Scaletchi AI

Privacy Policy

Effective date: October 27, 2025

Welcome to Scaletchi AI (the “Service”) at scaletchi.com. This Privacy Policy explains how we (the joint controllers) collect, use, share and protect personal data, and describes your rights under the EU General Data Protection Regulation (GDPR) and Portuguese law.

Data controllers

You can contact us about privacy matters at support@scaletchi.com.

What personal data we collect

When you use Scaletchi we collect only the data necessary to provide the service:

From Google OAuth: first name, last name, email address, Google OAuth ID and profile picture.

Account metadata: account creation date, last modified date, subscription status (whether you have an active subscription).

Payments: Stripe Customer ID (we do not store full card or payment details; Stripe processes and stores payment information).

Usage of the Service: the topic prompts you submit to generate lesson plans (these prompts are processed by our AI provider as described below).

How and why we use your data (purposes & lawful bases)

To provide the service and fulfill contracts: creating and managing your account, enforcing subscription limits (e.g., 3 free topics/day), and delivering AI-generated lesson plans — lawful basis: performance of a contract.

Authentication: Google OAuth sign-in to authenticate users — lawful basis: your consent when you sign in and the necessity to perform the service.

Payments & billing: we store Stripe Customer IDs and subscription status to manage subscriptions; Stripe handles payment processing and stores payment records — lawful basis: performance of a contract and legal obligation (tax, accounting).

Security and fraud prevention: to protect the service from abuse — lawful basis: legitimate interests (we balance this interest against users' privacy rights).

User requests and legal compliance: responding to data subject requests or legal obligations — lawful basis: legal obligation or your request.

AI provider (Gemini) and the prompts you send

When you request a lesson plan we forward the topic prompt to Google’s Gemini API using our API key. We do not include your Google account details in those requests. The prompt text you submit is processed to generate the lesson plan and may be stored as part of your account history.

We recommend that you do not include unnecessary personal or sensitive data in prompts. If you ever believe a prompt contains personal data that should be removed, contact us at support@scaletchi.com.

Third-party services

Google (OAuth): used for user sign-in and to obtain basic profile information.

Stripe: used for payment processing. Stripe stores and processes payment details under its own privacy and security controls; we only retain the Stripe Customer ID and subscription status.

Other service providers we may use to operate the site (hosting, email delivery, analytics) will be engaged only as processors and required to follow appropriate security and confidentiality measures.

International transfers

Some service providers (e.g., payment processors, AI providers, hosting providers) may process data outside the EU/EEA. Where transfers occur, we ensure appropriate safeguards (such as standard contractual clauses, or reliance on an adequacy decision) are in place or that the provider offers an equivalent level of protection.

Cookies

We use only essential cookies:

Session cookie: keeps you logged in while using the site (strictly necessary).

Cookie consent preference cookie: stores whether you accepted cookies on the site (strictly necessary).

Because we only use strictly necessary cookies, we do not use tracking or advertising cookies. You can still clear cookies from your browser at any time (this will log you out).

How long we keep your data

We retain your account data (profile fields, subscription status, prompts you submitted) until you request deletion. If you request deletion, we will erase your personal data from our systems, except for limited information we must keep for legal or tax purposes (or to prevent fraud), in which case we will anonymize or retain only what is strictly necessary.

Your rights under GDPR

Under the GDPR you have several rights regarding your personal data:

Right of access — request a copy of the personal data we hold about you.

Right to rectification — ask us to correct inaccurate or incomplete data.

Right to erasure (“right to be forgotten”) — request deletion of your data (subject to legal exceptions).

Right to restrict processing — request temporary limitation of processing in certain cases.

Right to data portability — request a machine-readable copy of data you provided to us.

Right to object — object to processing based on legitimate interests (we will assess and respond).

Right to withdraw consent — where processing is based on consent (e.g., Google sign-in consent), you may withdraw consent going forward (this will not affect processing done before withdrawal).

To exercise any of these rights, contact us at support@scaletchi.com. We will respond to verified requests as required by law, normally within one month.

How to request data export, correction or deletion

Send an email to support@scaletchi.com with a clear subject line such as “Data export request”, “Data correction request” or “Data deletion request” and include the email address associated with your Scaletchi account. We may ask for a short proof of identity to verify the request.

Complaints

If you are not satisfied with our response you may lodge a complaint with the Portuguese data protection authority (Comissão Nacional de Proteção de Dados - CNPD) or another supervisory authority in your EU member state.

Security

We implement appropriate technical and organizational measures to protect personal data against accidental loss, unauthorized access, disclosure or alteration. However, no system is perfectly secure — if you suspect a security issue, please contact us immediately at support@scaletchi.com.

Children

Our service is intended for teachers and adults and is not designed for children under 16. We do not knowingly collect data from children under 16. If you believe a child under 16 has created an account, contact us and we will take steps to delete the account.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will post an updated “Effective date” at the top of the policy and, where appropriate, notify users by email.

Contact

For questions or to exercise your rights, contact us at:
Email: support@scaletchi.com

Note: This Privacy Policy is provided for informational purposes and does not constitute legal advice. If you need a legally certified text, consider seeking legal counsel.