Privacy, in plain language.
Last updated: 17 October 2026. Applies to the current free service.
Who is responsible
plsteach.me is operated by Thomas Nguyen, Netherlands. For support, privacy requests, content reports or enquiries from authorities, email contact@plsteach.me. You can write in English or Dutch.
Your account and free session
Supabase handles email sign-in. We use your email, account identifier and authentication session to provide your account. We save the skill, start time, progress and completion of your one free coaching session. This processing is necessary to provide the service you request. Signing out or clearing browser data does not reset that entitlement. No payment details are collected and the free session does not start a paid subscription.
Camera coaching and AI questions
Camera checks and questions use AI from OpenAI. They are optional and require separate consent and confirmation that you are at least 16. For camera checks, reduced still images pass through Cloudflare and our Supabase image-processing function, which removes metadata before sending them through our server to OpenAI; the live video stream stays on your device. Pause stops new uploads; Stop, leaving the lesson or hiding the page stops the camera. You can use the written walkthrough without a camera. Keep other people, private documents and sensitive information out of view.
We do not save coaching images on our servers. Questions and answers are not saved as a conversation on our servers. Feedback and practice records can be saved locally on your device. If you explicitly send an incorrect-feedback report, we save the lesson, step, feedback text and your explanation for human review, without camera images. You can withdraw consent for future processing by stopping the feature or contacting us.
Requests use OpenAI’s API with response storage disabled. OpenAI does not train on API data by default, but may retain abuse-monitoring logs for up to 30 days, with exceptions. Disabling response storage does not mean zero retention. See OpenAI’s data controls. AI feedback can be wrong; it is practice guidance, not a qualification or a decision about employment, education or access to essential services. We do not use camera images to identify people or infer sensitive traits.
Community and teacher contributions
Skill requests and their descriptions are public. Support votes are linked to an account to prevent duplicate votes; account emails are not shown on the board. Teacher applications, drafts, recordings, transcripts, permissions and review decisions are stored to run the contribution and review process. Applications and unpublished content are available to the contributor and authorised reviewers. Approved lessons, teacher display names and demonstrations are public; demonstration playback uses temporary links.
Studio recording starts only when requested and uses the camera and microphone. Uploads are stored in a private bucket. Separate AI actions can send a transcript and selected stills to OpenAI to propose a lesson, or the uploaded recording for transcription. Only upload material you may share, including permission from anyone recorded. The optional model-improvement choice does not trigger training; no training pipeline currently runs. You can withdraw that optional permission by contacting us.
Updates and enquiries
If you join the launch list, we save the email, age bracket, interests, optional answers and consent you submit so we can send the updates you requested and understand demand. We record the form page and language, without campaign tracking or browsing history. Marketing is based on your consent and is separate from your account; withdraw it by email at any time. The under-16 path stores only an aggregate count, without the submitted email or free text.
For an organisation enquiry, we use the contact details and requirements you provide to respond to your request and discuss a possible pilot. This is based on steps you request before an agreement, or our legitimate interest in answering a business contact. No one is added to marketing merely by sending an enquiry.
Providers and international processing
Cloudflare hosts the website, provides security and forwards messages sent to our contact address. Supabase provides authentication, the database and private file storage in our Frankfurt project. Resend sends account emails from its Ireland region. Google Gmail receives messages sent to our contact address. OpenAI processes the material you choose to send to AI features. We do not sell personal data.
European hosting regions do not mean that all processing stays in Europe: provider support, security, email and AI processing may also take place outside the European Economic Area, including in the United States. The providers describe their transfer safeguards, including Standard Contractual Clauses where applicable, in their Cloudflare, Supabase, Resend, Google and OpenAI terms. Contact us for information about safeguards applicable to your data.
How long data is kept
Account and free-session records are kept while your account is in use. Teacher drafts and published contributions are kept while you ask us to host them; withdrawal from publication stops new public access but does not by itself erase the draft, earlier versions or review records. Ask us to remove those as well. We keep launch-list data until you withdraw or the launch-update purpose ends, and enquiries and feedback while needed to handle them. We review records for deletion when those purposes end. Any limited retention needed for a legal obligation or dispute is explained when relevant.
Local records remain under your browser’s controls. Our temporary rate-limit counters use hashed network identifiers. Providers also keep operational and security logs under their own retention settings; OpenAI’s retention is described above. A deletion request covers active records and hosted files; copies in provider backups expire under the provider’s backup schedule.
Your choices and rights
Contact us to request access, correction, deletion, a portable copy, restriction, or to object to processing based on legitimate interests. You can withdraw consent without affecting processing already carried out. We verify requests proportionately, normally through your account email, and respond within one month; if a lawful extension is necessary, we explain it within that month. Please do not send an identity document unless a justified verification need has first been explained.
You may complain to the Dutch Data Protection Authority or your local supervisory authority. Accounts and AI features are intended for people aged 16 and over. Contact us if a younger person has submitted personal data so we can address it.