Privacy

This applies to heylamina.com and to Lamina itself, the assistant you talk to on WhatsApp. Lamina is currently run by one person rather than a company, who decides what happens to your data and is responsible for it, and support@heylamina.com reaches them directly.

If you have only signed up and have not replied to Lamina, the section below about signing up is the only part that applies to you yet. The same goes if you wrote to Lamina before signing up.

Lamina is an AI assistant. It connects to academic systems you already have (a course system like Moodle or Canvas, a university portal, a shared course drive, your university mailbox) and, if you choose, your own mail, calendar or drive. It reads them, and messages you when it finds something worth telling you. Mostly it reads. It changes something on your systems, like adding an event to your calendar or submitting a form, only while answering a message you sent, and only on systems you connected.

Academic only. Lamina has no capability for banking, payments, shopping, travel or general life admin, and it cannot connect an account of that kind. This is not a policy it is asked to follow; there is no tool for it.

With the WhatsApp button. If you tap “Message Lamina on WhatsApp” we store that you accepted the Terms and this notice and agreed to be messaged on WhatsApp, the exact wording you agreed to, and when, and how you reached us if you came from an ad or a link. When you send the message that opens, we link this to your WhatsApp number.

With your phone number. If you join from one of our country pages (such as heylamina.com/it) we store:

• your phone number and the university you chose or typed in;
• that you accepted the Terms and this notice and agreed to be messaged on WhatsApp, the exact wording you agreed to, and when;
• the answers you chose to give afterwards — what would help you most, what and which year you study, where your course material lives. Every one of them is optional;
• how you reached us, if you came from an ad or a link: the campaign labels in that link and, if a friend invited you, their invitation code. You get a code of your own to invite others.

We use this to send you the WhatsApp message that starts your conversation with Lamina, and to understand what students need from it. Your agreement is what allows the message; reply STOP at any time and we will not write again.

When we write to you. Lamina is given your university and the answers you chose, and from your reply on, everything below applies.

If you message Lamina before signing up. Lamina replies once, with a link to sign up, and does not start a conversation. We keep your number, what you wrote and that reply for 90 days, so we can see who reaches Lamina this way and whether they go on to sign up. Write to support@heylamina.com and we delete it sooner.

Ads. Those country pages use Meta’s pixel, if you allow it, so that Meta can tell us how many people who saw our ads went on to join. Meta receives that you visited and joined, together with the browser and device information its pixel collects, under Meta’s own privacy policy. Your phone number, university and answers are not sent to Meta.

None of this is sold or shared with anyone else. We delete sign-up details 12 months after the last message we sent you if you have not started using Lamina, or sooner if you ask: write to support@heylamina.com, or reply on WhatsApp once we have written to you.

Four different things, kept separately, because they carry different risk.

• Your conversation. Your WhatsApp number, the messages you send Lamina and the ones it sends you, on WhatsApp or by email, and any email address you confirmed for it. Your number is the account: there is no separate signup, password or app.
• What it read for you. Facts pulled out of the systems you connected: courses, dates, deadlines, announcements, what it noticed and what it is still unsure about.
• Your coursework. Files it downloaded or made for you (slides, problem sheets, readings, study sheets) kept in your own private store so it does not have to fetch them again and can look at last week's.
• Credentials and sessions. Whatever is needed to keep reading a system you connected. These are held differently from everything else; see below.

To keep the service working it also records operational facts: that a check ran, that a delivery failed, a reason code.

During the beta we also keep a record of each conversation and of what Lamina did in it, including the pages and documents it read for you, so we can find and fix what went wrong. Only the people running Lamina, and the tools they use to read it, see it. It is kept in its own database and deleted after 90 days, or when you are erased. Copies of your messages, your name and your number also appear in our hosting provider’s service logs. Those are deleted automatically within 30 days, and erasure cannot remove them sooner.

Credentials and browser sessions live in an encrypted store that is scoped to you alone, unlocked only at the moment they are used to reach the system they belong to. They are never written into logs, into the assistant's notes, into shared knowledge, or into anything the model is shown.

Lamina never asks for a password over WhatsApp. When one is needed it sends you a one-use secure page, and that page submits to the exact sign-in you were shown and nothing else. A credential you gave for one university system is not reused on another.

You can connect your university or personal mailbox, calendar or drive. Lamina signs in to them the way you would, in a browser, with the sign-in you gave on the secure page, and reads them for what matters to your studies.

It keeps the academic facts it finds — deadlines, announcements, what a lecturer sent round — and any attachment you ask it to keep, in your own private store. Nothing from your mail is used for advertising, sold, or given to data brokers.

It changes something there, like adding an event to your calendar, only while answering a message you sent. Disconnect a system and it stops reading it straight away. Ask to be erased and what it read goes with you.

• WhatsApp, which is Meta. Every WhatsApp message between you and Lamina goes through them, under their terms, and so does any file Lamina sends you there. Nothing else does.
• Resend. If you confirm an email address with Lamina, Resend delivers the emails Lamina sends you, with any file attached, and keeps a record of each for 30 days. It runs in the United States.
• The AI model provider. To work out what something means, Lamina sends the relevant text (the parts of pages and documents it reads for you, and recent conversation) to the provider of the AI model that runs it. It does not send your credentials. The provider handles that text under its own terms, and may process it outside the EU and Israel; see “Where the data is”.
• The systems you connect. Your university, Google or Microsoft see what Lamina does there as your session doing it, and their own privacy terms apply to that.
• Meta, for our ads. If you signed up from one of our country pages and allowed its cookie, Meta’s pixel tells Meta that you visited and joined, as described in the section about signing up. It does not receive your phone number or answers.
• Where Lamina runs. Railway, in the United States, runs Lamina, its databases and its logs. Google Cloud keeps the keys that lock your credentials, and runs the relays in Israel and Italy that carry Lamina’s visits to your university’s sites. Lovable hosts heylamina.com. They store and process data on our behalf and do not use it for anything of their own.
• Anthropic. We use Claude, Anthropic’s AI, to help us run Lamina and find what went wrong, and it can read Lamina’s service logs when we ask it to.

We do not sell your information, we do not share it with data brokers or advertisers, and there is no advertising in Lamina.

We do not use your coursework, your mail, your messages or anything Lamina read for you to train AI models of our own, and we do not give or sell it to anyone for that purpose. The AI model provider receives the text described above under its own terms.

• To provide Lamina to you. Reading your systems, keeping what it found, holding your credentials and answering you are what you ask for when you start using Lamina.
• Because you agreed. The WhatsApp messages we send to start and continue the conversation, and Meta’s pixel. You can withdraw either at any time: reply STOP, or decline the cookie.
• To keep it working. The beta’s record of each conversation and the operational records, which we keep because we have a legitimate interest in finding and fixing what goes wrong.

Your coursework stays until you tell Lamina to forget a file, or until you are erased. What it learned about your studies stays while you are using it, because that is what makes it useful in week nine rather than week one. The beta’s conversation record is deleted after 90 days and the hosting provider’s service logs within 30 days.

Disconnecting a system stops Lamina reading it and puts the credential beyond ordinary use straight away.

Ask Lamina on WhatsApp, or write to support@heylamina.com, and we erase you: conversation, what Lamina knows about you, coursework, cached attachments, credentials and sessions, sign-up details and the beta’s conversation record. Copies already in the hosting provider’s service logs, and Resend’s record of emails Lamina sent you, expire on their own within 30 days.

Erasure leaves a marker behind whose only job is to make sure work already in flight (a check that was already running, a queued job) cannot quietly recreate you afterwards. That marker holds no personal data.

You can ask what is held about you, ask for it in a portable form, ask for a correction, ask us to stop, or ask for all of it to be deleted. Write to support@heylamina.com.

You can also complain to a data protection authority: in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), in Israel the Privacy Protection Authority (gov.il), or the authority where you live.

You can tell Lamina to stop messaging you at any time, in the conversation, in your own words. It will stop.

Lamina is for students aged 18 and over. It is not built for children, and we do not knowingly collect their information. If you believe a child's information has reached us, write to support@heylamina.com and we will delete it.

Lamina’s data is stored in the United States. The AI model provider may process the text it receives in other countries, including countries the European Union has not recognised as protecting personal data to its own standard. The relays that reach your university run in Israel and Italy.

Where the law requires a safeguard for moving personal data across a border, we rely on the EU–US Data Privacy Framework or the standard contractual clauses our providers offer, where they offer them.

We will change the date at the top, and if a change actually affects what happens to your data we will tell you rather than quietly republish. What the product does is the thing this page has to keep describing accurately. The Terms cover the rest of using Lamina.

support@heylamina.com. A real person reads it.