Privacy Policy

Cai Comments is built privacy-first. This policy covers two places your information can live: the Cai Comments app that runs on your Mac, and this website (caicomments.com), where you create an account, obtain a licence, and download the app.

On your device — the Cai Comments app

1. Our privacy commitment

Cai Comments is built privacy-first. It is designed to work fully offline so that the sensitive information you record about students stays under your control.

2. Data stored on your device

All of your data — classes, students, notes, generated comments, and settings — is stored locally on your device. It is not stored on our servers because the app itself has no servers.

3. No collection or transmission

In its default, fully-local configuration, the app does not collect, transmit, sell, or share any of your data with us or any third party.

4. Student information

Information you enter about students is provided and controlled by you. You act as the data controller for that information and are responsible for handling it in line with your school's policies and applicable law.

5. On-device AI processing

Classification, transcription cleanup, question answering, and comment generation are performed by an AI model running on your device. The text being processed does not leave your device for these tasks.

6. Optional Connected AI

If you turn on Connected AI and supply your own subscription or API key, the relevant text is sent to that external provider so it can generate a response. That data is then handled under the provider's privacy policy, outside our control. This feature is off by default.

7. Microphone & voice notes

Voice notes are recorded only while you are actively recording and are converted to text on your device. The audio is processed locally for transcription and is not uploaded anywhere by the app.

8. No tracking or analytics

The app contains no advertising, no third-party trackers, and no usage analytics.

9. Deleting your data

You can remove individual notes, students, and classes at any time, or erase everything at once using "Delete All Data" in Settings. Deletion is permanent and cannot be undone.

On this website — your account & licence

To sell you a licence and deliver the app, this website runs a small account system. This is separate from the offline app, and it never handles your students' data. If your licence is a school or business licence, the licence holder can create additional logins (an email and password per team member); those are ordinary accounts covered by this policy.

10. What we collect, and why

When you create an account and place an order, we store only what's needed to run your account and licence:

• Your account email — to identify your account, verify it, and send you your download and licence.
• Your name — only if you choose to provide it.
• A securely hashed password — we store a one-way hash, never your actual password.
• Your order details — the product and status of your order, so we can approve it and grant your licence.
• Device details for your licence seats — when you sign in on a device, the app sends a device fingerprint plus basic device details (operating system and device name), and we record that sign-in's IP address. We use these only to manage and identify the devices your licence is active on — for example, for a school's shared licence. They are captured at sign-in only; we do not continuously track your device, and the app's periodic licence check sends nothing new.

11. Email

We send transactional emails — email verification, password resets, and order approval — through our email provider (Resend), acting on our behalf. We do not send marketing email, and we don't sell or share your email address.

12. Keeping the service secure

To protect the service from abuse (such as automated sign-up or sign-in attempts), we briefly process technical information including your IP address for rate-limiting and sign-in protection. If you opt in, the app may send a scrubbed crash report — limited to the app name, version, and a technical detail string — to help us fix problems. Crash reports never contain student data.

13. Deleting your account data

You can ask us to delete your account and its associated order records at any time — just contact us at the address below.

Changes & contact

14. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date above shows when it last changed.

15. Contact

Questions about your privacy? Email us at hello@caicomments.com.