Deutsch

Privacy policy

This policy explains what data Lehrt processes, why, and what choices you have. Lehrt is a tutoring productivity platform for independent tutors.

1. Introduction

Lehrt helps tutors organize students, sessions, notes, and teaching materials. It is hosted on Vercel and uses Supabase (EU, Frankfurt) as its database. Sign-in uses Google OAuth. If you connect your calendar, Lehrt writes session events you create into your Google Calendar, and can update or remove them when you edit or delete sessions. Lehrt can also generate teaching materials using the Anthropic Claude API.

2. Data Controller

Data controller: Ulrike Schmidt, as legal guardian and responsible party for the operation of Lehrt. Contact: guardian-lehrt@googlegroups.com.

Operational contact: Felix Schmidt (operator), Leipzig, Germany. Email: lehrt.app@gmail.com.

Lehrt is operated by Felix Schmidt, a minor, under the legal responsibility of his guardian named above. For all data protection matters, you may contact either address.

3. What data we collect

Account info (Google OAuth)

Name, email address, and profile picture, as provided by Google.

Tutor-entered data

Student names, session notes, and teaching materials you create or generate inside Lehrt. This may include personal data about your students if you enter it.

Calendar data (optional)

If you connect Google Calendar, Lehrt creates and manages calendar events that match the sessions you create in Lehrt. Lehrt does not read or modify other events in your calendar.

4. Legal basis for processing

  • Legitimate interest: to run Lehrt, provide the core features, prevent abuse, and keep the service reliable.
  • Consent: for Google Calendar access. You can disconnect calendar sync at any time.

5. Where data is stored

Lehrt stores data in Supabase in the EU (Frankfurt region). Data is encrypted at rest. Access is restricted to what is needed to operate the service.

6. Third parties we share data with

Lehrt shares data only with the providers needed to run the service. We do not sell data, share it with advertisers, or allow it to be used for AI model training.

  • Supabase (database, EU/Frankfurt): stores your account, students, sessions, notes, and Google Calendar event IDs.
  • Vercel (hosting): processes requests in transit. Does not store your data.
  • Google: receives sign-in info and the session events you sync to your Calendar (title, date, time, notes).
  • Anthropic (Claude API): receives the lesson content you submit when generating worksheets. Does not receive any Google account or Calendar data. Submitted data is not used for training.

We do not sell your data.

7. Security measures

We protect your data with the following measures:

  • Encryption in transit: TLS 1.2+ on all connections.
  • Encryption at rest: AES-256 on all stored data.
  • Access controls: Row-Level Security ensures users can only access their own data.
  • Minimal OAuth scope: Lehrt requests only the calendar.events scope, which limits access to events Lehrt creates. We do not access Gmail, Drive, Contacts, or your wider Google account.
  • EU storage: all data is stored in Frankfurt, Germany.

8. Data retention

We keep your data while your account is active. If you request account deletion, we delete your data within 30 days unless a longer retention period is required by law.

9. Your rights under GDPR

Depending on your situation, you have the right to access your data, correct it, delete it, receive a copy (portability), object to certain processing, and withdraw consent (for example, for calendar access).

To exercise these rights, email lehrt.app@gmail.com.

10. Cookies

Lehrt uses only essential cookies needed for authentication and to keep you signed in. We do not use tracking cookies, analytics, or advertising cookies.

11. Changes to this policy

If we make material changes, we will notify users in the app or by email.

12. Last updated

April 23, 2026

Looking for the dashboard? Go to dashboard.