Privacy Policy

Last Updated: August 2026

A quick note before we start:

We don't store your raw emails. We don't scan your inbox. We don't use your data to train AI models.

When you forward an email to our WhatsApp agent, it's processed in real-time and instantly discarded. We built this service for parents, by parents — and we treat your family's data the way we'd want ours treated.

 
1. What This Means For You (The Short Version)

• We never see your inbox. You only share what you explicitly forward.
• We don't store your emails. They are processed and immediately discarded.
• We don't train AI on your data. Your family's logistics stay private.
• We don't sell your data. Ever.
• WhatsApp (Meta) handles message delivery, but we don't control their infrastructure.

 
2. What Information Passes Through Our System

When you use the School Admin Triage Pass, two types of information are temporarily processed:

• Message Content: The raw text, screenshots, or media of the school communications you forward to our WhatsApp agent. This is processed in real-time and not retained in our databases.
• Account & Usage Metadata: Your email address, Order ID, and WhatsApp identifier (phone number or Scoped User ID). To maintain system performance and enforce our Fair Use Policy, we also record usage volume metrics (e.g., total message counts and request timestamps).

 
3. How Your Messages Are Processed (Zero-Storage Pass-Through)

When you forward an email, it passes through a secure pipeline:

1. WhatsApp sends the message to our secure gateway.
2. Our automation handler processes the request in real-time. Message content is explicitly excluded from execution logs.
3. Gemini AI (our primary engine) or DeepSeek AI (our backup engine) generates your 3-line brief via a secure API.
4. We verify your account is active.
5. Your brief is sent back to you via WhatsApp.

Your raw email is never stored in our databases. It is processed, used to generate your brief, and then discarded.

 
3.1 WhatsApp & Meta Platform Disclaimer

Bite-Size Academy operates as an automated integration built on the WhatsApp platform. Messages sent to or received from our service pass through Meta's network and are subject to WhatsApp's Terms of Service and Privacy Policy.

While we do not store your raw email content, chat histories may remain stored locally on your device and within Meta's cloud backups according to your personal WhatsApp settings. We have no control over Meta's independent data handling.

 
4. How We Use AI (And Why Your Data is Safe)

We use Gemini (via Google Cloud's paid API) as our primary AI engine, with DeepSeek as a backup. Both are accessed through their paid enterprise APIs, not free consumer interfaces.

Gemini (Primary):

• No Model Training: Google does not use your prompts or responses to train its models on the paid Gemini API and Vertex AI.
• Encryption in Transit: When you submit prompts to Gemini, your data is encrypted in-transit.
• Stateless Processing: Gemini does not store your prompts or generated responses.
• Abuse Monitoring: Google may log prompts solely for abuse detection if suspicious activity is detected. This data is not used to train AI/ML models and is stored securely for up to 90 days.

DeepSeek (Backup):

• No Model Training: Your personal emails are never used to train DeepSeek's AI models.
• Retention: DeepSeek retains API inputs for a limited period solely for security and debugging, after which inputs are permanently purged.

Both providers are governed by strict commercial terms that protect your data and prohibit its use for model training.

5. Data Anonymization for Product Improvement

To improve our system, we may occasionally retain anonymised snippets of forwarded text.

Before any text is saved, it passes through an automated redaction process. All Personally Identifiable Information (PII)—including phone numbers, email addresses, student names, and specific locations—is replaced with placeholders (e.g., [STUDENT NAME]). Only this anonymized, unrecognizable text is retained.

 
6. Third-Party Infrastructure Partners

We rely on trusted providers to run our service:

• Polar.sh: Handles checkout, payment processing, and refunds. We never see or store your credit card details.
• Gemini (Google Cloud): Delivers primary AI summarization via secure API.
  DeepSeek: Provides backup AI summarization via secure API.
• Meta / WhatsApp: Manages messaging delivery.
• Cloud Hosting: Hosts our application routing and access databases.

 
7. Cookies and Tracking Technologies (Future)

Currently, our website does not use cookies or tracking for analytics or marketing. If we introduce these in the future, we will update this policy and implement a Cookie Consent banner to give you control over your preferences.

 
8. Children's Data (COPPA Compliance)

Our service is designed for parents and guardians, not for children. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

 
9. Your Rights

You have the right to request deletion of your account metadata (phone number, email address) from our active database at any time. Email us at support@bite-size.academy and we will process your request within 30 days.

If you are located in the European Union, you also have the right to access, rectify, or request transfer of your data under GDPR. Contact us to exercise these rights.

 
10. Contact Us

If you have any questions about how your data is handled, email us at support@bite-size.academy. We're built by parents, for parents, and we're always happy to explain how we keep your family's data safe.