uncertain Systems ("Socratic Lesson", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Socratic Lesson and our services.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Start a Socratic tutoring session
• Upload think-aloud transcripts
• Connect a Muse EEG headband
• Subscribe to a paid plan
• Contact us for support

This information may include: email address, username, audio recordings during sessions, EEG brainwave data, uploaded transcripts, and session metadata.

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including browser type, IP address, and time zone. We do not use analytics or advertising trackers.

3. How We Use Your Information

We use the information we collect to:

• Provide the Socratic tutoring experience (audio analysis, probe generation, reports)
• Store and replay your session history
• Personalize probes using your uploaded think-aloud transcripts
• Record and summarize EEG data during sessions
• Process payments and manage subscriptions
• Respond to your inquiries and support requests
• Improve our platform and AI tutoring quality

4. Third-Party Services

We share data with the following third-party services, strictly to operate Socratic Lesson:

• Supabase — authentication, database, and file storage (audio, EEG, transcripts)
• OpenRouter — AI model inference for audio analysis, probe generation, and reports
• ElevenLabs — text-to-speech for reading probes aloud
• Stripe — payment processing (we never see or store your card details)
• Vercel — website hosting

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. Audio recordings and EEG data are stored in private, per-user storage buckets. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

6. Your Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights:

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request restriction of processing
• Portability: Request transfer of your data
• Objection: Object to processing of your data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at daniel@uncertain.systems.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected. You can delete any session from your dashboard at any time — all associated data (audio, EEG, probes, reports) is permanently removed. Account deletion can be requested via email.

8. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page with an updated revision date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at: