Privacy Policy for MyChamba
Last Updated: March 31, 2026
Speak Technologies Ltd ("we," "us," or "our") operates the MyChamba platform. We are committed to protecting your privacy and ensuring a secure experience. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services.
1. Information We Collect
We only collect the minimum amount of data necessary to provide our tutoring profile and management services:
- Authentication Data: When you "Log in with Google," we receive your email address and basic profile information (name) as provided by Google.
- Tutor Profile Information: Any information you voluntarily provide to build your profile, such as your bio, subjects taught, and experience.
- Student Account Data: When students sign up via an invite code provided by their tutor, we collect their email address and name, and link their account to the relevant tutor.
- Booking Data: Lesson booking details including dates, times, timezones, duration, and status (pending, approved, cancelled).
- Calendar Data: If you connect your Google Calendar, we store your Google email, OAuth tokens, and limited event data (start time, end time, and event description) from the calendars you select, in order to calculate your availability.
- Payment Information: We process subscription payments via a third-party processor (Stripe). We do not store any payment information or credit card details on our servers.
- Referral Data: If you use a referral link, we store the referral code and the relationship between referrer and referred user to calculate commissions.
- Usage Data: We collect information on how you interact with the app via Google Analytics and built-in Lovable/GPT Engineer analytics (e.g., page views, button clicks).
2. How We Use Your Information
- Authentication: To create and manage your account.
- Profile Services: To build a tutor profile that you can choose to share via a public link.
- Bookings: To facilitate lesson scheduling between tutors and students.
- Calendar Syncing: To calculate your availability, prevent double bookings, and automatically add confirmed lessons (optionally with Google Meet links) to your Google Calendar.
- Payments: To manage your subscription billing and unlock premium application features.
- Referrals: To track and attribute referral commissions.
- Transactional Emails: To send booking confirmations, cancellation notices, and account notifications.
- Improvement: To analyse app performance and user experience through analytics.
3. Google API Disclosure (Limited Use)
MyChamba requires access to your Google Calendar (if you choose to connect it) to synchronize your availability. Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- What we access: We read events from the calendars you explicitly mark as "blocking" to calculate when you are busy. We also create, update, or delete calendar events for lessons booked through MyChamba.
- What we store: We temporarily store Google event start/end times and descriptions in our database to quickly calculate your availability without constant API delays.
- We do not use your Google data for serving advertisements.
- We do not allow humans to read your Google user data unless we have your affirmative agreement for specific troubleshooting or security purposes.
4. Data Sharing and Third Parties
We do not sell your personal information. To provide our service, we share your data with the following essential service providers who act as data processors:
- Database & Authentication: We use Supabase (provided by Supabase Inc.) to securely store your account details and profile information.
- Data Residency: Your data is hosted on Supabase servers located within the European Union (EU) to ensure compliance with regional data protection standards.
- Payment Processing: We use Stripe to process subscription payments securely. Your payment details are sent directly to Stripe and governed by their privacy policy.
- Transactional Email: We use Mailjet (provided by Sinch/Mailgun Technologies) to send transactional emails such as booking confirmations, cancellation notices, and account notifications. Mailjet receives recipient email addresses and names solely for email delivery.
- Analytics: We use Google Analytics and Lovable Engineer to understand how users interact with the platform. These services process anonymized usage data.
- Public Profiles: If you choose to share your public tutor link, the information you included in your profile will be visible to those who access the link.
5. Data Security, Retention and Deletion
We implement industry-standard security measures to protect your data. By using Supabase with Row Level Security (RLS), we ensure that your private data is only accessible to you and authorized processes. All data is encrypted both in transit (via TLS) and at rest.
- Account Deletion: You may delete your account at any time within the app settings. When you delete your account, any active Stripe subscriptions are automatically cancelled before your personal data is permanently removed from our active databases.
- Inactivity: To keep our systems clean, we retain user information for a period of 5 years from your last login. If you do not log in within this 5-year window, your data will be automatically deleted.
6. Your GDPR Rights
If you are located in the European Union, you have the following rights:
- The right to access, update, or delete the information we have on you.
- The right of rectification (correcting inaccurate info).
- The right to object to or restrict our processing of your data.
- The right to data portability.
7. Contact Us
For any questions regarding this Privacy Policy or to exercise your data rights, please contact:
Speak Technologies Ltd
Email: help@mychamba.com
