Privacy Policy
Last updated 27 October 2026
The short version.
- We keep what you need to learn: your questions, your boards and the material you give us.
- We send your questions to AI providers so they can be answered. We do not sell your data or show you ads.
- You can delete your account and everything in it from your profile page, any time.
Who we are
Chalkie (chalkie.in) is operated by Kush Agarwal, an individual based in India. Chalkie is currently in private beta. For anything about your data, write to founder@chalkie.in. This address is also our grievance contact under India's Digital Personal Data Protection Act, 2023.
What we collect
- An account identifier. Every browser gets an anonymous account on its first visit, so your notebooks are yours from the start. No name or email is needed to use Chalkie.
- Sign-in details, if you choose to sign in with Google: your email address, name and profile picture, as Google provides them.
- What you ask and make: your questions (typed or spoken), the lessons drawn for you, your notebooks, quiz answers, and the preferences you tell Chalkie to remember, such as your exam or how you like things explained.
- Material you add to a notebook: files, notes, links and topics. The text taken from them is stored with your notebook so Chalkie can search it when it teaches you.
- Photos and drawings you send: a photographed question, or the part of the board you circle. These are sent to an AI model to be read and are not kept afterwards.
- Voice: when you use voice mode, your recording is sent to be transcribed into text and is not kept. Chalkie's own voice is generated inside your browser.
- Waitlist: if you request access, your email address and the role you picked.
- Technical data: your IP address and basic request logs, used to keep the service running and to stop abuse (for example, rate limits).
Cookies and storage
Chalkie uses only the cookies it needs to work: one that keeps you signed in to your account, and one that remembers you entered a beta access code. Both are HttpOnly, which means scripts on the page cannot read them. Your browser also keeps a copy of your boards, drawings and pictures so they load quickly. We use no advertising or tracking cookies and no third-party analytics.
Who we share it with
We share data only with the services Chalkie needs to work, and only the part each one needs:
- AI model providers (OpenRouter and Groq) receive your questions, relevant passages from your notebook, photos you send and voice recordings, so they can be answered or transcribed.
- Tavily fetches the web pages and topics you add to a notebook.
- Image sources (Wikimedia Commons, Openverse, Pexels, Unsplash and web image search) receive short search phrases about the topic being taught, never anything about you.
- Microsoft Azure hosts Chalkie's server and database in India.
- Google, only if you choose to sign in with Google.
Some of these providers process data outside India. We never sell your personal data, and we never share it for advertising.
How long we keep it
- Your account, notebooks and history are kept until you delete them, or your account.
- A sign-in session ends after 180 days without use.
- Server backups are kept for 14 days, then deleted.
- Waitlist emails are kept until you get access or ask us to remove them.
Your choices and rights
- Delete everything: your profile page has a button that deletes your account and everything in it. You can also delete single notebooks and remembered preferences.
- See, correct or remove your data, or withdraw your consent: email us and we will do it within 30 days.
- You can use Chalkie without giving us your name or email.
Children
Chalkie is built for students, including school students. If you are under 18, please use Chalkie with a parent's or guardian's permission. We do not use anyone's data for advertising or behavioural tracking, and a parent can ask us at any time to delete a child's data.
Security
Everything travels over HTTPS. Session tokens are stored only as hashes. The database is not reachable from the internet, and access to the server is limited to its operator. No system is perfectly secure; if we ever learn of a breach that affects you, we will tell you and the authorities as the law requires.
Changes
If we change this policy, we will update the date at the top. If the change is significant, we will say so on the site before it takes effect.