Privacy during the Netah Board pilot

When you sign in with Google, we receive basic account information such as your email address, display name, profile image, and the identifiers needed to maintain your session.

We store the projects, board structures, connections, notes, and files that you choose to add. We may also retain limited operational and security information needed to run, protect, and troubleshoot the service.

We use this information to provide the board, file storage, collaboration, sharing, account security, and support. We do not sell project content or personal information for advertising.

The private application workspace does not contain third-party advertising. If that approach ever changes, this policy and the product will be updated before the change takes effect.

AI analysis is optional and can be disabled by the project owner. Uploading a file, or typing a thought onto a board, does not automatically send anything to an AI provider.

Two kinds of content can be sent, and only when a user deliberately selects them and asks. Selecting files and requesting analysis sends those file contents and the focus question to OpenAI to generate a source-grounded response. Selecting thoughts—the text a user has typed onto nodes—sends that text to OpenAI to generate questions about their reasoning. Selecting both sends both, with the thoughts used as context for the analysis rather than as evidence.

Netah Board does not save the raw extraction, the selected thought text, or the generated response in its application database, although infrastructure and AI providers may process limited records under their own service terms and retention controls.

The board guide is separate and is not an AI feature. It reads a board's filenames, table structure, node text and connections on Netah Board's own servers to suggest things worth looking at, and sends none of that to OpenAI or any other AI provider.

Projects are private by default. A public viewing link exposes a read-only representation of the board but not the original private file downloads or editing controls.

Editor invitations require sign-in, are single-use, and expire. Project owners can revoke an unused invitation or remove a collaborator. Collaborators can change board content, so invite only people you trust.

Community participation is optional. If you make your profile discoverable, other signed-in members may see your display name and profile image and may send a connection request. Email addresses are not displayed. If you publish a project to Community, its title, description, board layout, node labels, and filenames are visible in a read-only view; original files, private metadata, and editing controls are excluded.

You can upload a profile picture. It replaces the image your sign-in provider supplied, which we keep so that removing your upload restores it. Uploaded pictures are resized on your device before being sent, stored privately, and shown only to signed-in members — never to visitors who are not signed in, and never on a public address. Removing your picture deletes the stored file and stops it being served immediately. You can report another member's profile picture, and we can hide a picture from everyone while leaving the account otherwise unaffected.

Community reports are stored privately so we can review safety, abuse, copyright, and spam concerns. Blocking removes the community connection and hides the people involved from one another's community results.

Website subscriptions are processed by Stripe. Subscriptions purchased in the iOS app are processed by Apple. Netah Board receives signed transaction and subscription identifiers, status, plan, renewal timing, storefront or environment information, and the account reference needed to provide paid features and keep access current. Stripe or Apple receives and processes the payment details for the purchase; Netah Board does not store full card numbers or Apple Account payment credentials.

The pilot relies on service providers including Vercel for application hosting, Supabase for authentication, database and file storage, Google and Apple for sign-in, Apple for iOS subscription payments, Stripe for website subscription payments, and OpenAI only for deliberately requested AI analysis. These providers process information as necessary to deliver their part of the service.

Deleting a project moves it out of your active workspace and makes its files inaccessible. It is kept there, and can be restored, until you delete it permanently. Nothing removes it on a timer: we do not run a scheduled purge, so a deleted project stays until you act on it.

Permanent deletion is a separate, deliberate step from the deleted-projects list. It destroys the board, every uploaded file and its transcoded copies, the master table, observations, share links, collaborator access and the project's history. It cannot be undone and we cannot recover the material for you afterwards.

You can delete your account yourself, from the account page inside the app. That permanently deletes the account and every project you own, including any sitting in your deleted-projects list, together with their files, master tables, observations, share links and history. It cannot be undone.

Deleting a Netah Board account does not itself cancel a subscription billed by Apple or Stripe. The account page warns when a current billing relationship exists. Manage or cancel the subscription with the provider before deletion if you do not want it to renew.

Two things deliberately survive an account deletion, both unattributed. Work you contributed to other people’s projects stays with those projects, because deleting it would remove someone else’s material. Records of activity on other people’s projects, and any community reports you filed, are kept without naming you — the entry remains, the identity does not.

You can export your data yourself, at any time, on any plan. Any project you can open exports from the project list, and the account page exports everything you own in a single archive. An export contains the board, the master table, the project history and all file metadata, plus download links for the original files that remain valid for one hour. Export is never restricted by plan.

The current pilot is intended for adults and educator-supervised evaluation with non-sensitive material. It is not presently offered as a district-approved student-record system and should not be used to store grades, health information, disciplinary information, or other protected student records.

Children under 13 should not create accounts or use the pilot unless a future school agreement and appropriate consent process expressly permits it.

We use access controls, encrypted connections, private-by-default projects, and database-level row security. No online service can promise absolute security, so please report suspected problems promptly.

We may update this policy as the pilot develops. Material changes will be reflected on this page with a new effective date.