Privacy Policy
This Policy explains how Aether Technologies UG (haftungsbeschränkt) processes personal data when you use Learnfluence, our website at learnfluence.ai and related services.
Last updated: 8 October 2026
Privacy at a glance
| Topic | Summary |
|---|---|
| Controller | Aether Technologies UG (haftungsbeschränkt), Berlin. If your employer provides Learnfluence, your employer is the controller and we process your data on its behalf. |
| Main data | Account and organisation data, uploaded documents, the courses and videos we generate, usage data and payment data. |
| Why we use it | To provide Learnfluence, turn your documents into courses and videos, bill subscriptions, fix bugs and improve the product. |
| No training | We don't use your documents or courses to train AI models, and our AI providers are contractually barred from doing so. |
| Locations | Generally in data centres in the EU. Some service providers also process data in third countries, in particular the USA, with safeguards under Art. 45 and 46 GDPR. |
1. Controller and contact
Aether Technologies UG (haftungsbeschränkt), c/o CODE Education GmbH, Donaustraße 44, 12043 Berlin, Germany, represented by its managing director Victor Bellu.
Privacy contact: info@learnfluence.ai.
We have not appointed a data protection officer because we are not currently required to.
Use by organisations
When a company or another organisation provides Learnfluence to its staff, that organisation is the controller for the data in its workspace. We process that data as a processor under Art. 28 GDPR on the basis of a data processing agreement. Please contact your organisation first about that data.
2. The data we process
| Category | Examples |
|---|---|
| Account and sign-in | Name, email address, password (stored only as a hash), sign-in sessions with IP address and browser identifier. |
| Organisation and roles | Organisation name, members, invitations and roles. |
| Documents and inputs | Uploaded files, text extracted from them, chat messages with the assistant and your edits. |
| Generated content | Course structure, lesson text, quiz questions, images, speech, music and explainer videos. |
| Usage data | Pages viewed, events and recordings of how the app is used, device type, browser, language and IP address. |
| Error and quality data | Error reports and logs of AI calls with their inputs and outputs. |
| Payment data | Organisation name, billing address, VAT ID and subscription status. We never receive full card details. |
| Booking a call | Name, email address, chosen time slot and your message. |
We need your name and email address for an account; without them we can't provide Learnfluence. Everything else you provide is voluntary.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Account, uploads, course and video generation, publishing, export and subscriptions | Contract – Art. 6(1)(b) GDPR |
| Booking a call on the website | Steps prior to a contract – Art. 6(1)(b) GDPR |
| Error diagnosis, service monitoring and AI quality checks | Legitimate interest in a stable service and correct results – Art. 6(1)(f) GDPR |
| Security and abuse prevention | Legitimate interest in protecting the service and its users – Art. 6(1)(f) GDPR |
| Product analytics in the browser and recordings of how the app is used | Consent – Art. 6(1)(a) GDPR and § 25(1) TDDDG |
| Marketing: Conversion measurement for our ads | Consent – Art. 6(1)(a) GDPR and § 25(1) TDDDG |
| Analysis of which features signed-in users use, on our server and without cookies | Legitimate interest in improving the product – Art. 6(1)(f) GDPR |
| Retaining invoices and accounting records | Legal obligation – Art. 6(1)(c) GDPR |
4. Recipients and third countries
We use service providers that process personal data on our behalf and on our instructions (Art. 28 GDPR):
| Category | Location and safeguards |
|---|---|
| Hosting, database and video rendering | EU. Providers based in the USA: Data Privacy Framework and Standard Contractual Clauses |
| AI services for text, text recognition and images | EU |
| AI services for voice, transcription and dictation | Worldwide, in particular the USA: Standard Contractual Clauses. We do not keep dictation recordings. |
| AI services for video clips and background music | Worldwide, in particular the USA: Standard Contractual Clauses |
| Sending email | EU |
| Product analytics, error reports and AI quality checks | EU. Providers based in the USA: Data Privacy Framework and Standard Contractual Clauses |
| Booking a call on the website | USA: Standard Contractual Clauses |
| Marketing (Google Ads, Reddit Ads, TikTok Ads) | Ireland (Google, TikTok) and USA (Reddit). Possible transfer to the USA (Google) and worldwide (TikTok) under Standard Contractual Clauses. |
Payments are handled by a payment service provider that acts as an independent controller for fraud prevention and legal obligations; data may be transferred to the USA (Data Privacy Framework and Standard Contractual Clauses).
For Google Ads we use the Google tag with your consent. It sends page views and a completed sign-up to Google Ireland Limited, Ireland, together with your IP address, information about your browser, an identifier from the ad click and, on sign-up, your email address, which the tag hashes before sending, and your user ID. For measuring conversions, Google is an independent controller; the hashed email address (enhanced conversions) is processed by Google on our behalf. See Google's privacy policy for details. The data may be transferred to the USA under the Data Privacy Framework and Standard Contractual Clauses. The tag's cookies expire after 90 days.
For TikTok Ads we use the TikTok Pixel with your consent. It sends page views and a completed sign-up to TikTok Technology Limited, Ireland, together with your IP address, information about your browser, an identifier from the ad click and, on sign-up, your hashed email address and your user ID. With your consent, our server also sends the completed sign-up to TikTok with the same data; TikTok counts both messages once. For collecting this data and sending it to TikTok, we and TikTok are joint controllers (Art. 26 GDPR). Under the agreement with TikTok, we inform you here and obtain your consent; you can also exercise your rights over the data TikTok holds directly against TikTok. Companies of the TikTok group can access the data from countries outside the EU, including China; Standard Contractual Clauses apply. The pixel's cookies expire 13 months after their last use.
For Reddit Ads we use the Reddit Pixel with your consent. It sends page visits and a completed sign-up to Reddit, Inc., USA, together with your IP address, information about your browser, an identifier from the ad click and, on sign-up, your hashed email address and your user ID. With your consent, our server also sends the completed sign-up to Reddit with the same data; Reddit counts both messages once. Reddit processes this data as an independent controller, also for its own purposes; see Reddit's privacy policy for details. Standard Contractual Clauses apply to the transfer to the USA. The pixel's cookies expire after 90 days.
The names of the individual service providers and a copy of the Standard Contractual Clauses are available on request at info@learnfluence.ai. Organisations receive the full list with the data processing agreement.
5. Retention
| Data | Retention |
|---|---|
| Account, organisation, documents and generated content | Until the account or the content is deleted. For organisations, the contractually agreed period applies. |
| Backups, error reports, AI quality data and recordings of how the app is used | Deleted automatically after 90 days at most. |
| Other usage data | Until it is no longer needed for analysis, at the latest until the account is deleted. |
| Call requests | Until the call has taken place. |
| Invoices and accounting records | As commercial and tax law require, usually ten years. |
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)). You can lodge a complaint with a data protection supervisory authority (Art. 77).
Right to object
Where we process your data on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). We then stop processing the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.
For any request, a message to info@learnfluence.ai is enough.
7. Cookies and consent
We set cookies that sign-in technically requires. We set cookies and identifiers for product analytics and for marketing purposes (conversion measurement for ads) only with your consent. This includes the identifier from an ad click on Reddit or TikTok, which we keep in your browser's local storage for up to 28 days and delete when you withdraw your consent. Separately, we analyse on our server which features signed-in users use; this sets no cookies (see section 3). The consent dialog shows which ones, what they do and how long they are stored for each purpose individually. The “Cookie settings” link at the bottom of every page of the website lets you change or withdraw your choice at any time.
8. AI features
Learnfluence uses AI models to generate courses, lessons, quiz questions and explainer videos, to recognise text in documents and to generate speech. To do so, we send your inputs to AI providers (section 4). We use only business accounts whose providers may not use your data to train models. We make no automated decisions within the meaning of Art. 22 GDPR.
9. Changes
We update this policy when our services, service providers or legal requirements change.