Privacy Policy

Who we are and what this covers

Chalk Mentor operates from Pakistan. “We” and “our” refer to Chalk Mentor. Contact hello@chalkmentor.com about this policy or your information.

This policy covers our public website, inquiries sent to us, and the current learning application, including Supabase accounts and beta access requests. Payments are not currently available. If you run the app yourself, your device and configured service providers also determine how information is handled.

Information used by the product

• Website visits: browsers send ordinary connection information, including IP address, browser details, and requested resources, to servers delivering the website and fonts. Public demonstrations use prepared examples; they do not send your choices to an AI model.
• Contact and feedback: forms prepare an email draft on your device. If you send it through your email app, we receive your email address, message, and any name or other information you include. Preparing or copying a draft does not send it or register an account.
• Accounts and beta access: Supabase Auth processes your email, password, verification and recovery requests, and session credentials. We store your name, email, beta status and account timestamps in a profile linked to your Auth account. Passwords are handled by Supabase Auth and are not stored in that profile. Account creation does not guarantee approval.
• Saved work: the app saves chats, boards, drawings, notebooks, drafts, profile details and an optional picture, preferences, and tutorial status in your browser under your account’s local storage key. Saved work is not automatically backed up or synced to the account database.
• AI requests: submitting a question sends relevant conversation history, board context, selected text or images, and attachments to the app’s backend and configured AI service. Handwriting review can include a screenshot of the selected work.
• Voice: after microphone permission, voice mode sends recorded speech for transcription. Transcribed questions are handled like typed questions. Read-aloud uses browser speech synthesis; processing depends on the browser or operating-system voice selected.

Share only information needed for your question or inquiry. Avoid passwords, payment details, confidential records, or another person’s personal information unless you have an appropriate right to share it.

Why information is used

Information is used to deliver requested lessons and explanations, transcribe questions, save work and preferences, respond to inquiries, investigate bugs, improve the product from feedback, protect the service, and meet applicable legal obligations.

Where law requires a legal basis, the relevant basis depends on the activity: providing a service you request, legitimate interests in responding to inquiries and securing and improving the service, legal obligations, or consent where required. Consent can be withdrawn for consent-based activities without affecting earlier lawful processing. Microphone permission is not a substitute for any additional consent required by law.

The current product has no advertising, data-sale, or cross-site profiling integration. It does not use AI to make admission, grading, employment, or other legally significant decisions about you. Learning suggestions are not formal assessments.

Providers and international processing

Supabase provides authentication and stores account profiles. The app also supports Ollama and a configured Whisper speech server, or OpenAI services when configured. “Local” refers to the machine running those services, which may be different from your device. Requests leave your device when the backend or provider runs elsewhere.

Google Fonts delivers fonts and receives connection information. Your email service and the recipient’s email service handle inquiries you send. Hosting providers may process request and security logs. Opening external links or loading externally hosted lesson images contacts the relevant third party.

Depending on deployment, information may be processed in Pakistan or other countries with different privacy laws. Retention, security, and training practices depend on the applicable provider arrangement. Do not assume every configuration has zero retention or excludes model training. Review the configured provider before sending confidential material.

Information may also be disclosed when legally required or reasonably necessary to protect people, investigate misuse, or exercise legal rights. Before hosted access introduces new processing or international transfers, the provider details and any legally required safeguards must be specified.

Storage, retention, and deletion

Account information remains while your account is retained. Contact us to request deletion of account information; removing the Auth account also removes its profile. Browser-saved work has no automatic expiry. It remains until you remove it, clear site data, or the browser removes it. Archived and deleted chats remain recoverable until you empty deleted chats in Settings. Restoring default preferences does not delete lessons. Export important work before clearing site data.

Attachments are held in the current app session and must be reattached after refreshing or switching chats. The current backend does not maintain a chat-history database or save raw voice recordings as application files. Generated image files can be saved on the backend; deleting a chat does not automatically delete these files. Provider records and infrastructure logs follow their own retention rules.

Correspondence should be retained only as needed to handle the inquiry or related issue and applicable legal requirements. Relevant criteria include whether a support issue remains open, whether follow-up was requested, and whether a record is needed for a legal claim. Contact us to request deletion of correspondence we hold; this cannot erase copies independently held by your email service or another recipient.

If you run the app locally, you control its browser data and backend files. We cannot delete those copies remotely. Hosting, mailbox, and AI-provider retention arrangements must be confirmed before a hosted rollout; this notice does not promise a fixed deletion period for an unconfigured service.

Your choices and privacy requests

You can explore public examples without sending an inquiry, choose what to send to the mentor, stop voice mode, revoke microphone permission, change preferences, export your library, and remove browser-stored data. Blocking storage may prevent saving your work. See our Cookie Policy.

Depending on applicable law, you may have rights to access, correct, delete, or receive a copy of personal information, restrict or object to processing, withdraw consent, and complain to a privacy regulator. Email hello@chalkmentor.com with your request and enough information to identify the records. We may need proportionate verification; do not send identity documents unless specifically requested through an appropriate channel.

Requests will be assessed under applicable law, with an explanation of any permitted limitation. You can contact your local data-protection authority where it has jurisdiction, including the UK Information Commissioner where applicable.

Younger learners

Chalk Mentor is intended to be useful to learners of different ages. Younger learners should involve a parent or guardian and avoid including identifying, school, health, or other sensitive personal details in prompts or feedback.

The current release has no age-verification or verified parental-consent process. Where law requires parental authorization before processing a child’s personal information, that process must be established before the child uses features that send personal information. Children can explore the prepared public examples without submitting personal information. General parental permission is not a substitute for legally required verification.

Parents or guardians concerned that a child has sent personal information should contact hello@chalkmentor.com so we can investigate and address information under our control. Use by a school does not itself establish a student-data agreement.

Security and policy updates

No service or storage method is completely secure. Protect your device, browser profile, exports, and provider credentials. People using the same browser profile may be able to view locally saved work.

We will update this policy when practices change and show the revised date. Material changes requiring notice or consent must be communicated before the relevant new processing begins. This policy does not authorize unrelated new uses of your information.