Privacy notice

Your account and learning

We process your name, email, account role, verification status and the optional contact, location and profile details you provide. Passwords are stored as secure digests, not plain text. Signed-in progress includes your missions, saved practice, answers, scores, XP, streak and CV draft. We use it to operate your account and let you continue across devices—not to certify professional competence.

A profile photo is optional. An uploaded image is resized and its metadata removed before private account storage; it is not automatically added to community posts or employer CV snapshots. If you choose Google sign-in, the available Google account picture may accompany community contributions. Signing out removes the app's signed-in private cache. Unsynced changes can be lost, so finish saving before signing out or clearing browser storage.

Community, likes and mentoring

Posts and comments can show your display name, role, available profile picture and posting date to signed-in members. Account emails, contact numbers, private progress and CV answers are not automatically included. A like stores your account association, the post and time; the feed shows a count and your own like status, not a list of people who liked it. You can unlike, remove your contributions, report content and block members. Reports and relevant content are available for safety review.

A mentoring request stores your preferred mentor, date, time, time zone, topic and request status. You and the authorized Mentaka owner can see it; the owner sees your account name and email to arrange the session. A calendar choice is a request, not confirmed availability or a payment. You can cancel a request.

Your CV stays yours

Creating, downloading or privately syncing a CV does not authorize employer sharing. If you separately choose Send my CV and agree to the sharing notice, Mentaka stores a snapshot of the 24 CV answers you selected in its private database, with the consent version, time and retry receipt. This may include your professional identity, optional contact details, experience, education, skills and references. It does not automatically include your photo, audio or practice scores.

Only the authorized owner can review the submitted snapshot and arrange sharing with a potential employer. When the owner records an actual manual share, you receive a private in-app notice with the employer name and date. Check or refresh notifications in your signed-in Profile; recording a share does not send an email or push notification. CV details are self-reported, and no interview or job is guaranteed.

Withdraw sharing without deleting your account

1. Open Profile → Let your CV open doors.
2. Choose Withdraw permission → Withdraw my permission.
3. Stay connected until you see Sharing permission withdrawn.

This deletes the employer-sharing snapshot and stops future sharing, while keeping your personal CV draft. Minimal consent receipts, previous-sharing records and in-app notices remain until account deletion. Copies already sent to employers cannot be recalled automatically; their retention follows their own policies. Contact us for help.

Private feedback

Profile → Send feedback sends your message, category, optional app version, account association, status and timestamps to the private owner inbox. The authorized owner can see your name and email to review it. Feedback is not posted to the community or automatically sent to an AI provider, and it does not automatically attach your CV, recordings or learning progress.

Optional Google sign-in, voice and AI

If you choose Google sign-in, Google supplies your account identity, verified email, name and available picture. Mentaka does not ask for your Google password, files or contacts.

Dictation starts only when you choose it and grant any needed microphone permission. On-device recognition is preferred when supported; browser or phone speech services may process audio with their provider only after the separate network-dictation choice. Mentaka does not save raw dictation audio or upload it to the account API. You can type instead and edit the transcript before any optional AI request.

Local practice does not send your situation to an AI provider. Where optional AI is enabled, a separate notice and explicit choice are required before edited text is sent through Firebase AI Logic to Google's Gemini API. Eligibility and usage limits apply. Free-tier prompts and responses may be used by Google to improve its services and may be reviewed by people. Do not submit real personal details, customer data or confidential business information. Saved quizzes can form part of your synced learning progress. See Google's Gemini terms. Typing, microphone permission and general sign-up consent do not by themselves enable AI sharing.

Service providers and security

Cloudflare hosts the website, account API and D1 database. Resend delivers account verification and reset emails. Google processes identity or optional AI information only for the features you choose. Protected web AI also uses Firebase App Check and Google's reCAPTCHA Enterprise to check browser and security signals against abuse; these services load only after you choose online quiz creation. This does not give Google your Mentaka password, CV or community history. Your browser's speech provider may process audio for permitted dictation. Provider processing may take place outside your country.

Account sessions store expiry and activity information, network IP information and a browser/app identifier for security and abuse prevention. Hosting providers also process network requests. Account support and sensitive administrative actions have restricted-access records. We use secure connections, access controls, hashed sessions and abuse limits; no service can promise perfect security or zero provider retention.

Cookies and browser storage

Mentaka uses browser local storage for sign-in, saved practice, pending account saves and choices such as language and sound. Separate demo and account keys keep guest practice apart from signed-in records. Browser sessions may remain signed in for up to 30 days under the standard server expiry, unless you sign out or the session is revoked. Locally saved data can remain until the relevant app control or browser storage settings remove it.

We have not added advertising trackers. Necessary storage supports the service you request, so we do not show a blanket advertising-cookie Accept/Reject popup. Cloudflare may use necessary security cookies or cookieless performance measurements. If optional tracking is added, the notice and choices must change before it is used. Fonts on this page and the main website are served locally by Mentaka.

You can change language and sound in Mentaka, use guest practice instead of an account, or reset the optional preferences below. Resetting preferences does not sign you out, delete progress or your CV, revoke microphone/AI choices, or delete account data. Clearing all site data in your browser can remove unsynced work and sign-in details; it is not an account-deletion request.

Retention, deletion and help

Account and learning records are kept while your account exists. In Mentaka, open Profile → Settings → Delete account, read the notice and type DELETE. This removes your account-linked profile, progress, photo, sessions, mentoring requests, private feedback, likes, own community content and opted-in CV sharing records. Other people's replies can remain with your original post removed. Pseudonymous administrative audit records, infrastructure recovery backups and records required by law or provider safety rules have separate retention.

For access, correction, account deletion or help with a previously shared CV, email [email protected] from your registered address. We verify ownership; never send a password or sign-in code. You can also read the Android app privacy notice and account deletion instructions.