Privacy Policy
Your privacy matters to us. Here we clearly explain how Menastk collects, uses, and safeguards your personal data.
Last Updated: October 18, 2026
Quick Summary: We never sell your data or share it with advertisers. Your information is used strictly to operate the platform and deliver services to you.
1. Data We Collect
- 1Account data: Name, email address, password hash, and phone number when provided or required for phone-based registration.
- 2Authentication data: Verification status, sessions, temporary security tokens, and Google profile details when using Google sign-in. If you choose WhatsApp verification, your phone number and one-time verification message are sent through Akked to deliver the code.
- 3Educational & operational data: Course data, quizzes, enrollments, learning activity, quiz and assignment submissions, and related usage events.
- 4Student progress data: Learning streaks, points, activity dates, and a student-chosen leaderboard nickname and visibility setting, when these features are enabled or used.
- 5User-uploaded content: Videos, photos, logos, quiz files, and associated metadata.
- 6External payment data: Payment method, transfer references, and administrative notes; we do not process credit cards on-site.
- 7Live session data: Session names, attendance, join/leave timestamps, participant counts, and duration.
- 8Technical & security data: IP addresses, browser and device metadata, session IDs, access logs, and abuse-prevention metrics.
- 9Usage & performance data: Storage quotas, views, pages visited, and telemetry necessary to operate and optimize the service.
- 10Communication data: Messages submitted via contact forms, email inquiries, and support correspondence.
2. How We Use Your Data
- 1To operate user accounts, verify identities, and deliver core features (registration, login, content management, grading).
- 2To process and administer subscriptions, manual payments, and plan quota enforcement.
- 3To enhance platform security (detecting malicious login attempts, rate limiting, auditing sensitive actions).
- 4To communicate essential service messages, including email or WhatsApp account verification, password resets, and subscription updates.
- 5To calculate student learning progress and, where a student opts in, display their chosen nickname and leaderboard results within the teacher's tenant.
- 6To deliver live streams, compute attendance, and enforce streaming package boundaries.
- 7To diagnose technical defects, monitor reliability, and optimize user experience via web analytics and error tracking.
- 8Data is processed based on contract execution, legitimate security interests, consent where required, or legal compliance.
3. Data Storage & Security
- 1Data is stored across trusted cloud infrastructure providers for database, hosting, storage, email, and live streaming.
- 2Data may be processed internationally where required to deliver cloud services.
- 3Passwords are never stored in plain text; they are hashed using bcrypt.
- 4HTTPS/TLS encryption is enforced during data transit alongside internal access controls and operational monitoring.
- 5Temporary signed playback URLs and permission checks safeguard content, though no system is impenetrable.
- 6In the event of a significant security incident, remediation and notifications proceed in accordance with applicable regulations.
4. Third-Party Data Sharing
- 1We never sell your personal data to any third party under any circumstances.
- 2Data is shared as necessary with operational providers, including Vercel, Neon PostgreSQL, Cloudflare, Resend/SMTP, LiveKit, and Sentry. Akked processes phone numbers and verification messages for WhatsApp one-time codes. Google, Groq, and OpenRouter may process content submitted to the AI assistant as described below.
- 3When signing in with Google, authentication tokens and core profile details are exchanged with Google to complete sign-in.
- 4Data may be disclosed if required by law, court order, or official governmental request.
- 5In corporate restructuring or acquisition scenarios, data may transfer to the successor entity under continued protective commitments.
- 6Provider names and roles may change as the platform's infrastructure and features evolve; providers process information under their applicable service terms and privacy practices.
5. AI Assistant & Content Processing
- 1When you use the AI quiz assistant, the text and supporting material you submit may be sent to Google Gemini, Groq, or OpenRouter, depending on the selected model and any service fallback, to generate or improve quiz content.
- 2Voice recordings submitted for transcription may be sent to Google Gemini or Groq depending on provider availability and the service fallback path. The platform's AI usage records contain operational metadata, not the submitted recording or prompt text; external providers may process submitted content under their own applicable terms and privacy practices.
- 3Do not submit sensitive personal information or identifiable student data to the AI assistant unless you have a lawful basis and the required permissions.
- 4Operational metadata such as request counts, provider/model, quota tier, and usage metrics is recorded.
- 5Assistant usage is constrained by daily subscription quotas and system safeguards.
- 6AI processing may occur internationally according to provider infrastructure.
6. Cookies & Storage
- 1We utilize essential cookies to maintain authentication sessions and verify identity.
- 2Temporary security cookies assist in email verification and sign-up workflows.
- 3UI preferences such as dark/light theme are stored in browser localStorage rather than cookies.
- 4Vercel Web Analytics and Speed Insights measure aggregated page visits and performance.
- 5We do not employ third-party advertising or retargeting tracking cookies.
- 6You may clear cookies and local storage through browser settings, which may log you out or reset preferences.
7. Your Rights as a User
- 1You have the right to request access to, correction of, or deletion of your personal data in accordance with applicable laws.
- 2You may object to or request restriction of certain processing activities where statutory grounds exist.
- 3Additional rights such as data portability may apply in jurisdictions with comprehensive data protection frameworks.
- 4Certain records may be retained longer where legal, financial, or security obligations require.
- 5To exercise any of these privacy rights, contact us at: support@menastk.com
8. Data Retention & Account Deletion
- 1We retain personal data as long as your account remains active or as necessary to fulfill contractual commitments.
- 2Initiating account deletion terminates active sessions and soft-deletes primary account records to prevent service use.
- 3Deletion does not immediately erase every backup or billing log; limited records are retained for statutory compliance and dispute defense.
- 4Routine backup cycles overwrite residual historical archives within standard retention periods.
- 5Inquiries regarding specific data deletion may be directed to support@menastk.com.
9. Children Privacy
- 1The Menastk platform is primarily targeted to adult instructors (18+) creating independent learning portals.
- 2Minor students may access educational materials or create student accounts within their instructor portal.
- 3Instructors and guardians must ensure necessary notices and parental consents are obtained under applicable regulations.
- 4Student data usage is restricted strictly to educational, operational, and safety necessities outlined in this policy.
- 5If unauthorized processing of a minor data is identified, corrective actions including restriction or deletion are applied.
10. Policy Updates
- 1We may update this policy as platform features, service providers, or legal requirements evolve.
- 2This page indicates the latest revision date, and prominent notice may be posted for material alterations.
- 3Periodic review is encouraged; ongoing use of the service signifies acceptance of the current policy to the extent permitted by law.
Questions About Your Privacy?
Reach out to us for privacy requests or inquiries, and we will process your request within appropriate timeframes.
Contact Us