Tellmate privacy policy

Last updated 29 October 2026.

Tellmate is a shared calendar for a class: classmates post what a teacher announced, and the class settles the day together. Made by BeeBoyD (Dan, Bucharest, Romania). Questions: support@beeboyd.com.

This is a demo for the High School Innovation Challenge, not yet open to real classes. The demo class is made up.

What we keep

• Your account: your email (and your password, hashed), or the id and email Google or Discord sends. The name and photo they send are never shown to anyone. With it, your settings and your setup (subjects and timetable), so they follow you to your other devices.
• Your class: its name, join code and week of lessons; each member's nickname (the only thing classmates see of you) and whether they are an admin; the events posted (the kind, the subject, the chapters, the days on the table and the day the class settled on), who posted each one and whether it was typed, a photo or filled in by hand; votes, flags, reactions, and abuse reports for the class's admins. Never the text of a post, never a photo.
• AI use: when, for which class, which model, how many tokens and what it cost. For ten minutes, what the model read, so the same post isn't read twice.
• Against abuse: a scrambled (hashed) form of your IP address, for one day, to limit how often one connection can join classes, open a teacher's link or ask to delete an account.
• Only on your device: a copy of your class's calendar so it works offline, the reminders your phone schedules, and on a phone the app lock's PIN, in the phone's secure storage.

The AI

When you post, the post goes to an AI model that picks out the kind, the subject and the day. The model never sets a date: the app works that out from the class's timetable.

• What goes: the text you typed or said, with phone numbers and email addresses taken out first, plus the class's subject names. If you add a photo of the board or a note, the photo goes too, shrunk to at most 1280 pixels on its long side. Nothing can be taken out of a photo, so photograph only what the teacher wrote.
• Where: our server (a Supabase Edge Function, EU) sends it to OpenRouter (US), which passes it to a company running Anthropic's Claude Haiku 5.5 (Anthropic itself, or Amazon's or Google's cloud). If that fails, it goes to Amazon Web Services in Frankfurt, to Claude Haiku 4.5.
• What stays: only what the model read (a test, maths, Thursday), as the event. The text is never stored. The photo is read in memory and never stored, on our server or in the app: the copies the phone makes while shrinking it are deleted straight away.

Saying it instead of typing

On a phone you can say a post instead of typing it. The phone turns your voice into text on the phone itself (iPhones that can do it without Apple's servers, Android 13 and newer): nothing is recorded and no audio leaves the phone. Only the text goes on, as above. The website has no voice input, because browsers send the audio to Google or Apple.

Crash reports and anonymous counts

Both are in Settings → Privacy and data.

• Crash reports go to Sentry, in its EU region (Frankfurt). On unless you switch them off. A report holds the error and the app's version: no account, no IP address from the app, no log lines, no tracking of what you did.
• Anonymous counts of which screens get opened go to our own GoatCounter server in the EU, with no cookies. Off until you switch them on. A count carries the screen's address and nothing else: no id, nothing you typed.

Who sees what

• Your classmates: the class's events and the members' nicknames. Nobody outside the class.
• A teacher with the class's link (an admin makes it): how many tests, homework and projects fall on each day, by subject. Counts only: no names, no posts.
• The services that run the app: Supabase (database and sign-in, EU), the AI services above, Sentry and GoatCounter (above), Google or Discord if you sign in with them, Cloudflare (the website, and visit counts on the landing page, with no cookies). The website's sign-in page loads Google's button from Google.

No ads. We never sell your data or give it to anyone else.

How long, and your rights

• As long as you keep your account. Close it on your account page (tap your name at the top of Settings): we email you a copy of everything it holds (a JSON file: your nickname, your classes, what you posted, your votes and settings), and 30 days later it's gone. Log in before then to keep it. Events you posted stay in the class, without your name.
• Any time, Settings → Privacy and data saves your setup to a file, and your class's calendar as an .ics file.
• An email that signs up and never confirms is deleted after 7 days.
• See, fix or delete your data in the app, or write to support@beeboyd.com. You can also complain to ANSPDCP (dataprotection.ro).

Age

In Romania you agree to an online service on your own from 16. Before real classes use Tellmate, younger students will need a parent's agreement, and there is no account under 13.