Privacy Policy
Last Updated: September 2, 2025
1. Introduction
Welcome to Menttor Labs ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered learning platform at https://menttor.live and related services.
By using our services, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Personal Information
- Email address (for account creation and communication)
- Display name (optional, for personalization)
- Authentication credentials (managed securely through Firebase)
- Phone number (if you choose phone authentication)
2.2 Learning Data
- Learning roadmaps you create or adopt
- Progress through courses, modules, and subtopics
- Quiz attempts, scores, and performance metrics
- Practice session data and question responses
- Time spent on learning activities
- Learning preferences and goals
2.3 Behavioral and Analytics Data
- Session duration and activity patterns
- Page views and navigation patterns
- Feature usage and interaction data
- Learning streaks and gamification metrics (XP, levels)
- Device and browser information
- IP address (anonymized for analytics)
2.4 Content Data
- AI-generated learning content you create or save
- Shared learning materials and public content
- Custom practice sessions and configurations
3. How We Use Your Information
- Personalization: Create customized learning experiences and recommendations
- Progress Tracking: Monitor and display your learning progress and achievements
- Content Generation: Use AI to create relevant learning materials based on your goals
- Platform Improvement: Analyze usage patterns to enhance our services
- Communication: Send important updates about your account or our services
- Security: Detect and prevent fraud, abuse, and security issues
- Legal Compliance: Meet our legal obligations and enforce our terms
4. Information Sharing and Disclosure
4.1 Third-Party Services
We work with trusted third-party services to provide our platform:
- Firebase (Google): Authentication and user management
- Google Vertex AI: AI content generation (data is processed securely)
- Vercel Analytics: Website performance and usage analytics
- Google Analytics: Anonymized usage statistics
4.2 Data Protection
We do not sell, trade, or rent your personal information to third parties. We only share data when:
- Required by law or legal process
- Necessary to protect our rights or safety
- You explicitly consent to sharing
- For processing by trusted service providers under strict data protection agreements
5. Data Security
We implement industry-standard security measures to protect your information:
- Encrypted data transmission (HTTPS/TLS)
- Secure database storage with access controls
- Regular security updates and monitoring
- Firebase's enterprise-grade authentication security
- Input validation and sanitization
- Regular security audits and vulnerability assessments
6. Cookies and Tracking
We use cookies and similar technologies to enhance your experience:
- Essential Cookies: Required for authentication and core functionality
- Analytics Cookies: Help us understand how you use our platform
- Preference Cookies: Remember your theme and interface preferences
You can control cookies through your browser settings, though disabling essential cookies may limit platform functionality.
7. Your Rights and Choices
7.1 Data Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete information
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to certain types of data processing
7.2 Account Controls
- Update your profile and preferences in your account settings
- Control sharing of your learning content
- Manage notification preferences
- Delete your account and associated data
8. Data Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:
- Account Data: Until you delete your account or request deletion
- Learning Progress: Maintained to preserve your educational journey
- Analytics Data: Aggregated and anonymized data may be retained longer for platform improvement
- Legal Requirements: Some data may be retained to comply with legal obligations
9. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
For users between 13-18, we recommend parental guidance when using our platform.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable laws, including GDPR adequacy decisions and standard contractual clauses.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services after such modifications constitutes acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
13. Specific Data Practices
13.1 AI Content Generation
When you create learning roadmaps or practice sessions, we use Google Vertex AI to generate personalized educational content. Your learning goals and preferences are processed to create relevant materials, but this data is not stored by Google beyond the processing period.
13.2 Behavioral Learning System
We track your learning behavior to optimize your educational experience, including:
- Learning streaks and consistency patterns
- Optimal learning time windows
- Focus session tracking
- XP and gamification progress
- Concept mastery levels (ELO ratings)
13.3 Shared Content
If you choose to share learning content publicly, that content becomes available to other users. You can control the privacy settings of your content and revoke public access at any time.
14. Legal Basis for Processing (GDPR)
For users in the European Economic Area, our legal basis for processing personal data includes:
- Consent: When you agree to specific processing activities
- Contract Performance: To provide our educational services
- Legitimate Interest: To improve our platform and provide better learning experiences
- Legal Obligation: To comply with applicable laws and regulations
15. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising privacy rights
This privacy policy is designed to be transparent about our data practices while ensuring compliance with international privacy laws. If you have questions about any section, please don't hesitate to contact us.