Privacy,in plain words.

Reading is open, accounts are for AI and saved work

• Anyone can read every chapter on Zntext without an account.
• To ask Zntext AI, make quiz sets and flashcards, and keep your work, you sign in with a free student account: with Google, or with a one-time sign-in link we email you.

What we store

• Your email address, your name and the address of your profile photo, as Google shares them when you continue with Google. We only show your initials, never the photo.
• The sign-in tokens Google returns, which link your Google account to your Zntext account. We ask Google only for your basic profile and email address.
• If you sign in with an email link: your email address, and a one-time code for the link, which expires after 15 minutes.
• If username and password sign-in is offered and you use it: your username and a one-way hash of your password. We never store the password itself.
• Your Class, if you choose one (you can leave it empty), and the date and time a parent or guardian's agreement was ticked.
• Your work: your chats with Zntext AI (the latest 40 messages per chapter and study mode), your quiz sets with your answers, your flashcard decks with their review schedule, and your last six opened chapters.
• Your sign-in sessions: when each started and when it expires, plus the IP address and the browser and device description (user agent) of the device that signed in.
• The day you last used Zntext, updated at most once a day.
• A daily count of your Zntext AI requests, kept under your account.
• A daily count of Zntext AI requests per network, kept under a salted one-way hash of the IP address that can't be turned back into the address. It stops one network from creating many accounts to get around the limit.
• Short-lived counters that slow down bursts of requests: AI requests under your account, and search requests and failed admin sign-ins under the same salted hash.
• Counters of requests to our sign-in service, kept per IP address and sign-in step (a count and the time of the last request), to stop people flooding inboxes with sign-in links or guessing sign-ins.

Why we store it

• Your email address and sign-in details: to sign you in and keep one account apart from another.
• Your name: to show it, and your initials, in your account.
• Your Class: so Zntext knows which Class you study in.
• The consent time: to record that a parent or guardian agreed before the account was used.
• Your work: so your chats, quizzes, cards and recent chapters are there on any device you sign in on.
• Sessions, IP address and device description: to keep you signed in, to let you sign out, and to spot misuse of your account.
• The counters: to apply the daily AI limit and keep the service running for everyone.
• The day you last used Zntext: to delete accounts that haven't been used for 12 months.
• We use this data only to run Zntext for you.

What we don't do

• No ads, and no advertising or tracking cookies.
• No tracking across other sites, no analytics profiles and no profiling. We don't make automated decisions about you.
• We don't sell your data or share it with advertisers.
• We don't ask for your phone number, address, school or date of birth.
• We don't store the content of public API, markdown or MCP requests, such as search terms or chapter ids.

Cookies

• Only sign-in cookies: one that keeps you signed in, a short-lived signed copy of your session that saves a database lookup on each page, and temporary ones used during sign-in.
• The admin panel has its own sign-in cookie, which only the Zntext team uses.
• The question paper tool at /qma sets one more cookie, `qma_guest`, which holds a random id for the credits on that browser (kept for a year), and its admin panel has its own sign-in cookie.

On your device

• Your browser keeps a copy of your own chats and practice, plus the id of the last account signed in on it, so pages load faster and your work opens offline. The copy is stored under your account, so another student who signs in on the same phone doesn't see it.
• Signing out, or deleting your account, removes every piece of Zntext data from the browser.
• Chats, practice and recent chapters saved on a device before accounts existed stay on that device until you sign in. Zntext then asks whether to add them to your account. If they aren't yours, choose "Not mine, discard" and they are deleted from the device.

Where it is kept

• Your account and your work are stored in our Postgres database, hosted by Neon.
• The website and its servers run on Vercel.
• Both work on our behalf, and their servers can be outside Bangladesh.

How long we keep it

• Accounts that aren't used for 12 months are deleted automatically, with everything in them.
• You can delete your account at any time from the Account page. Deletion is immediate and removes your chats, quiz sets, flashcards, recent chapters, sessions and the AI counters kept under your account.
• You can download everything we hold about you at any time from the Account page, as one JSON file.
• Starting a new chat deletes the old one. Signing out ends the session on that device. Sessions expire after 30 days without use (password sign-ins after a day, or when the browser closes) and are deleted within a day of expiring, with their IP address and device description.
• Unused email sign-in codes are deleted within a day of expiring.
• The per-network counters are not linked to your account and are deleted within a few days. To stop sign-in emails being sent too often, we also count them per address under a hash of the email address, deleted within a few days. The sign-in service's counters are deleted within two days of the last request.
• Deleted data can stay in our database provider's restore history for a limited time before it is overwritten.

Parent or guardian consent

• Zntext is made for school students, and most of them are under 18.
• Before an account can use Zntext AI or save work, the student ticks a box that says: "A parent or guardian knows I'm using Zntext and agrees to it." We store the date and time it was ticked.
• We can't check who ticked the box. It is a first step, not a verified consent process. We are having it reviewed by a lawyer and will update this page if the process changes.
• A parent or guardian can ask us to delete a child's account by writing to the contact address below, or can delete it from the Account page while signed in.

Zntext AI

• When you send a message, that message, the earlier messages in the same chat and the chapter's study material are sent to our AI provider to write the answer. A quiz set or flashcard batch sends the chapter's study material and the settings you chose.
• Your name, email address and account details are not sent to the AI provider. It processes the requests under its own terms and privacy policy.
• Please don't type personal details (your full name, phone number, address or passwords) into the chat.

Question papers for teachers (/qma)

• Anyone can build and print question papers at /qma without an account. Papers are saved only in your browser.
• Writing questions with Zntext AI uses credits, which come from redeem codes. Without signing in, credits belong to that browser under a random id in the `qma_guest` cookie; clearing the browser loses them. If you sign in with your Zntext account, credits are kept under your account, and credits on the browser move to it.
• We store your credit balance and its history (codes redeemed, questions requested and delivered, credits used and refunded, with the chapter id and time). For signed-in teachers we also keep a copy of the name and email address on your Zntext account, so we can help with your credits. Redeem attempts and requests are rate-limited with counters kept under a salted one-way hash of the IP address, deleted within a few days.
• Generating questions sends the chapter's study material and your settings (how many questions of each type, difficulty, chosen sections, and the questions already in your paper, so they aren't repeated) to our AI provider. Changing questions with Zntext AI (rewrite, easier, harder, better options, another like this) sends the chosen questions and the chapter's study material. Your name and email address are not sent.
• Checking OMR answer sheets happens entirely in your browser: photos are read on your device and never uploaded. The results (each sheet's roll number, set, chosen answers and score) are saved only in that browser, until you delete them on the OMR page or clear the browser's data.
• If you change the tool's accessibility settings (text size, high contrast, reduce motion, larger Bangla text), they are saved only in that browser and are never sent to us.
• Deleting your Zntext account deletes your credits and their history. Guest credits are not linked to a person.

Who else processes data

• Google: signs you in when you choose "Continue with Google", and shares your name, email address and profile photo address with us.
• Resend: sends sign-in link emails, so it receives your email address and the link.
• Vercel: hosts the website and keeps short-lived technical logs.
• Neon: hosts our database, where your account and work are stored.
• Our AI provider: writes Zntext AI answers from your messages and the chapter's material.

Public context API, markdown URLs and MCP server

• These read-only surfaces need no account.
• Optional AI endpoints for other apps are off unless we switch them on. When they are on, they need no account and count towards a daily limit per network, kept under the salted hash above.

Hosting and error logs

• Our hosting provider keeps standard, short-lived technical logs (such as IP address, time and URL) for security and reliability.
• When something breaks, we log the error with the time and the address that failed (which can include a search term in the URL), but no IP address, account details or chat text.
• When an AI app reads chapters through our public API, markdown links or MCP server, we log which address or tool it used, the chapter, class or subject and the pages or sections it asked for, how much text was sent, how long it took and the kind of AI app (for example ChatGPT or Claude, taken from the app's name or browser identifier). These lines never contain search words, quotations, IP addresses or account details.

Custom GPTs and other AI apps

When you use Zntext from ChatGPT, Claude or another AI app, that app's own privacy policy also applies to your conversation. Zntext only receives the requests the app sends to it.

Your choices

• See and download your data: Account page, "Download my data".
• Change your Class: Account page.
• Delete your account and everything in it: Account page, "Delete my account".
• Withdraw consent: delete the account, or ask us to.
• Anything else, including a question about a child's account: write to the contact address below.

Changes

If the way we handle data changes, we update this page and the date at the top.

Contact

Questions: privacy@<your-domain>