Sketti Privacy Policy

Effective date: August 31, 2026. Last updated: August 31, 2026.

Company: Sketti, Inc., a Delaware corporation based in San Francisco, California (“Sketti,” “we,” “us”). Mailing address: 2261 Market Street #90683, San Francisco, CA 94114. Phone: (415) 349-0843.

Contact / privacy requests: privacy@sketti.ai (request form: sketti.ai/privacy-request). Sketti, Inc. is the operator of the Sketti service and the party responsible for the collection and use of personal information described in this policy, including personal information collected from children under 13 as described in Section 3.

This policy explains what we collect, how we use it, and your choices. Section 3 is our children’s privacy notice: it explains how we handle information about students, including children under 13, and the rights of parents, guardians, and schools. Capitalized terms not defined here have the meanings given in our Terms of Use.

1. Who this is for

Sketti is used by educators - classroom teachers, private tutors, and homeschooling parents/guardians (“you”) - to teach students. Because lessons may involve minors, this policy describes how we handle student data and the responsibilities you hold as the educator. How consent works depends on which of these roles you are using Sketti in (see Section 3). Sketti is offered only in the United States and is not directed to users outside the United States.

2. What we collect

Account data: name, email, and - for teacher accounts - school/institution and eligibility attestation, together with, where we use a third-party verification service, the result of that verification

Lesson data: the audio and/or transcript of what is spoken during a lesson, and any materials, topics, or context you provide as Inputs. We process lesson audio in real time to generate the transcript and do not store it - see Section 6. Lesson audio and transcripts may include the voice and spoken contributions of students, including children under 13. Where a student’s name or other identifying information is spoken during a lesson, it is handled as student personal information under Section 3.

Age signal: for each student an educator adds, whether the student is under 13 or 13 or over. We do not collect birthdates. On a tutor account we record that determination in the consent record so we can show the student was routed to the right consent path.

Educator-entered labels: the class or section name an educator enters before a lesson. These fields are meant for non-identifying labels and should not contain a student’s name; we ask educators not to enter student names or other identifying information here. If identifying information is entered anyway, we treat it as student personal information and protect it accordingly: it is not included in prompts sent to our providers or in generated Outputs, it is retained only while the account is active, and it is deleted on request as described in Sections 3 and 6.

Generated outputs: the visuals, explainers, and study guides Sketti produces.

Usage & performance data: how the service is used, timings, and diagnostics (e.g., latency logs). Diagnostic logs do not contain lesson audio or transcript text.

Payment data: paid plans are not available at launch. If and when they are, billing is handled by our payment processor (Stripe); we do not store full card numbers, and we receive from Stripe only the information needed to manage your subscription (for example, billing status and the last four digits of your card).

Parent consent records (tutor path): where a private tutor uses Sketti with a child under 13, we collect the parent’s or guardian’s name and email address and the information needed to verify consent (see Section 3(b)). We use a parent’s contact information only to provide notice, obtain and record consent, and honor the parent’s rights under Section 3(c).

We collect personal information directly from you, automatically as you use the service, from the schools or districts that authorize teacher use, from any teacher-verification service we may use, and from parents or guardians who respond to a consent request. We do not collect precise geolocation, persistent identifiers for behavioral advertising, or any information from students outside a lesson.

3. Students and minors - how consent works for each use

Lesson audio and transcripts may include the voices or contributions of students, including children under 13. Children do not create their own accounts; the adult educator holds the account and any required consents. You are responsible for having the authority and consents required by applicable law before using Sketti with students. Because the legal basis differs by role, we treat the two paths differently. In every path, we collect only the student personal information reasonably necessary to provide the lesson (the child’s voice as spoken and transcribed), we do not condition a child’s participation on providing more information than is necessary, and we do not use student personal information for targeted advertising, to build a student profile for any non-educational purpose, or to sell or rent to anyone.

(a) School / classroom-teacher use. When Sketti is used by a teacher for classroom instruction on behalf of a school or district, we act as a “school official” with a legitimate educational interest under FERPA and as the school’s service provider, processing student data under the school’s direction and control and only to provide the service to the school. Under COPPA, a school may authorize the collection of students’ personal information on parents’ behalf for the use and benefit of the school and for no other commercial purpose - and we rely on that school authorization only for that educational purpose. Before a teacher can use any part of Sketti with students, an administrator at the teacher’s school must approve that use. A teacher signs up with a school email address (personal and consumer email domains are not accepted) and verifies it, then identifies their school and provides the name, email address, and role of a school administrator who can authorize the use. We send that administrator, at their school email address, a description of what Sketti is, the data it processes, our school notice (the practices in this Section 3 and Sections 4 through 6), and links to this Privacy Policy and our Terms of Use, with an option to approve or decline. Until the administrator approves, the teacher cannot run a lesson with students, and Sketti does not process any lesson audio or transcript. We record each approval, including the text and document versions the administrator was shown and the outcome, and retain that record for the life of the account and for three years afterward. An administrator may withdraw the school’s approval at any time using the same link, which immediately ends the teacher’s access; we notify the teacher, stop further collection, and delete the school’s student data at the school’s direction. The school may review, and direct us to delete, student personal information collected through its teachers’ accounts, and may refuse to permit further collection, by contacting privacy@sketti.ai. Student data collected under a school authorization belongs to the school; we will not disclose it to anyone other than the school, the teacher, and the sub-processors listed in Section 5, and we will delete it at the school’s direction or at the end of our relationship with the school. If you are a teacher, you confirm that your school or district has authorized your use of Sketti, and you agree to stop using Sketti with students if that authorization is withdrawn. We do not use student personal information to build profiles or for any commercial purpose. Where a district requires it, we are prepared to enter into a district/state data-privacy agreement (DPA), including the Student Data Privacy Consortium (SDPC) National Data Privacy Agreement with the applicable state exhibit, and where a DPA conflicts with this policy the DPA controls for that school.

(b) Tutor and homeschool-parent use (no school involved). Here there is no school to provide consent, so:

A homeschooling parent/guardian is the child’s own parent and provides any required consent directly, as the account holder. When you create a homeschool account and before your first lesson, we give you the notice in this Section 3 and ask you to confirm that you are the parent or legal guardian of each child you teach with Sketti. You may withdraw that consent at any time as described in Section 3(c).

A private tutor is neither the child’s parent nor a school and cannot provide COPPA consent for another person’s child. Where a tutor uses Sketti with a child under 13, verifiable parental consent from that child’s parent or guardian is required. Because Sketti is the operator that collects the child’s information, we obtain that consent ourselves. A tutor must add each child under 13 to the tutor’s account and enter the parent’s or guardian’s name and email address. We then send the parent a direct notice describing what we collect, how we use it, and how consent may be withdrawn, and a link to our consent page. The parent gives consent using one of the following methods: (i) signing a consent form and returning it to us electronically; (ii) verifying a credit or debit card or other online payment method in connection with a transaction that generates a record; (iii) answering knowledge-based verification questions; or (iv) confirming identity by submitting a government-issued ID that we compare against available records and then promptly delete. Sketti will not allow a lesson to be recorded or transcribed for a child under 13 on a tutor account until a parent’s consent is recorded for that child, and until then the class or section label for that student is limited to non-identifying options we supply rather than free text. If we do not receive consent within 30 days of sending the notice, we delete the parent’s contact information and the child’s entry. The tutor remains responsible for identifying each child under 13 accurately and for not using Sketti with a child for whom consent has not been recorded. FERPA generally does not apply to a private tutor or a homeschooling parent acting on their own.

(c) Parent and guardian rights. If you are the parent or guardian of a child whose information we have collected on a tutor or homeschool account, you may at any time: review the personal information we hold about your child; direct us to delete it; and refuse to permit any further collection or use, which will end your child’s participation in Sketti lessons on that account. To exercise these rights, email privacy@sketti.ai from the address on file or use the link in any notice we send you; we will verify that you are the child’s parent before acting. Where the child’s information was collected under a school authorization, please direct your request to the school, which may review and delete the information through us. We will not retaliate against a child, parent, or educator for exercising these rights.

(d) Retention of children’s personal information. We collect children’s personal information (a child’s voice as spoken in a lesson and its transcript) for one purpose: to transcribe the lesson and generate the educator’s visuals and study guides in real time. Our only business need to hold it is the time required to complete that processing, so we do not retain it afterward: audio is never stored, and transcripts are deleted on the schedule in Section 6. We never retain children’s personal information indefinitely. The specific deletion timeframes in Section 6 apply to children’s information collected under each path above.

(e) State student-privacy laws. Where Sketti is used for K-12 school purposes, we also comply with applicable state student-privacy laws (for example, California’s Student Online Personal Information Protection Act). Consistent with those laws, we do not use student information for targeted advertising, do not create a profile of a student except in furtherance of K-12 school purposes, do not sell or rent student information, and do not disclose it except as described in this policy.

(f) Recording notice. Sketti captures lesson audio only while a session is running and only when the educator starts it. Because state laws differ on notifying and obtaining consent from everyone whose voice may be captured, the educator is responsible for telling everyone present that Sketti is listening and for obtaining any consent their state requires before starting a session. Sketti shows an indicator while a session is active. See Section 8 of the Terms of Use.

4. How we use data

To provide the service: transcribe lessons, generate visuals and study guides, and deliver them to you.

To operate, secure, support, and improve the service.

To process payments and manage subscriptions.

To verify teacher eligibility (see the Terms).

To provide notice to, obtain consent from, and honor the rights of parents, guardians, and schools as described in Section 3.

To comply with law, enforce our Terms, and protect the rights and safety of users, students, and Sketti.

AI model training - what we do and don’t do. We do not use student audio, classroom transcripts, or other student personal information to train or fine-tune any AI models. Our AI and image providers, which we contract with directly, process this content only to generate the outputs for your lesson and are contractually restricted from using student personal information to train their models or for their own purposes. (Their short abuse-monitoring retention period is described in Section 6; speech-to-text is handled differently today, see Section 5.) To improve Sketti, we use only de-identified product signals - for example, which AI suggestions teachers approved or edited, and aggregate quality, reliability, performance, and latency metrics. These signals do not include lesson audio, transcript text, or a student’s name or voice, and we will not attempt to re-identify them. Any internal examples we keep to improve output quality are drawn from de-identified or synthetic material, not from real classroom transcripts. We also maintain an internal evaluation set of de-identified derivatives: reformatted examples of the kind of input a lesson produces and the kind of Output it should produce, from which names, voices, and other identifiers have been removed, and which cannot be used to reconstruct what was said in a lesson. We use that set to test and improve output quality. We do not use it, or anything else derived from student data, to train or fine-tune any AI model, and we will not attempt to re-identify it. Real lessons are retained only where an educator (and, on a tutor account, the child’s parent) has separately and expressly agreed in writing that they may be retained for evaluation; those lessons are stored separately, are deleted at the end of the agreed period, and are never used to train a model.

We do not use personal information for targeted or behavioral advertising, and we do not show third-party advertising in Sketti.

5. Who we share data with (sub-processors)

We use trusted service providers to run Sketti, and share only what’s needed. Each provider is permitted to use personal information only to provide its service to us, except as stated for speech-to-text. We name the current providers in each category on our sub-processor page at sketti.ai/subprocessors, which is the authoritative list and is kept up to date; the categories are:

Speech-to-text - live lesson audio is transcribed in real time by a third-party speech-recognition provider. Today this is the speech-recognition service built into your web browser (on Google Chrome, Google’s speech service; on other browsers, that browser vendor’s service). Your browser sends lesson audio directly to that provider; Sketti does not receive or store the audio. We do not have a contract with these browser vendors governing their handling of that audio, so their own privacy policies apply and we cannot make the no-training and no-retention commitments in Section 4 for this step. We tell you this so you can decide which browser to use; if we move to a speech-to-text provider under contract with us, it will process audio only to return the transcript, will not retain it or use it for training, and will be named on our sub-processor page.

AI/model providers - to generate language outputs and classifications.

Our image-generation provider - to produce the visuals for your lesson.

Hosting / application platform - base44.

Teacher verification - where a third-party verification service is used, it receives teacher account information only (no student information); we do not use one today, and any such provider would be named on our sub-processor page.

Payments - Stripe, if and when paid plans are offered (educator billing information only; no student information).

We require our sub-processors, by contract, to process student personal information only to provide their service to us, not to retain it beyond what is necessary, and not to use it to train their models (except the browser speech-recognition step described above). We contract for these restrictions directly with our providers. Where a request is mediated by our platform provider, we route calls that carry lesson audio or transcript content to providers we contract with directly, so these restrictions apply; we do not rely on the platform provider to pass them through. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We maintain a current named sub-processor list at sketti.ai/subprocessors and provide it on request and under any DPA.

We may also disclose personal information: to comply with law or a valid legal request; to protect the safety of a student or user or the security of the service; to a successor in a merger, acquisition, or sale of assets, who will be bound by this policy (and, for student data, by the applicable school authorization, parental consent, or DPA); and at your direction.

6. Retention and deletion

We keep data only as long as needed to provide the service, and minimize retention by default:

Lesson audio: processed transiently, in real time, to produce the transcript. Sketti does not record, store, or log audio. Audio is captured only while a session is running and only when the educator starts it. Transcription is performed by a third-party speech-recognition provider (see §5) whose own handling is governed by its terms.

Classroom transcripts: automatically deleted within 24 hours after the lesson ends from our active systems. Our purge clears the transcript itself rather than deleting the record, so it does not enter our platform provider’s recoverable-deletion window; where that platform retains prior values of a field in version history, those age out within 7 days. Transcript text sent to our AI/model providers to generate your Outputs is not used to train their models; under their standard commercial terms those providers may hold it for abuse monitoring for a short, fixed period (currently up to 30 days) and then delete it, except content flagged for a policy violation or where a longer period is legally required, which may be held longer. We will update this section if we move to a zero-retention arrangement with a provider.

Generated Outputs (study guides, visuals, explainers): retained while your account is active so you can revisit past lessons; the underlying raw transcript is not retained with them. You may delete Outputs at any time. Outputs are generated material and are designed not to contain student names; if an Output does contain a student’s personal information, it is subject to the deletion rights in Section 3. Educator-entered class or section labels are retained with the account on the same basis and are deleted with it.

Account data: retained while your account is active. Parent consent records, including the age determination for each student, are retained for as long as the child is on the account and for 3 years afterward so we can show that consent was obtained and that the student was routed correctly.

On deletion or account closure: we delete your Outputs and account data within 30 days from our active systems and from version history, except limited records we must retain to comply with law (e.g., payment/tax records and consent records). Infrastructure-level backups held by our hosting provider are not accessed or used for any purpose and are deleted on that provider’s schedule.

De-identified/aggregated product signals (which no longer identify you or your students) may be retained to improve the service.

Design-partner evaluation data: lessons retained with express written consent under Section 4 are kept only for the period stated in that consent (not more than 12 months), are stored separately from production data, and are deleted on request.

We honor school and district deletion requests and will certify deletion from our active systems and version history in writing on request. You may request deletion of your data at privacy@sketti.ai.

7. Your choices and rights

Depending on where you live, you have rights over your personal data. We honor the following rights for all U.S. users, whether or not a particular state law applies to you. These include the right to know/access the personal information we hold (including the categories we collect, the purposes, and the categories of third parties we share it with), to correct it, to delete it, to obtain a portable copy, and to opt out of the “sale” or “sharing” of personal information (we do not sell or share personal information as those terms are defined under U.S. state privacy laws, and we do not sell or share the personal information of anyone under 16). You also have the right not to receive discriminatory treatment for exercising these rights.

To exercise a right, contact privacy@sketti.ai or use the request form at sketti.ai/privacy-request. We will verify your request (usually by confirming control of the email address on your account) and respond within 45 days, extendable once by a further 45 days where reasonably necessary (we will tell you if we need more time). You may use an authorized agent, who must provide your signed permission, and you may appeal a decision by replying to our response within 45 days; we will answer your appeal within 45 days and, if we deny it, tell you how to contact your state attorney general. For student data processed on behalf of a school, requests are directed through the school as the controlling party. Parents’ and guardians’ rights over a child’s information are in Section 3(c).

California notice at collection. For California residents, the categories of personal information we collect are listed in Section 2 (identifiers; commercial information; internet or network activity; audio information; and, for children, the same categories as collected in a lesson), the purposes are in Section 4, the retention periods are in Section 6, and we do not sell or share personal information. Because we operate only in the United States, this policy does not address the GDPR or UK data protection law.

8. Security and breach notification

We use reasonable technical and organizational measures to protect data, including encryption in transit and at rest, access controls and logging limiting who can reach student data, and least-privilege access for our staff and sub-processors. No method of transmission or storage is perfectly secure, but we work to protect your and your students’ information.

Breach notification. If we discover a security breach affecting personal information, we will notify affected users - and, where the data was processed on behalf of a school or district, that school or district - as well as any authorities required by law, without undue delay and within the timeframes required by applicable state breach-notification law and any applicable data-privacy agreement. Specifically, we will notify an affected school or district within 72 hours after we confirm that a breach affecting its student data has occurred, and affected educators and parents without unreasonable delay and in no event later than 30 days after we confirm the breach, unless law enforcement asks us to delay. Our notice will describe what happened, the information involved, what we have done in response, and what you can do. We will cooperate to investigate, mitigate, and remediate.

9. Data location and transfers

Sketti is operated from the United States, and we process and store data in the United States. Some sub-processors may process limited data outside the U.S.; where that occurs, we require appropriate contractual safeguards and will identify the provider and location on our sub-processor list.

10. Changes to this policy

We may update this policy; material changes will be notified by email to the address on your account and by notice in the service at least 30 days before they take effect and take effect on the stated date. If a change would materially expand how we collect, use, or disclose children’s personal information, we will first obtain new consent from the school or parent, as applicable, and will not apply the change to information already collected without it.

11. Contact

Privacy questions or requests: privacy@sketti.ai, or by mail to Sketti, Inc., Attn: Privacy, 2261 Market Street #90683, San Francisco, CA 94114. Phone: (415) 349-0843