Mentaka learner app privacy

Updated: 12 October 2026

This notice covers the standalone Mentaka Android learner app and its account API. It does not replace notices for separate employer or mentor services on the public website.

Your account and learning

We process your name, email address, optional contact number and location, profile photo, account role, verification status, learning progress, saved practice and account preferences. If you choose to complete a profile or CV, it may include your language, occupation, employment status and experience. Your progress is associated with your signed-in account so you can continue on another device. User-entered practice is not professional skill verification. Phone login and SMS delivery are not provided in this release; an optional contact number does not establish a verified sign-in identity.

Passwords are stored as salted, peppered password digests, not plain text. Account sessions contain expiry and activity information, network IP information and an app/browser identifier for security. Verification and reset codes expire after 15 minutes; standard account sessions expire after 30 days unless configured otherwise.

Optional Google sign-in

If you choose Google sign-in, we receive the Google account identity, verified email, profile name and available profile picture. Sign-in is completed through Google in your browser and a one-time exchange; the app does not ask for your Google password.

Create with Tukun: optional AI and local practice

You can use local practice templates without sending your situation to an AI provider. Local-template practice is labelled as local practice, not AI-generated content. If you separately choose optional AI, only after explicit consent the app sends your edited sales situation as text through Firebase AI Logic to Google's Gemini API to request 10 practice questions (older app versions request 5). You must confirm that you are 18 or older and outside the EEA, United Kingdom and Switzerland. Mentaka also checks the approximate request country supplied by Cloudflare; unknown or unsupported regions are denied. This temporary eligibility check does not request GPS or save the country in the learning database.

Free-tier Gemini processing may use prompts and responses to improve Google products and machine-learning technologies. Human reviewers may read, annotate and process them. Do not submit real names, phone numbers, email addresses, addresses, confidential business information or sensitive personal information. Input screening reduces some risks but cannot guarantee removal of all private information. AI use is optional; you can keep using local practice instead. Read Google's Gemini API terms and Google's privacy policy.

The Mentaka account API receives only your consent and eligibility confirmations, language, requested question count and a bounded retry identifier for the AI permit. It increments an account-linked daily attempt counter. It does not store those confirmations, country, retry identifier, situation, transcript or provider output in the permit table. A permit is a normal-app eligibility and usage check, not an independent security guarantee for Google's service. Generated questions may be wrong or unsuitable. They are practice only, not a job promise, professional advice, qualification or verified competence. The app validates output before showing it; content can be reported for review. A selected generated quiz can be saved locally and included in signed-in learning progress stored in Cloudflare D1. Provider security records and retention follow the provider's policies. This is not a zero-retention promise.

Optional phone dictation and read-aloud

Microphone permission is requested only when you choose dictation. On-device speech recognition is preferred where installed and supported. If it is unavailable, you can type instead or separately allow your phone's speech-recognition service, which may send audio to its own provider for processing. That choice is distinct from consent to send edited text to Gemini. Recognition availability and English or Bangla support vary by phone. Mentaka does not save raw dictation audio or upload it to the Mentaka account API. The transcript is editable before any optional AI request. No paid server transcription route is enabled.

Optional text-sharing and phone-provider dictation choices are remembered separately on this device for your signed-in account, or separately for guest practice. They are not enabled by accepting the general sign-up policy. You can turn either choice off in Profile, Settings. A changed notice or a different account requires a new choice. Remembering consent does not permit background recording: each dictation session still starts only when you choose it, stops when you finish or cancel, and has a 3-minute safety limit.

Tukun read-aloud uses an installed device voice when available. Any other audio or voice-provider feature must have its own accurate notice before activation. No permission to record continuously or in the background is granted by choosing dictation.

Profile photos and community

A profile photo is optional and is selected with the system photo picker; broad access to your photo library is not required. Community contributions are visible to signed-in members and may include your displayed name, role and available profile picture. You can remove your own contributions, report content and block members. Choosing Like stores your account association, the conversation and a timestamp; the feed displays a like count and whether you liked it, not a list of the people who liked it. You can unlike a conversation. Account deletion removes your likes. Content excerpts in AI reports are saved for safety review. Do not place private personal information in posts or reports.

Mentoring requests and where data is saved

When you request mentoring, we store your selected mentor or introduction request, preferred date and time, time zone, practice topic and request status in Cloudflare D1. Your private request is visible to you and the authorized Mentaka owner, with your account name and email so the owner can arrange a session. It is not posted to the community. Coaching focus is a description, not a verified certification. Dates in the calendar are preferred request dates, not a claim of confirmed mentor availability. Sending a request does not reserve a paid session, send payment or convert practice XP into booking credits. The owner must arrange and confirm a session; you can see the decision and learner-facing note in your requests. You can cancel a request, and account deletion removes your mentoring requests.

Guest practice stays in private storage on your device. Signed-in progress, profile data and your resized profile photo are synchronized to your account in Cloudflare D1 and cached locally for offline use. Logout removes the signed-in private cache; unsynchronized changes may be lost after logout, app removal or clearing device storage. Account and learning data are stored in the operator's Cloudflare project, not in this app's public website or a chat service.

Private feedback

If you choose Send feedback, we store your message, selected category, optional app version, account association, review status, retry identifier and timestamps in Cloudflare D1. Only the approved, email-verified Mentaka owner can read your submission, together with the name and email from your existing account. Feedback is not posted to the community, emailed or sent to an AI provider. It does not automatically include recordings, CV files, learning progress, device identifiers or network metadata. The draft is held only in app memory and clears when you sign out or restart. Deleting your account removes its private feedback and account-linked feedback abuse counters in the same atomic operation.

Account administration and learning records

When account administration is enabled, authorized Mentaka staff access only the records allowed by their assigned permissions. Learning records include self-reported XP, level, streak, mission attempts, answers correct, scores, duration and saved progress. We record login, profile and progress activity for support and account management. Role-based access does not automatically give moderators or reviewers your email or phone number. Private feedback and mentoring requests remain restricted to the owner role.

Administrators can suspend or disable an account, revoke its sessions and add private support notes. Credit adjustments use a separate transaction ledger with the amount, reason, administrator and date. Learner-authored XP does not automatically create spendable credits. Sensitive administrative actions have tamper-resistant audit records with account identifiers and action details, not passwords, verification codes, bearer tokens or copies of your private CV. Account deletion removes your profile, attempts, personal activity, notes and credit records. Pseudonymous administrative audit records may remain for accountability; backups may retain deleted records for their applicable recovery period.

Optional local reminders and touch feedback

Practice reminders are off until you choose to enable them and grant any required Android notification permission. Reminder time and enabled state are stored and scheduled locally on your phone, not sent to Mentaka's server. You can disable reminders or open Android notification settings from the app settings. Optional vibration and ordinary touch-feedback settings are also handled on the device. These reminder and touch-feedback features do not add telemetry, analytics or remote notifications.

Service providers, security and choices

Cloudflare hosts the account API and database. Resend delivers account emails. Google receives identity data if you choose Google sign-in, and text if you choose eligible optional Gemini practice through Firebase AI Logic. The phone's speech-service provider may receive audio only if you separately permit that service. SDK and provider security processing may include app/project identifiers and network metadata under their policies. Processing may occur outside your country. No paid AI or transcription service is enabled by Mentaka's account API.

The learner app has no advertising SDK and does not sell your personal information. Account and learning data are kept while your account exists. Reports are kept for safety review; deleting your account removes reports you submitted. We use access controls, hashed sessions, secure connections, content limits and abuse limits, but no service can guarantee perfect security.

Delete your account

In the app, open Profile, then Settings, choose Delete account and type DELETE after reading the notice. This removes your account profile, progress, profile photo, sessions, linked identity, blocks, mentoring requests, private feedback, your reports, daily AI usage records, account-linked feedback abuse counters and your own community content. It also removes community likes, opted-in CV sharing snapshots and account-linked consent receipts, sharing events and in-app notifications. Where account administration is enabled, it also removes your account-linked profile and progress records, mission attempts, personal activity records, private support notes and credit balance and ledger records. Pseudonymous administrative audit records may remain for accountability. Other members' replies may remain in an anonymous thread with your original post removed. Copies already sent to employers are not automatically recalled. Infrastructure backups and records required by law or provider safety rules may persist under their applicable schedules.

If you cannot use the app, request deletion from your registered email address at hello@mentaka.com. We verify ownership before acting. See account deletion instructions. Contact the same address for privacy questions or to request correction of account information.