Your learning records belong to your account. This policy describes the information involved in providing Practisi, including course work, AI conversations, payments, identity verification, and the public website.
Last updated: October 12, 2026
How Practisi handles your information, why we use it, and the choices available to you.
Contact: legal@practisi.com
Scope and contact
This policy applies to the Practisi website, application, courses, Clare, Ask Practisi, and related account services that link to it. “Practisi,” “we,” and “us” refer to the operator of those services. It does not cover a third-party website simply because we link to it.
Send privacy questions and requests to legal@practisi.com. Describe the request and the email associated with your account. Do not email passwords, payment-card numbers, government ID images, or biometric information. We may need to confirm account ownership before acting.
Account, profile, and preferences
We collect the account information you provide, including your email address, account identifier, name, username, profile photo, and optional biography or social links. Authentication services process your sign-in credentials and session information. We store account preferences such as language, appearance, timezone, and saved courses when you select them.
These records let you sign in, identify your account, resume your work, and use the same account across the website and application. Information you choose to publish in a profile, review, or shared credential may be visible to other people. Do not put private information in a public field.
Course work and learning records
We process enrolled courses, saved courses, lesson attempts, submitted answers and files, evaluations, scores, feedback, lesson and module completion, learning activity, streaks, skills, badges, and certificates. We use these records to deliver course tasks, evaluate submissions, show progress, determine access and achievement requirements, and help you continue learning.
A submitted answer may contain personal information or information about another person. Use fictional or appropriately anonymized material when a task does not require real personal data. You must have permission to submit confidential, copyrighted, or third-party material.
Clare, Ask Practisi, and automated evaluation
When you use an AI feature, we process your prompt, relevant conversation history, course or page context, and the account or learning information needed for the feature. Clare supports lesson work. Ask Practisi helps with Practisi, navigation, and account information. Evaluation services compare submitted work with course requirements.
Relevant information is sent to AI service providers, including OpenAI, to generate responses or assessments. A provider may process requests for security, abuse prevention, and operation under its applicable terms and data controls. OpenAI states that API inputs and outputs are not used for model training by default. This policy does not promise that every provider has the same settings or that every request has zero retention.
AI responses and assessments can be incomplete or incorrect. Review important answers and contact us about an apparent error. We use learning assessments to provide educational feedback and record course achievements; they are not professional licensing, employment, lending, or admissions decisions.
Do not share passwords, access tokens, private keys, complete payment details, medical records, or other information that the feature does not need. You can use ordinary text instead of voice.
Conversation history and persistent context
Signed-in conversations and relevant memory can persist so Clare and Ask Practisi can maintain continuity. Guest conversations may also be stored on the device. When you edit an earlier message, later turns can disappear from the visible conversation while being retained as archived history or memory. Editing a message is not a request to erase every earlier version or related record.
Use the conversation controls to manage visible chats. For a request covering retained history, memory, or archived versions, contact legal@practisi.com and identify the account and scope. Clearing browser storage does not erase records already stored on our servers or processed by a provider.
Microphone, audio, and speech
Voice mode and dictation require microphone permission. We process the audio you deliberately record, its transcript, and the text used to generate spoken replies. Speech providers may include ElevenLabs and OpenAI, depending on the feature. These providers receive the audio or text needed to transcribe or synthesize speech.
Microphone permission is controlled by your browser or device. Leaving voice mode stops the current recording flow; you can revoke permission in device or browser settings. Granting permission does not require you to use voice for course work or support. Provider-side retention and data-use settings depend on the service and account configuration; we do not promise that recordings are deleted immediately after transcription.
Certificate names and identity verification
To verify the identity associated with a certificate, Practisi uses Persona. The verification flow can request your name, government-issued ID, images of your face, and other information shown in the verification screen. Depending on the flow, Persona may use face measurements or other biometric information to compare an ID and selfie and detect fraud. Read the notices and consent requests presented before starting.
Practisi receives and stores information needed to track verification, such as inquiry identifiers, status, verification purpose, official-name information, and relevant result or audit records. Persona processes the verification material under its terms and privacy notices. Verification records are separate from an ordinary profile-photo or display-name update.
The documents and steps accepted depend on the verification flow. We do not promise that ID images or biometric records are deleted immediately, or that a particular document or alternative method will always be accepted. Before proceeding, review Persona’s current processor privacy policy and the retention notices in the verification flow. If you cannot use the flow, contact legal@practisi.com to discuss the issue rather than emailing your ID.
Payments and subscriptions
Stripe processes payments and subscription billing. Payment information is entered through the relevant payment flow. Practisi receives billing information needed to manage your plan, such as customer and subscription identifiers, payment or invoice status, plan, access dates, and transaction-related details. Your bank or payment provider may separately process the transaction.
We use billing records to provide purchased access, manage renewals and cancellation, address payment failures, handle refunds or disputes, and meet accounting and legal obligations. We do not need your full payment-card number in a support message.
Technical information and storage
Operating the services involves request and device information such as IP address, browser and device characteristics, request times, diagnostic events, and security or authentication logs. We also use cookies and browser storage to maintain sessions, remember preferences, and support guest conversation features.
The website’s Cookie preferences controls record your choices about optional categories. Essential session and security storage may still be needed when optional categories are disabled. Blocking all cookies or clearing storage can sign you out or remove local preferences and guest history. These actions do not cancel a subscription or delete an account.
Third-party resources, including fonts, may cause your browser to contact the resource provider and send ordinary connection information. Privacy settings in a browser can affect those requests. We do not treat a cookie-preference selection as permission for unrelated uses of your information.
Purposes and sources
We collect information from you, your use of the services, authentication and payment services, identity-verification providers, and the providers that support requested features. We use it to operate and secure Practisi, deliver courses and assistance, maintain account and learning records, process payments, respond to requests, investigate misuse, and meet legal obligations.
We can use de-identified or aggregated information to understand reliability and learning patterns when it does not reasonably identify an individual. We do not describe identifiable information as anonymous merely because it is stored under an account identifier.
When information is disclosed
Information is disclosed to providers that support the relevant service: Supabase for account, database, and storage functions; Stripe for billing; OpenAI for AI and certain speech functions; ElevenLabs for speech functions; and Persona for identity verification. Hosting, communications, and security providers may process connection, operational, or support information needed to deliver their services.
We may disclose information when reasonably necessary to comply with a binding legal request, protect people and systems, investigate fraud or abuse, or establish or defend legal claims. If an organizational transaction affects the service, records may transfer subject to applicable law and notice requirements.
Reviews, public profile details, leaderboard information displayed by the product, and certificates you choose to share may be accessible to other people. A third-party site you open through Copy page or another external link operates under its own terms; selecting Open in ChatGPT or Open in Claude opens that provider and passes the page reference. It does not grant that provider access to your Practisi account.
Retention and deletion
Account and learning records are retained for account continuity and to provide the services. Billing, security, verification, and request-handling records may need to be retained for legal obligations, fraud prevention, disputes, or evidence of issued credentials. Retention depends on the type of record, the purpose, account status, and applicable requirements; there is no single deletion period for every record.
Copies may remain in backups until those copies are replaced or expire under the relevant backup process. Provider-side records can have separate retention rules. Deleting a visible message, removing enrollment, clearing local storage, or canceling Pro does not automatically erase all related data.
Use the account-deletion controls shown in the application or send a deletion request to legal@practisi.com. We will explain applicable exceptions or information needed to process the request. A scheduled deletion is not immediate erasure.
Security
Practisi uses account authentication, access controls, and server-side checks to limit access to personal account records and protected actions. Server credentials used for payment, verification, and AI integrations are intended for server-side operation rather than public browser code.
No service can promise absolute security. Use a strong unique password, protect your email account, sign out on shared devices, and report suspected unauthorized access to legal@practisi.com. Do not include passwords or secret tokens in the report. We will handle legally required incident notifications under applicable law.
Access, correction, export, and requests
You can update ordinary profile information and preferences in Settings. Official certificate names use the separate verification and name-change process. The account export includes supported profile, preference, enrollment, completion, badge, certificate, and bookmark records; it is not necessarily a complete copy of every chat, provider log, or verification record.
For additional access, correction, deletion, portability, restriction, objection, consent-withdrawal, or complaint requests available under the law that applies to you, email legal@practisi.com. Explain what you are requesting and the account involved. We may ask for proportionate information to verify identity or an authorized representative’s authority. We will not ask you to disclose your password.
We respond within the periods required by applicable law, including any permitted extension. Some requests have legal exceptions. When we cannot fulfill a request in full, we explain the reason and available next steps. Withdrawing consent does not undo processing that was lawful before withdrawal.
California Privacy Statement
This section describes California residents’ information and rights. The categories relevant to Practisi include identifiers and account details; commercial and subscription records; internet or application activity; submitted work and educational records; audio or other uploaded media; and inferences represented by evaluations and learning progress. Sensitive information can include sign-in credentials, government identifiers, and biometric or identity-verification information when a verification flow collects it.
Sources, purposes, disclosures, and retention criteria for these categories are described in sections 2–12. Providers receive the categories needed for the service they perform. We do not offer personal information for sale or operate a cross-context behavioral advertising feature in the Practisi services described here.
Where the California Consumer Privacy Act applies, you may request access or information about collection and disclosure, deletion, correction, portability, and any applicable limitation on sensitive-information use or opt-out of sale or sharing. You may use an authorized agent. You will not receive unlawful discriminatory treatment for exercising these rights.
Submit a California request to legal@practisi.com. We verify it proportionately and assess applicable exceptions. Browser signals, including Global Privacy Control, are relevant to legally required opt-outs; essential authentication and requested processing remain necessary. The current service does not offer a sale or cross-context advertising activity to opt out of. “Do Not Track” is not an account-deletion request.
California residents may also ask about disclosures for another business’s direct marketing where applicable. We do not disclose account records to unrelated businesses to market their own products as part of the service described in this policy.
European Economic Area, United Kingdom, and Switzerland
Where European data-protection law applies, Practisi determines the purposes and means of processing personal information used to provide these services. Contractual necessity supports account operation, requested learning functions, and paid access. Legitimate interests can support proportionate security, abuse prevention, service reliability, and request handling. Legal obligations support required financial and compliance records. Consent applies when a feature or law requires it; sensitive or biometric processing requires an applicable additional condition.
You can request access, rectification, erasure, restriction, portability, or object to processing as applicable. You can withdraw consent and complain to the competent supervisory authority, including in the place where you live or work. These rights are subject to the relevant legal conditions; they do not require an account subscription.
Services and providers may process information in countries outside your own. Where the law requires safeguards for an international transfer, appropriate mechanisms must apply, such as an adequacy decision or contractual safeguards. A provider’s participation in a framework or use of contractual clauses does not mean Practisi itself is certified under that framework. Contact legal@practisi.com for information about a particular transfer or applicable safeguards.
Do not use voice or identity verification until you have reviewed the notices and choices presented for those features. If you object to a recorded educational assessment or need help exercising a right, contact us; automated course feedback is not a promise that every decision is reviewed by a person.
Children and age requirements
Practisi is a general learning service and is not directed to children under 13. Do not create an account if applicable law requires a consent or authorization you do not have. A minor must have appropriate parental or guardian permission where required, including authority for a paid subscription.
If you believe a child has provided personal information without the required authorization, contact legal@practisi.com. We will assess the report and take appropriate action under applicable law. Identity verification and payment providers may impose additional eligibility requirements.
Provider notices and further guidance
Provider notices explain their own processing and may change independently. Relevant resources include Supabase’s Privacy Policy, Stripe’s Privacy Policy, OpenAI’s business-data information and API data controls, ElevenLabs’ Privacy Policy, and Persona’s Processor Privacy Policy. They do not replace this policy for Practisi’s own handling of your information.
Our Help Center explains current account controls, microphone and camera permissions, certificate verification, data downloads, and account deletion. Ask Practisi can help locate those instructions, but it cannot promise a request has been completed unless the service confirms it.
Changes to this policy
The date at the beginning identifies this version. We update this policy when our practices or requirements change and provide any additional notice or choice required by law. A material change does not make an earlier unlawful use lawful.
Questions about a version, an unresolved privacy request, or an accessibility barrier in this document can be sent to legal@practisi.com.