Lore Labs — Alchemist
Effective Date: June 4, 2026 | Last Updated: June 4, 2026
Our compliance posture is simple: We don't collect your data. Your learning data lives on your device, under your control. This is not a policy decision — it is an architectural decision. The system was designed this way from the ground up.
Alchemist uses a local-first architecture. This means:
This architectural choice eliminates entire categories of compliance risk by design, rather than by policy.
| Requirement | DPDP 2023 | GDPR | CCPA | Status |
|---|---|---|---|---|
| Data Minimization | Sec. 6(1) | Art. 5(1)(c) | — | Pass |
| Purpose Limitation | Sec. 5 | Art. 5(1)(b) | §1798.100 | Pass |
| Right to Access | Sec. 11 | Art. 15 | §1798.110 | Pass |
| Right to Erasure | Sec. 12 | Art. 17 | §1798.105 | Pass |
| Right to Portability | Sec. 13 | Art. 20 | — | Pass |
| Consent Management | Sec. 6 | Art. 7 | §1798.120 | Pass |
| Data Breach Notification | Sec. 8 | Art. 33-34 | §1798.150 | N/A |
| No Sale of Data | — | — | §1798.120 | Pass |
| Children's Data (Under 18) | Sec. 9 | Art. 8 | — | Pass |
Data Breach Notification is marked N/A because we do not maintain centralized data stores. There is no server-side database to breach. User data exists only on user devices.
DATA FLOW: ALCHEMIST APPLICATION
User Device (Browser/App)
├── IndexedDB → Session history, blocks, progress
├── localStorage → Credit ledger, preferences
├── File System → EPUB imports, PDF/ZAY exports
└── ALL DATA STAYS HERE
Server (only for payments)
└── Stripe API → Payment processing only
└── No user learning data transmitted
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Stripe, Inc. | Payment processing | Payment info only | stripe.com/privacy |
| GitHub Pages | App hosting | IP address (standard HTTP) | github.com/privacy |
| Google Fonts | Typography | IP address (standard HTTP) | google.com/privacy |
Open the Alchemist application. All your data is visible within the app. Use the Library panel to browse your session history and content blocks.
Use the built-in export features to download your data in PDF, EPUB, or .zay format. This satisfies the right to data portability.
Clear your browser's site data for the Alchemist domain, or uninstall the application. Since no copy of your data exists on our servers, this permanently deletes all your data.
For any data-related requests or complaints:
If you believe your data rights have been violated, you may lodge a complaint with: