Privacy Policy
Last updated: 26.06.2026
This Privacy Policy explains how Larkup processes personal data when you use our educational AI infrastructure and platform. It covers account registration, AI processing, institutional deployments, support, safety, and related platform operations.
For information about cookies and similar technologies, including consent choices, please see our Cookie Policy. For the rules that apply when using Larkup, please see our Terms of Service.
1. Who we are
Larkup is operated by Larkup Inc., providing enterprise-grade, secure AI infrastructure for the education sector.
2. What personal data do we process
Depending on how you use Larkup, we may process personal data such as your name, email address, login and account details, and your role on the platform, including whether you join as an Educator, Student, or Administrator.
We also process AI interaction data, including prompts, uploaded syllabi, submitted coursework, and generated feedback, in order to provide the platform's core assistive functionality.
Where Larkup is used in connection with an institutional deployment (e.g., enterprise RAG servers), we may process information needed to administer that deployment in accordance with the enterprise agreements we hold with your institution.
We also process technical and security-related information, such as log data, session data, device or browser information, and records needed to keep the platform secure, reliable, and compliant.
3. How we obtain personal data
Most of the personal data we process comes directly from you. This includes data you provide when you create an account, verify your institutional email address, write AI prompts, or contact support.
We also collect some information automatically when you use the platform, especially technical and security-related information.
Where Larkup is deployed at an enterprise level, we may receive information from your university IT department or administration through single sign-on (SSO) and roster integrations.
4. Why we process personal data and our legal bases
We process personal data to create and manage your account, verify your credentials, run our secure AI models on your inputs, enable collaborative workflows, and otherwise provide the Larkup platform. This processing is generally necessary for the performance of a contract with you or your institution.
We also process personal data to maintain the security of Larkup, prevent prompt injection or misuse, investigate complaints, moderate the platform, improve reliability, and protect users. Where this processing is not strictly necessary for the contract, we rely on our legitimate interests in running a secure AI service.
Where we rely on consent, such as for optional cookies, you may withdraw consent at any time. Details about this are set out in our Cookie Policy.
5. AI Processing and Data Isolation
Larkup is built with a "private by design" architecture. Your institutional data, user prompts, and uploaded documents are isolated.
We do not use your private personal data or confidential academic documents to train public AI models. Any AI processing is intended strictly to assist you and your institution in educational workflows.
6. When personal data is required
Some personal data is necessary for us to provide core parts of the platform. For example, if you do not provide the information needed to authenticate your account or connect to your institution, we cannot grant you access to Larkup.
7. Who we share personal data with
We may share personal data with secure service providers that support hosting, infrastructure, authentication, security, and LLM processing, where they process data strictly on our behalf under enterprise agreements.
We also share relevant platform data with your university IT department or administration where this is necessary to administer the institutional deployment, address a safety issue, or handle billing.
We may disclose personal data where necessary to protect rights, investigate misuse, enforce our Terms, or comply with applicable law.
8. International transfers
Some service providers may process personal data outside your local jurisdiction. Where this happens, we use required transfer mechanisms, such as Standard Contractual Clauses, together with supplementary security measures like data encryption.
9. How long we keep personal data
We keep personal data for as long as it is needed for the purposes described in this Privacy Policy, or as mandated by your institution's specific data retention policies.
In general, account and generated workflow data are kept while your account remains active. When data is no longer needed, we securely delete or anonymise it.
10. Cookies and similar technologies
Larkup uses cookies and similar technologies. Our Cookie Policy explains what cookies are, how consent works, and how you can change your settings.
11. Data protection rights
Under applicable data protection laws, you may have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, objection to certain processing, and data portability.
You also have the right to lodge a complaint with a supervisory authority in your jurisdiction.
12. Security
We use enterprise-grade technical and organisational measures designed to protect personal data against unauthorised access, misuse, loss, or disclosure.
No system can guarantee absolute security. We therefore ask users to choose strong passwords, keep account credentials confidential, and contact us if they believe their account has been compromised.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will publish the updated version on this page and revise the "Last updated" date.
14. Contact
For privacy, data protection requests, or safety-related concerns, contact: info@larkup.com