Privacy Policy
Status
MENTO is a free, non-commercial hackathon prototype. This page is a draft in plain language; it is not legal advice and does not claim legal compliance. It needs review by the project owner and counsel before any real deployment.
Who is responsible
ONIGIRI BENTO (hackathon team). Legal name, address and grievance contact: [TO BE CONFIRMED BY PROJECT OWNER]. Contact: [AUTHORISED CONTACT METHOD — NOT YET SUPPLIED].
What we collect and why
Masters: name, username and a password (stored only as a salted hash), video and audio of their work, typed or spoken answers and edits, and any manual they upload. Students: periodic camera snapshots during practice, questions typed to the master, and which lessons an anonymous device marked as learned. No names are needed from students.
How it is processed
Data is stored on the operator's own computer in a private folder and shown only through short-lived signed links. The operator has turned on hybrid AI: to improve accuracy, some processing is done by cloud AI services — Google Gemini (gemini-3.5-flash). Sent: still frames from recordings and student practice photos; text: descriptions of what the footage shows, the master's typed or transcribed answers, approved records, student questions and manual excerpts. Not sent: names, accounts, passwords or full videos. Read-aloud voices run locally. If a cloud service fails, the local models are used instead where they are installed. Google Gemini is used on its free tier: under its terms, the provider may use what it receives to improve its products, and people at the provider may review it. Please do not record anything confidential.
Consent
Before any camera or microphone use you must tick an unticked consent box on your own device. Consent covers recording and analysis for the session only. No use for model training or marketing.
Retention and deletion
Sessions are deleted automatically after the operator's retention period (default 30 days). Masters can delete recordings, questions, knowledge records and help requests; these stay in "Recently deleted" for 7 days so mistakes can be undone, then are removed for good. A whole session can be deleted at once.
Security
Private storage, personal master accounts that see only their own sessions, time-limited invitations, signed expiring media links, rate limits, input limits and no analytics. No system is perfectly secure; operators must handle incidents and notify affected people where the law requires.
Cross-border processing
Yes, for the hybrid AI described above: the cloud AI providers may process the data outside your country (for example in the United States). A tunnel service used for remote access also carries encrypted traffic through its servers.
Your rights
Ask the operator to access, correct or delete your data or to withdraw consent. Withdrawing consent stops further recording; it does not undo lawful processing already done.
AI limitations
AI questions, drafts and photo checks come from sampled still images, the master's words and approved records. They can be wrong, cannot see hidden defects, and are not a certification or safety inspection.