Privacy
Built like a teacher’s private notebook.
Last updated: May 2026 · v1 (alpha)
Plain English first, lawyer language second. Greta is a personal tool teachers buy for themselves. Your notes are yours. We’ll never sell student context, train models on your data, or hand it to anyone you didn’t direct it to.
The five commitments
- Recording is a button.Greta only listens when you press record. There is no ambient mic, no background capture, no “always-on” mode.
- Drafts stay drafts. Nothing leaves Greta — no email, no parent message, no shared document — until you click send. You review every draft.
- No ads. Ever. Student context will never be used for advertising or sold to anyone, full stop.
- No model training.Your notes, voice memos, and drafts are not used to train AI models. Anthropic, our LLM provider, contractually doesn’t train on API inputs from us.
- Export and hard delete.Download your full record at any time. Hit delete and it’s gone — from primary storage within 24 hours, from backups within 30 days.
What we collect
From you, the teacher
- Email address and password (for login)
- Optional: grade band, school name (so Greta can write in your context)
- Voice memos and text notes you record
- Drafts Greta generates for you
- Photos you capture of student work (only if you opt in per kid)
- Optional connector reads you approve, such as Gmail sent-message style signals, Microsoft connector status, or Google Drive documents you choose to summarize
About students
Only what you tell Greta. Greta’s schema actively rejects sensitive fields:
- No Social Security Numbers
- No full dates of birth (month + day only, for the birthday card)
- No government IDs or student ID numbers
- No free-text medical diagnoses (use your district’s SIS for that)
- No financial information
Greta is for the kind of context teachers already keep in personal notebooks: who needs a gentle check-in, who had a breakthrough, what to mention at conferences.
How we use it
- To run Greta for you — turning your voice memos into kid cards, drafting emails, generating sub binders, and surfacing context when you ask.
- To send you the product emails you opt into (weekly summaries, conference reminders). Never marketing emails about other products.
- To improve Greta’s reliability and prevent abuse (anonymous error logs, no content).
We do not use it to train AI models, sell to advertisers, share with data brokers, or hand to law enforcement absent a valid court order.
Who we share it with
- Anthropic — provides the Claude model that drafts your emails. Inputs and outputs are not retained for training; Anthropic deletes API content within 30 days.
- OpenAI — provides Whisper for voice transcription only. Audio is processed and discarded.
- Convex — our database and backend host. Data stored encrypted at rest in US data centers.
- Vercel — hosts the web app.
- Stripe— processes payments. Stripe sees your billing info; we don’t store card numbers.
- Resend — delivers product emails to you.
- Composio — manages optional Gmail, Google Calendar, Google Drive, Outlook, and OneDrive connections when you choose to connect them. Greta uses those permissions only for the connector action you request.
Each provider is contractually bound to handle data only for the service we use them for. We don’t share your data with marketing networks, analytics resellers, or anyone else.
Optional connectors
You can use Greta fully without connecting Gmail, Calendar, Drive, Outlook, or OneDrive. If you do connect them, Greta reads only the context you ask it to read. Conference calendar events and invite emails are created or sent only after explicit teacher confirmation. Connector actions are logged so you can see what Greta accessed or changed.
- Gmail sent mail: used to learn your parent-email writing style. Greta stores a compact style summary, not raw email bodies by default.
- Gmail thread context: used only when you ask Greta to read a specific parent thread for drafting context.
- Google Drive: used only for folders or files you choose to list or summarize.
- Google Calendar: used to import conference events and, when you confirm, create conference events managed from Greta.
- Outlook: connected for account context and future teacher-approved invite sending after Greta pins the exact Composio tool and review flow.
- OneDrive: connected as a read-only account foundation. OneDrive file reads should be enabled only after Greta pins the exact Composio tool and review flow.
You can disconnect a connector at any time. When you disconnect, you can keep what Greta already learned as archived context or ask Greta to forget connector-derived summaries where possible.
Where it lives
US-based servers, encrypted at rest (AES-256) and in transit (TLS 1.3). Authentication via Better-Auth with bcrypt-hashed passwords. We don’t store payment card details — Stripe does that.
How long we keep it
- While your account is active: as long as you keep it.
- After account deletion: deleted from primary storage within 24 hours, from encrypted backups within 30 days.
- Anonymous error logs: 90 days.
- Billing records (legal requirement): 7 years.
Your rights
- Export everything as JSON or PDF, anytime, from Settings → Export.
- Delete any kid, any note, any draft, anytime.
- Delete your whole account — irreversibly — from Settings → Account.
- Email privacy@teachgreta.comwith any question and we’ll answer within 5 business days.
California, EU, and UK residents have additional rights (access, rectification, portability, objection). Email us and we’ll honor them within the legally required timeframes.
Children
Greta is for teachers, not students. We don’t collect data directly from children. The notes teachers keep about students in Greta are the teacher’s own observational records — see our FERPA page for the full picture.
Changes
If we change anything material, we’ll email you and update the date at the top of this page. We won’t apply changes retroactively to data we already hold.
Contact
Privacy questions: privacy@teachgreta.com. General: hello@teachgreta.com.