Privacy Policy — AI Teacher Labs

Effective date: September 23, 2025
Owner/Provider: Education by Shala Books Inc.
About this product: AI Teacher Labs is a tool created and provided by Education by Shala Books Inc.
Scope: Applies to the AI Teacher Labs application.

1) What this Policy Covers

This Policy explains what information AI Teacher Labs processes and how. The app is primarily client-side: your planners, prompts, and settings are stored locally on your device unless otherwise described below. Where we provide optional cloud features (e.g., account sign-in or syncing), those services are powered by Supabase (our backend provider).

2) What We Collect

A. App data on your device (localStorage)

• What: templates, prompts, preferences, and (if you use local sign-in persistence) a session token reference.
• Where stored: locally in your browser (localStorage).
• Who can access it: only on the device/browser where you saved it, unless you export/copy it elsewhere.

B. Optional account & cloud sync via Supabase

• What: email address, password (hashed), name (if provided); authentication/session tokens; timestamps; and any app content you choose to store in the cloud (e.g., templates, saved prompts, settings).
• How collected: sign-up/sign-in forms handled by Supabase Auth; app interactions with our Supabase database/storage.
• Purpose: authenticate you; store and sync your selected content; troubleshoot and secure the service.
• Legal basis: Canada: implied/express consent and performance of a service you requested. EU/UK: GDPR Art. 6(1)(b) (contract) for account operations; Art. 6(1)(f) (legitimate interests) for security; Art. 6(1)(a) (consent) where required.

C. Email sign-up & communications

• What: your email address and (optionally) your name.
• How collected: our sign-up form; submissions are processed by our email service provider.
• Purpose: send newsletters, product updates, and educator resources; send essential service notices.
• Consent/legal basis: express consent (CASL). For EU/UK users, consent (GDPR Art. 6(1)(a)) for marketing and legitimate interests/contract for essential messages.

D. Hosting & security logs

• What: standard web logs (e.g., IP address, user agent, pages viewed, timestamps) collected by our host and by Supabase to operate and secure the site.
• Use: security, reliability, abuse prevention.

E. Third-party links you choose to open

We link to ChatGPT, Copilot, Google Docs, Notion, Canva, ESBPlanners, etc. Anything you enter there is governed by their policies and terms.

3) Sensitive Data & Student Information

AI Teacher Labs is for adult educators. Do not enter student names or other personally identifiable information (PII/PHI) into this app or any connected AI tool. If you are subject to FERPA (US) or other student-privacy laws, you are responsible for compliance.

4) How We Use Information

• Provide the app's core functionality (store your templates and settings on your device, or if you opt in, sync selected data via Supabase).
• Operate and secure the site (via hosting and Supabase logs).
• Send communications you requested (email subscriptions).

5) Cookies, localStorage & Auth Sessions

We use essential localStorage only (no advertising cookies). If you sign in, Supabase may set essential cookies or session storage to maintain your authenticated session. You can clear saved data any time via your browser settings.

6) Sharing & International Transfers

We do not sell your personal information. We share limited data with service providers solely to run the service:

• Supabase (authentication, database, storage, logs)
• Email service providers (email delivery/list management)
• Hosting providers (hosting/logs)

These providers may store/process data outside of Canada (e.g., in the United States or the region configured in our Supabase project).

7) Retention

• Local app data: remains on your device until you delete site data in your browser.
• Supabase account data: kept while your account is active. If you request deletion, we will delete or anonymize within a reasonable period, subject to legal/operational retention (e.g., abuse-prevention logs).
• Email list: retained until you unsubscribe or your address bounces; providers may keep limited logs for abuse prevention.

8) Security

Local data is only as secure as your device/browser. Cloud data (if you opt in) is stored in Supabase services with encryption in transit and at rest. We use access controls and role-based policies, but no system is 100% secure. Protect your device and password.

9) Your Rights

• Use the app without sign-in.
• Export or clear your local templates.
• Unsubscribe from emails at any time.
• Request access/correction/deletion of subscriber or account data by emailing education@shalabooks.com. You may also contact your local privacy authority (e.g., Office of the Privacy Commissioner of Canada).

10) Children

Our content and communications are intended for adults. We do not knowingly collect information from children.

11) Changes to this Policy

We may update this Policy. We will post the new effective date above and, if changes are material, provide additional notice (e.g., in-app banner or email).

12) Contact

Education by Shala Books Inc.
Email: education@shalabooks.com