Legal

Privacy Policy

Last updated: August 2026

1. Introduction

TeachReady AI ("we", "us", or "our") is a virtual classroom simulator that lets ESL teachers practice teaching AI-powered students. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, who processes it, and the rights you have over it.

We are committed to protecting your privacy and to processing your personal information lawfully and transparently, in line with the South African Protection of Personal Information Act, 2013 (POPIA), the European Union's General Data Protection Regulation (GDPR) where it applies to you, and other applicable data protection laws.

By using the Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Platform.

2. Information We Collect

The table below describes each category of information we collect, why we collect it, how it is used, where it is processed and stored, how long we keep it, and who processes it.

Account information

Your name, email address, and profile picture, provided when you sign up or sign in via Clerk.

Why collected:
To create and manage your account, let you sign in, and personalise your experience.
Where stored / processed:
Clerk's authentication service (US/EU data centres). Basic identifiers are also referenced server-side on our own infrastructure.
Retention:
Until you delete your account.
Who processes:
Clerk

Classroom data (voice recordings, chat transcripts, AI conversation logs)

Voice recordings of your teaching sessions (WebM), the text chat transcript between you and the AI students, and logs of the AI conversation (your questions and the students' responses).

Why collected:
To simulate the classroom, generate your coaching report, and let you review your teaching afterwards.
Where stored / processed:
Recordings are uploaded to Cloudflare R2 object storage with 7-day automatic expiry; purchased copies are retained under the purchased/ prefix. Full chat transcripts are not retained, but a lightweight assessment summary is saved as progress data.
Retention:
Recordings: 7 days (automatic), unless purchased for permanent storage, or until you delete them. Assessment summaries: until account deletion.
Who processes:
Cloudflare (R2), SambaNova (AI students), Cartesia (speech synthesis)

Camera and microphone (webcam video and audio)

Video and audio from your webcam and microphone captured during practice sessions.

Why collected:
So you can teach the way you would with real students, and so your recorded lesson shows your actual presence and delivery for self-review and your portfolio.
Where stored / processed:
Captured in your browser and included in the lesson recording, which is uploaded to Cloudflare R2 with 7-day automatic expiry. Recording only begins after you give explicit consent in the recording dialog.
Retention:
7 days (automatic) or until you delete the recording.
Who processes:
Cloudflare (R2)

Uploaded content (PPTX/PDF lesson materials)

The PowerPoint, PDF, or image lesson files you upload into the classroom.

Why collected:
To display your own lesson slides to the AI students during your practice class.
Where stored / processed:
Cloudflare R2 under workspaces/{userId}/{workspaceId}/. The file is used for your active workspace and is protected by your account access.
Retention:
7 days from workspace creation, then automatically deleted; replaced when you upload another lesson.
Who processes:
Cloudflare (R2), TeachReady AI

Progress data

Lightweight assessment history: lesson date and title, scores, strengths, and areas for improvement.

Why collected:
To show your permanent progress history, trends, and regenerate assessment reports.
Where stored / processed:
Server-side progress data tied to your account; it does not include full classroom transcripts.
Retention:
Until you delete your account.
Who processes:
TeachReady AI (own infrastructure)

Workspace metadata

Workspace ID, creation and expiry dates, and uploaded lesson file name.

Why collected:
To enforce the one-upload, 7-day workspace lifecycle and display expiry information.
Where stored / processed:
Server-side workspace records associated with your account.
Retention:
Until the workspace expires or is replaced.
Who processes:
TeachReady AI (own infrastructure)

Assessment reports

PDF and HTML coaching reports generated from your retained progress data.

Why collected:
To let you review and download your teaching assessments.
Where stored / processed:
Reports are regenerated on demand from server-side progress data.
Retention:
Progress data is retained until account deletion; generated report files follow the applicable workspace or recording retention period.
Who processes:
TeachReady AI (own infrastructure)

Screen share

Your screen content when you enable screen sharing.

Why collected:
So your recorded lesson can include the slides and materials you show, just like a real online class.
Where stored / processed:
Captured as part of the lesson recording and uploaded to Cloudflare R2 with 7-day automatic expiry.
Retention:
7 days (automatic) or until you delete the recording.
Who processes:
Cloudflare (R2)

AI data (teacher questions and student responses)

The text of what you say or type to the AI students, and the responses generated for them.

Why collected:
To power the AI students' conversation and to generate your coaching analysis.
Where stored / processed:
Transmitted to our AI providers for real-time processing. We do not use this data to train our providers' models, and it is not retained by us beyond the lesson session.
Retention:
Session only (until the lesson ends).
Who processes:
SambaNova (LLM), Cartesia (text-to-speech)

Portfolio data

Your teaching history, coaching reports, scores, badges, and resume content that you build in the portfolio.

Why collected:
To provide your digital portfolio and verified sharing links for employers.
Where stored / processed:
Server-side JSON tied to your account, plus local copies in your browser's localStorage for instant access.
Retention:
Until you delete your account.
Who processes:
TeachReady AI (own infrastructure)

Payment information

Payment details you provide when purchasing the Practice Pack (R200), Credit Top-Up (R99), Mia Premium (R200), or a Recording Download (R100).

Why collected:
To process one-off purchases.
Where stored / processed:
Processed entirely by our payment providers. We never see or store your full card number, bank details, or payment credentials.
Retention:
Payment records retained per legal/tax requirements.
Who processes:
PayFast (South Africa), PayPal (global)

Lesson session timing

For paid lessons, a short-lived record of when your lesson started and when its 15-minute window expires (lesson session identifier and timestamps).

Why collected:
To enforce the 15-minute per-lesson cap on paid tiers server-side, so no lesson can run beyond its time limit.
Where stored / processed:
Server-side JSON tied to your account, with automatic expiry after the lesson ends or the window passes.
Retention:
Deleted when the lesson ends, or automatically no later than 15 minutes after it starts.
Who processes:
TeachReady AI (own infrastructure)

Technical data

Browser type, device information, and IP address.

Why collected:
To keep the platform secure, diagnose errors, and display the service correctly on your device.
Where stored / processed:
Collected via Clerk and standard server request logs on our own infrastructure.
Retention:
Server logs are retained for a limited period for security purposes.
Who processes:
Clerk, TeachReady AI

Cookies

Clerk session cookies used for authentication.

Why collected:
To keep you signed in and secure your account.
Where stored / processed:
In your browser; expires with your session.
Retention:
Session length.
Who processes:
Clerk

3. How We Use Your Information

We use the collected information for the following purposes:

  • To provide and maintain the Platform: Operating the virtual classroom, generating AI student responses, producing coaching reports, storing recordings, and hosting your portfolio.
  • To process payments: Facilitating Practice Pack, Credit Top-Up, Mia Premium and Recording Download purchases through PayFast and PayPal.
  • To verify portfolios: Generating and validating verified teaching portfolio links shared with employers.
  • To communicate with you: Responding to support requests and sending service-related notices.
  • To ensure security: Monitoring for fraudulent activity, abuse, and violations of our Terms of Use.

We do not sell your personal information, and we do not currently use analytics or advertising trackers of any kind.

4. AI & Privacy Information

The students in the classroom and the coaching feedback you receive are generated by artificial intelligence. Here is what that means for your data:

  • What is processed: The text of your questions and prompts, and the responses generated for the AI students, are sent to our AI providers (SambaNova for language generation and Cartesia for text-to-speech) so the classroom can respond to you in real time.
  • What is not processed: Your uploaded lesson files (PPTX/PDF) are stored in your workspace but are not sent to our AI providers. Your webcam video is not analysed by AI; it is only recorded for your review.
  • Retention by providers: We instruct providers to process data on a per-request basis without retaining it for their own purposes, and we do not use it to train their models.
  • AI is not a human: Simulated students are AI-generated personas — they are not real children or real people, and AI coaching scores are generated feedback, not a professional evaluation.

5. Data Retention

We retain personal information only as long as needed for the purposes described above:

  • Uploaded lessons and unpurchased recordings: Stored in the active workspace for 7 days, then automatically deleted. Deleting them in-app removes them from R2 immediately.
  • Purchased recordings: Stored permanently under purchased/ until account deletion.
  • Progress data: Lightweight assessment summaries are retained permanently until account deletion; full transcripts are not retained.
  • Portfolio data: Until you delete your account.
  • Account data: Until you delete your account.
  • Workspace metadata: Retained until the workspace expires or is replaced. Assessment reports are regenerated from retained progress data on demand.
  • Payment records: Retained for the period required by applicable tax and accounting regulations.

6. Data Deletion

Deleting a recording

You can delete an individual recording at any time from the coaching report / watch page for that recording, using the in-app delete button. Deletion removes the recording file from Cloudflare R2 immediately and it can no longer be viewed or downloaded.

Deleting your account

To delete your account and all associated data, email privacy@teachready.ai from the email address registered to your account. You can also use the Delete My Account control in your portfolio. Account deletion removes your progress, workspace metadata, uploads, recordings, purchased copies, reports, and portfolio data through our account-deletion handler. Payment records are retained only where legally required.

What happens on deletion

  • All recordings are deleted immediately from R2.
  • Portfolio data (teaching history, coaching reports, scores, badges, resume) is removed.
  • Your account is closed and you can no longer sign in.
  • Payment records are retained only as required by law (e.g. tax records), and are not used for any other purpose.

7. Third-Party Processors

We use the following third-party services to operate the Platform:

Clerk

Authentication

Storage: US/EU data centres

clerk.com/privacy

Cloudflare R2

Recording storage (7-day auto-expiry)

Storage: Cloudflare object storage

cloudflare.com/privacypolicy

SambaNova

AI language model powering AI students and coaching

Storage: API processing

sambanova.ai/privacy-policy

Cartesia

Text-to-speech (AI student voices)

Storage: API processing

cartesia.ai/privacy

PayFast

Payment processing (South Africa)

Storage: Processed by PayFast

payfast.co.za/privacy-policy

PayPal

Payment processing (global)

Storage: Processed by PayPal

paypal.com/privacy

Each processor is a separate data operator that processes personal information on our behalf under its own privacy practices, linked above. We choose processors that maintain appropriate security and data-protection safeguards.

8. POPIA Compliance (South Africa)

Responsible party: TeachReady AI, a South African operation, is the responsible party (as defined in POPIA) that determines how and why your personal information is processed.

Lawful bases for processing (POPIA):

  • Consent: You consent to recordings and to the processing of classroom data when you start a practice session and confirm the recording dialog.
  • Legitimate interest: Operating the classroom simulator, generating coaching reports, and keeping the service secure are our legitimate interests.
  • Legal obligation: We retain payment records as required by tax and accounting law.

Operator relationships: Clerk, SambaNova, Cartesia, PayFast, PayPal, and Cloudflare process personal information on our behalf as operators. We have taken reasonable steps to ensure each operator processes your information lawfully and securely.

Cross-border transfers: Your information may be transferred to countries outside South Africa (for example, to Clerk's US/EU data centres, Cloudflare's global storage locations, and AI/payment providers' servers). We only transfer information to operators in jurisdictions that provide an adequate level of protection or where appropriate safeguards (such as contractual protections) are in place. By using the Platform and providing your information, you acknowledge these transfers.

9. GDPR Compliance (European Economic Area)

If you are located in the European Economic Area (EEA), the UK, or Switzerland, the GDPR applies to our processing of your personal data.

Lawful bases (GDPR Art. 6):

  • Consent (Art. 6(1)(a)): For recording your teaching sessions, which you confirm in the recording consent dialog.
  • Legitimate interests (Art. 6(1)(f)): For providing the core service — running the classroom simulation, generating coaching reports, and securing the platform.
  • Legal obligation (Art. 6(1)(c)): For retaining payment records required by law.

Your data subject rights (GDPR Arts. 15–22):

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("right to be forgotten").
  • Restriction: Request that we limit how we process your data.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.

International transfers: Where personal data is transferred outside the EEA, we rely on appropriate safeguards, including the EU Standard Contractual Clauses or the processors' equivalent transfer mechanisms, and where applicable their certifications (such as the EU-US Data Privacy Framework).

Supervisory authority: You have the right to lodge a complaint with your local data protection supervisory authority (in South Africa, the Information Regulator) if you believe your data protection rights have been breached.

10. Children's Privacy

The Platform is a professional tool for adults and is not intended for children under 18 to create accounts. The "students" in the classroom are simulated AI personas — they are not real children, and we collect no personal data about real children through them. If you are a parent or guardian and believe a child has provided us with personal data, please contact us and we will delete it.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), secure authentication via Clerk, per-user access controls on stored recordings, and regular security reviews. Recordings in R2 are stored with private access and are only retrievable by their owner.

However, no method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Your Rights

You have the right to access, correction, deletion, and data portability of your personal information. To exercise any of these rights, email privacy@teachready.ai and we will respond within 30 days. You can delete individual recordings yourself at any time using the in-app delete button on the recording's watch page, and you can request full account deletion by email as described in Section 6.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Platform. Your continued use of the Platform after such changes constitutes acceptance of the updated policy.

15. Cookie Policy

Cookies are small text files that a website stores on your device when you visit it. They are widely used to make websites work, or to work more efficiently. Some similar technologies — such as localStorage — are used for the same purposes.

Necessary cookies (always active)

These are set by Clerk, our authentication provider, so you can sign in:

  • __session — verifies you are signed in. Expires when your session ends.
  • __client_uat — supports Clerk's session handling. Expires with your session.

Without these cookies you cannot sign in or use the classroom. They do not track you across other websites.

Functional preferences

teachready_cookie_consent (stored in localStorage) — remembers your cookie preferences so we don't ask again, and ensures future non-essential technologies only activate if you consent. This preference stays on your device.

Analytics and marketing cookies

None currently active. We do not currently use any analytics, tracking, marketing, or advertising cookies or pixels (including Meta Pixel or TikTok Pixel). If we introduce any in the future, they will only activate with your consent, and this policy will be updated first.

You can manage your preferences anytime via or through your browser settings. Blocking necessary cookies will prevent you from signing in.

For more detail on cookies, see Clerk's privacy policy at clerk.com/privacy.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

TeachReady AI

South Africa

Email: privacy@teachready.ai

South African Information Regulator: inforegulator.org.za