Mendora Tech

Document

Privacy notice

What we collect, why, how long we keep it and who sees it — for teachers and for learners in live lessons.

Updated: 2026-09-23 · version 1

Account: name, e-mail, password (as a hash only), language and time zone; with Google sign-in, the name and e-mail Google provides.

Teaching profile: country, teaching languages, subjects, grades, typical lesson length.

Content: the sources you upload, the materials you create and edit, the results of live sessions.

Security: audit records of sign-ins, IP address and browser; two-step verification secrets (encrypted).

Payments: orders, uploaded receipts, invoices; the card or account details entered to withdraw referral money (encrypted; lists show only the last 4 digits).

To provide the service (creating and storing materials), to process payments and issue invoices, to calculate referral commissions, to detect abuse (for example, many sign-ups from one IP) and to meet legal requirements.

When material is generated, the topic you enter and the text of the selected sources are sent to AI providers (for example OpenAI, Google). Your name, e-mail and payment data are not sent to them. Every request is logged by provider, model and spend.

Learners do not create an account. Only the display name they enter, their answers and a temporary 24-hour token for rejoining the session are stored. The IP address is used only for rate limits and is not linked to a profile.

A session cookie (sign-in), a language cookie and, after an invite link, an encrypted 30-day referral cookie are used. No advertising trackers.

Materials and sources are kept until you delete them or close the account. Invoices are kept as accounting rules require. The full details of a withdrawal request are erased 30 days after the request closes; the masked form and the payment reference remain. Audit records are kept for a limited time for security.

Passwords are hashed, payout details and provider keys are encrypted with a separate key, every action involving money needs an extra confirmation (password, code or Google) and is written to the audit log. Administrators see payout details only when making a payment, and every view is recorded.

You may request access to your data, its correction, an export and the deletion of your account. Requests are accepted through the help section in the app or by e-mail.

When this notice changes, the new version is published on this page with a date. The operator's details are shown on this page.