Privacy Policy

1. Introduction

Uncertain Systems ("Socratic Lesson", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Socratic Lesson and our services.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Start a Socratic tutoring session
• Upload think-aloud transcripts
• Connect a Muse EEG headband
• Subscribe to a paid plan
• Contact us for support

This information may include: email address, username, audio recordings during sessions, EEG brainwave data, uploaded transcripts, and session metadata.

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including browser type, IP address, and time zone. We do not use analytics or advertising trackers.

3. How We Use Your Information

We use the information we collect to:

• Provide the Socratic tutoring experience (audio analysis, probe generation, reports)
• Store and replay your session history
• Personalize probes using your uploaded think-aloud transcripts
• Record and summarize EEG data during sessions
• Process payments and manage subscriptions
• Respond to your inquiries and support requests
• Improve our platform and AI tutoring quality

4. Third-Party Services

We share data with the following third-party services, strictly to operate Socratic Lesson:

• Supabase — authentication, database, and file storage (audio, EEG, transcripts)
• OpenRouter — AI model inference for audio analysis, probe generation, and reports
• ElevenLabs — text-to-speech for reading probes aloud
• Stripe — payment processing (we never see or store your card details)
• Vercel — website hosting

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. Audio recordings and EEG data are stored in private, per-user storage buckets. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

6. Your Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights:

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request restriction of processing
• Portability: Request transfer of your data
• Objection: Object to processing of your data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at daniel@uncertain.systems.

7. Anonymized Data for AI Training

With your explicit consent, we collect anonymized think-aloud data from Socratic sessions to build AI training, fine-tuning, and context engineering datasets. This data is used to improve the quality of Socratic tutoring and advance research in AI-assisted education.

What we collect

Depending on your preferences (configurable in your Dashboard), this may include:

• Transcripts only: Anonymized text transcripts of your think-aloud sessions, including reasoning patterns and probe interactions
• Transcripts + Audio: In addition to transcripts, anonymized audio recordings that capture speech patterns (pauses, hesitation, tone shifts) — voice fingerprints are never stored or included

How we anonymize

• All names, emails, and personally identifiable information are removed
• Session metadata (timestamps, user IDs) is stripped or cryptographically hashed
• Data cannot be traced back to individual users

Your control

Data sharing is opt-in and disabled by default. You can change your preferences at any time from the "Data & Privacy" tab in your Dashboard. Changes apply to future sessions only — previously shared data remains in existing datasets. You may request removal of all your contributed data by contacting us.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected. You can delete any session from your dashboard at any time — all associated data (audio, EEG, probes, reports) is permanently removed. Account deletion can be requested via email.

9. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page with an updated revision date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: