Your notes, your controls.

Who operates this service.

Operator identity has not been configured for this deployment. The operator must publish its identity and contact details before offering the service publicly.

A privacy contact has not been configured. No placeholder address is presented as a working support channel.

Work saved on your device.

Guest learning notebooks, studio drafts and recovery copies use browser storage. They can remain available to other people using the same browser profile. Download useful work before clearing site data or moving to another device.

A browser save is not a cloud save. The interface identifies account acknowledgements separately. A local microphone recording stays in the page until you choose to upload it; an unuploaded recording can be lost when the page closes.

Work saved to an account.

An account stores your email address, display name, password hash, session records and the learning records you save. These can include notebook revisions, run inputs and results, explanations, progress evidence and reported content issues.

Interview records contain their versioned prompt, server deadline, assumptions, estimates, design notes, written answer and self-review. A finished timed answer is frozen. An expired room can retain late notes, which are identified as expired rather than an on-time completion.

Operational records support access checks, rate limits and error investigation. Payment records include provider references and access state. Card details are entered through the configured payment provider rather than a card form stored by this application.

Optional activity observations.

This site does not automatically send optional lesson-opening or interaction observations, and it does not silently opt your browser into tracking. The optional observation endpoint accepts an event only with an affirmative choice in that request. This technical gate is not a claim that every deployment’s legal consent requirements have been satisfied. Historical observation records do not establish a past consent choice.

Optional observations are reported only within the most recent 30 days. Older rows become eligible for deletion; one batch of at most 500 is removed when an observation is accepted or an administrator opens an activity report. No scheduled cleanup is configured, so older rows can remain in storage longer during inactivity or a cleanup backlog. Account export includes any account-linked observations still retained, and deletion removes their personal links. Necessary saved practice, account and progress records follow the separate account controls and are not deleted by this observation cleanup. Missing observations and guest abandonment are not treated as a measured dropout rate.

Optional private audio.

Recording begins only after your consent and a microphone action. Upload is a separate action. You can instead keep the complete written path or choose an existing supported audio file.

Uploaded room audio is encrypted in storage and is delivered through authenticated private playback. The service process decrypts it for that playback; this is not end-to-end encryption. Authorized infrastructure access therefore remains part of the operator’s responsibility.

The interface provides private playback and deletion. Audio is an attachment, not a transcription or an automatic interview grade. Current limits are 5 MiB per attachment, one per room and three per account.

Optional AI and payment services.

When you request configured AI coaching, the service can send your question or explanation together with the lesson, model assumptions and selected run evidence to the configured provider. Avoid putting production secrets, private customer data or credentials in learning answers. Provider handling depends on the operator’s selected service and agreement.

Payment and account-recovery services are used when configured and requested. The access page reports provider availability; a checkout redirect alone does not establish a paid entitlement.

Recovery requests enter an encrypted delivery queue. A private worker sends eligible requests through the configured email service. Acceptance confirms that a request was queued; delivery can fail or expire. Queued work expires after 20 minutes, and terminal delivery payloads are cleared. Minimized delivery status becomes eligible for cleanup after 24 hours; cleanup runs when the queue is processed. Account deletion removes matching queued requests. An email already accepted by the delivery provider cannot be recalled by deleting the account.

Export, deletion and retention.

Account controls provide a data export and account deletion after reauthentication. Room audio can also be deleted individually. Deletion removes active learning records, account-linked checkout records and private attachment records and keys. Submitted lesson snapshots, supplied provenance, reviews and publication history remain as immutable content records. Their account link points to a blank tombstone; author information deliberately supplied inside that content can remain.

Minimized business payment evidence remains for reconciliation and replay prevention: a hashed provider payment identity, currency, captured and refunded amounts, available fees, timestamps and event or access-block digests. These retained records do not contain an account ID, raw payment ID, customer details or learning answers. A later signed refund may update that evidence without recreating your account or access. Operational security records have their account link removed.

The operator must define its retention schedule, backup handling, service-provider details and applicable privacy obligations before public operation. No indefinite or legally mandated retention period is asserted here. This page describes implemented controls without promising immediate removal from every backup or an unconfigured third-party service.

Use a shared device carefully.

Sign out when finished, revoke other sessions when needed, and clear browser site data if local notes should no longer remain on that device. Account deletion does not itself clear browser storage on every device.