Last updated: 31 July 2026 · Effective: 31 July 2026
SketchCast AI (“SketchCast”, “we”, “us”, “our”) turns textbook chapters into narrated lessons, decks, videos, worksheets, and an optional book-grounded AI study assistant, for schools, teachers, parents, and their students. Many of our users are children, so we hold ourselves to a simple standard: collect the minimum, use it only to teach, never sell it, never advertise with it, never use it to train AI models, and never track behaviour for any purpose other than showing teachers and parents learning progress.
This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have. It applies to sketchcast.app and app.sketchcast.app.
The service is operated by Aethel Twin Sdn. Bhd., Registration No. 202601012908 (1675006-X), a company incorporated in Malaysia (“the operator”), registered at D-1-1, Bangi Gateway Shopping Complex, Persiaran Pekeliling, Seksyen 15, 43650 Bandar Baru Bangi, Selangor, Malaysia. For the personal data described here, the operator is the data controller / data fiduciary — except for data inside a school’s workspace, where the school is the controller and we act as its processor under our agreement with the school (see §14).
Privacy contact / grievance officer: reachable at privacy@sketchcast.app (or hello@sketchcast.app), tel +60 11-2088 2016. We aim to acknowledge requests within 72 hours and to resolve them within the timeframes set by applicable law.
SketchCast is available in more than one country, so the protections you can rely on depend on where you and your school are. Wherever you are, the commitments above apply. In addition:
If a mandatory local law gives you stronger rights than this policy describes, that law prevails.
Name, email address, password (stored only as a salted hash by our authentication provider) or Google sign-in identity, role, and — for school staff — school affiliation. At sign-up we also collect a short profile you provide (e.g. the grades/subjects you teach, or, for a parent, how many children you support and their grade levels).
Student accounts are created by a teacher, parent, or school — students never sign themselves up. For each student we store: name, a login ID, a parent/guardian email address (used for account communication only), class enrolment, and learning records — which lessons were assigned, completion status, quiz/worksheet answers and scores, any answer files the student submits, and — if the AI study assistant is used — the messages the student types to it and its replies (see §6). Where a school or family uses the diary, we also store the notes teachers and parents write about the student, any replies the student writes, and a record of which parent acknowledged which note and when.
The diary lets a parent or teacher record a note about a child's health or wellbeing — an absence, medication, an allergy, or a concern — so the adults teaching that child can act on it. We treat this as sensitive information: it is provided at the parent's or school's initiative, it is visible only to that child's teachers, their parents and their school's leadership, and it is never used for advertising and never used to train AI models. It is deleted with the student's record, and the author can delete it at any time. Please don't use the diary for medical emergencies — contact the school directly.
Textbook chapters and materials teachers/parents upload, and the lessons, decks, videos, and worksheets we generate from them.
If you buy a paid plan, our payment providers (see §7) collect and process your payment details. We do not receive or store full card numbers. We store only your plan, billing status, and a provider reference needed to manage the subscription.
To keep the service running and secure we process basic technical data such as IP address, device/browser type, and error logs. We use no advertising or analytics trackers, no behavioural-profiling SDKs, and no cookies other than the session cookie that keeps you signed in. We do not collect student phone numbers, home addresses, photos, biometrics, or precise location.
We do not use your data for advertising, and we do not sell it to anyone. Where we rely on consent (e.g. a child’s data, or premium voices), you may withdraw it at any time.
SketchCast uses artificial intelligence in two ways, and we are precise about what is sent where:
Our AI providers process this content only to provide the service. Under their business terms they do not use it to train their models and are not permitted to use it for advertising. We do not use your content or your students’ data to train any AI model. The assistant is grounded in the book and is designed to give hints and method — not graded answers — but, like all AI, its output can contain errors and should be reviewed.
We use a small number of vetted providers to run the service. Each processes data only on our instructions and under a data-processing agreement.
| Provider | What they do |
|---|---|
| Supabase | Database, authentication, and file storage |
| Vercel | Hosts the web application |
| Railway | Runs the lesson-generation worker and maths service |
| Cloudflare | Serves this website |
| Anthropic | AI generation, the study assistant, and diary translation (§6) |
| Microsoft (Edge TTS) & ElevenLabs | Narration audio (ElevenLabs only when premium voices are enabled) |
| Optional “Sign in with Google” for adult accounts only | |
| Resend | Sends account and support emails |
| Stripe | Payments for school plans |
| Lemon Squeezy | Payments for parent/teacher plans (as Merchant of Record) |
We will keep this list current and give schools notice of material changes to sub-processors that handle student data before they take effect.
Some of the providers above are based in, or process data in, the United States and other countries outside your own. Where we transfer personal data across borders, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), the providers’ own compliance commitments, and, for student data, the school’s instructions. You can ask us for details of the safeguards that apply to a given transfer.
We use a single essential cookie — the session cookie that keeps you signed in. We do not use advertising cookies, analytics cookies, cross-site trackers, or “Do Not Track”-defeating techniques. Because we use only an essential cookie, no cookie-consent banner is required, but you can clear the cookie at any time by signing out.
Data is encrypted in transit; passwords are hashed; every database query is scoped by row-level security so users reach only data their role permits; files are served through short-lived signed links; leadership access to student-level data is audit-logged; payment card details never touch our servers. No system is perfectly secure, but minimal collection is our first protection — what we don’t hold can’t leak.
If a personal-data breach occurs that is likely to create a risk to you, we will notify the relevant supervisory authority and affected schools/users without undue delay and within the timeframes required by applicable law, and describe what happened and what we are doing about it.
Subject to your local law, you have the right to: access the personal data we hold about you; correct it; delete it; obtain a copy in a portable format; restrict or object to certain processing; and withdraw consent where we rely on it. Parents and guardians may exercise these rights for their child. We do not discriminate against you for exercising them, and we will not sell or share your data.
To exercise a right, contact us at the address in §1 — if you are part of a school, your school admin can also action most requests directly in the product. If you believe we have mishandled your data, you may lodge a complaint with your local data-protection authority (for example, the Data Protection Board of India, an EU/EEA supervisory authority, the UK ICO, or the California Privacy Protection Agency).
Some features compute helpful signals automatically — for example a “book health” quality score at upload, an at-risk learning worklist for teachers, and auto-scoring of objective quiz questions. These assist a teacher’s judgment and are always reviewable and overridable by a human; we do not make decisions producing legal or similarly significant effects about a student by automated means alone. AI-generated teaching materials should always be reviewed by a teacher before classroom use.
When a school uses SketchCast, the school is the controller of its students’ data and we are its processor: we process student data only on the school’s documented instructions, for the educational purpose, and under confidentiality. Schools that need a formal Data Processing Addendum (DPA) — including sub-processor terms and, where relevant, Standard Contractual Clauses — can request one at the contact in §1.
If we change this policy, we will update this page and its “Last updated” date, and notify schools of any material change affecting student data before it takes effect. Questions or requests: privacy@sketchcast.app.