Policies & contact

Operator & contact

Operator

The designated workspace owner

Country

Indonesia

Support & privacy

Contact the person who gave you access. The owner can publish a dedicated address in Settings → Privacy & contact.

The owner's name and dedicated contact address have not been published yet. This is a private commissioned app; it is not offered for public sale.

Privacy Policy

The teacher uses Chewtah to manage classes, record lesson observations, prepare parent messages, and plan teaching material. The operator maintains the workspace. The teacher decides which student information is needed and must have authority to use it.

Information kept

Records can include a student name or nickname, optional age and speaking level, group membership, class dates and meeting links, lesson observations, parent-message drafts, and optional parent contact or tuition records. Guardian-consent status and its date can be recorded. Names can repeat; each child has a separate record. Do not enter identity documents, home addresses, medical details, passwords, or unrelated family information.

Files & storage

PDF, Word, and text meeting files are read in your browser. Original files are not uploaded by the importer. Review the extracted text and keep only the relevant child's observations. Saved excerpts and the source filename become lesson records. The hosted workspace stores saved records in Cloudflare D1 and serves them through a password-protected Cloudflare Worker. Downloaded backups are separate copies under your control.

Optional text generation

Generation happens only when you choose Generate. A connected provider receives the selected lesson evidence and necessary prompt context. Free Gemini feedback is restricted to fictional example observations and uses a generic student label. Do not submit real or confidential student information through the free service, including through a copied prompt. Free Google services may use submitted content for product improvement and human review under their terms.

Paid providers are disabled in this deployment. Enabling one later requires a personal account, an explicit server change, a budget, and a review of the provider's data terms and any required guardian and transfer permissions. A saved API key is encrypted on the hosted server, excluded from workspace backups, and never displayed back in the app.

Providers, access & transfers

Cloudflare provides hosting, database storage, and request-security infrastructure. Its Turnstile browser check protects hosted sign-in from automated abuse. When sign-in protection is enabled, Cloudflare receives browser and device signals, including the network address, and issues a temporary verification token. This check does not receive lesson records, student details, or the app password. See the Turnstile Privacy Addendum. Google processes generation requests only if you connect Gemini and generate text. Providers may process data outside Indonesia or Korea. The operator and teacher must establish an appropriate basis and safeguards for any international transfer before storing or sending children's data. No advertising or analytics SDK is loaded by this app. Chewtah does not sell records or automatically send messages to parents.

Children & consent

Only authorized adults may sign in. Children do not have accounts and should receive a printed or exported worksheet rather than workspace access. Before recording a child's personal information, the teacher must obtain the parent or legal guardian's consent where required, explain the purposes, providers and transfers, and retain the consent evidence separately. The app's consent status is a reminder and record; it does not verify a guardian or create their consent. Withdrawal must be reviewed promptly.

Retention & security

Teaching records stay until the teacher or operator removes them; archiving is not deletion. Review records when a student leaves and at the end of each teaching term. Keep only records still needed for teaching, legal obligations, or an agreed purpose. Sign-in cookies expire after 12 hours. Passwords are hashed, server requests are checked, and private records require sign-in. These controls reduce risk but cannot guarantee that an incident will never happen.

Cloudflare encrypts D1 records at rest and database connections in transit. This is provider-managed encryption; the authorized workspace owner can still access records. Downloaded backups are not encrypted by this app. Store them privately. Cloudflare may retain service logs and database recovery copies under its service settings and terms. Removing live records does not immediately erase every provider recovery copy, previously sent parent message, or downloaded backup. The owner must handle those copies and any incident notices required by applicable law.

You can request access, correction, a copy, withdrawal, or deletion using the contact route below. The owner will verify authority with only the information reasonably needed and explain any lawful retention reason. This policy does not remove rights under applicable privacy law.

Terms of Service

Chewtah is provided to the commissioned teacher for private class administration. Access for this teacher is free. Keep the app password private, use a personal provider account, and sign out on shared devices. Do not share workspace access with children, parents, or the PPT worker. Give the worker only the relevant weekly brief, without student records.

Use the app only for information you are authorized to process. Review dates, student identity, lesson evidence, and every generated message before using it. Generation can make mistakes; teacher judgment remains necessary. The app does not send email, collect tuition, provide legal advice, verify guardian identity, or promise learning outcomes.

You retain your teaching content. Use only pictures, fonts, books, characters, and other material you have permission to use. A character suggestion or picture instruction is not a license to reproduce that image. Do not use the app to access someone else's records, bypass security, or upload malicious material.

Save a backup when needed and store it securely. Service interruptions are possible. The owner may change or suspend access for security or maintenance and should notify the teacher of material changes. Any separate commissioning agreement and mandatory legal rights remain applicable. These terms do not impose a paid subscription, automatic renewal, forced marketing consent, or a waiver of statutory rights.

Refund Policy

Access is free for this commissioned teacher. Chewtah has no checkout, subscription, or in-app purchase, so no app-access payment is collected or refundable. Tuition entries are manual teaching records; they are not charges processed by Chewtah.

If you independently enable a paid API or hosting service later, its charges and refund process are handled by that provider. Any separate development commission follows the agreement between its parties and applicable law. Before selling access in future, the owner must publish the actual seller, price, payment, cancellation, and refund terms. No future payment is enabled by accepting a cookie notice or saving settings.

Cookie Policy

The hosted app uses the essential __Host-teacher-session sign-in cookie to maintain authenticated access for up to 12 hours. It is Secure, HttpOnly, and SameSite=Strict. Signing out clears the cookie and revokes that session on the server. The cookie contains a signed session token, not student records.

To limit automated password guesses, the app temporarily stores keyed digests of sign-in addresses and workspace request counters. It does not store raw addresses in these tables. Counter cleanup removes expired entries after about a day as requests arrive. Logged-out session identifiers are retained until their 12-hour expiry, then cleaned up as sign-outs occur.

Cloudflare Turnstile is an essential sign-in security check when enabled. The check uses short-lived browser verification tokens. This app does not enable Turnstile pre-clearance cookies. Cloudflare's own security processing is described in its Turnstile Privacy Addendum.

The app does not set optional analytics, advertising, or social tracking cookies. The cookie notice stores only the notice version in this browser's local storage so it does not repeatedly appear. Dismissing it does not grant advertising or data-sharing consent. You can clear that local preference in browser site-data settings; clearing the sign-in cookie signs you out.

The local desktop server does not use the hosted sign-in cookie. External sites, such as a meeting link or Google's key setup, have their own cookie policies. If optional tracking is added later, it must remain off until valid consent is given, with an equally accessible way to refuse and withdraw it.

Data requests

A parent or guardian can ask the teacher or workspace owner to access, correct, export, or delete the child's records, or withdraw consent. State the request and the child's class or name; do not email passwords, identity documents, or sensitive lesson details unless a secure verification method has been agreed.

Contact the person who gave you access, or ask the teacher to relay your request to the owner.

The signed-in teacher can export a workspace backup and use Settings → Security & data → Delete student data → Review a deletion to remove a child's structured records. Shared group notes, tasks, PPT text, writing samples, downloaded backups, and messages already copied outside Chewtah must be checked separately. Other children's records must be preserved. A withdrawn consent status alone does not delete data.

Chewtah sends no email or marketing messages, so there is no email subscription or unsubscribe link. If email is added, marketing must be optional and each marketing email must provide a working unsubscribe route. Parent updates are currently copied and delivered manually by the teacher.

Fonts, images & libraries

The interface uses system fonts, inline vector decorations, and the Chewtah mark created for this project. It does not fetch stock photos, web fonts, or character images. PDF and Word import libraries are served from this app, with their upstream license notices retained. Some PDF standard fonts have a font-embedding exception; they are not all licensed under MIT or Apache.

See the bundled library notices while signed in. Teachers and PPT workers are responsible for licensing any images, font files, or reading material they add to exported lessons.