Privacy notice
Privacy, plainly.
Effective and last updated: 27 October 2026. This notice explains what Clearline collects, why, who receives it, and the choices you have.
Account and public content
Google sign-in supplies an account identifier, email address, name, and profile image to establish a session. The service stores the signed-in profile fields needed for posts and comments. Posts, comments, display name, and profile image are intended to be publicly viewable. Do not include information in public content that you do not want others to see. Reports and appeals are available to authorized moderators, not shown as public content.
Private drafts and preferences may be stored in browser storage on your device; they are separate from server account data and are not included in an account export. Links saved while signed out are also stored only in that browser. Links saved while signed in are stored privately in the Clearline database with their URLs, titles, notes, platform labels and timestamps; they are included in the account export and account deletion. Device-only links are not uploaded automatically after sign-in. Clearing browser storage or using the app’s local controls affects that device only. A local video preview is not sent to Clearline by that preview action.
Optional Chrome extension
The optional Play on Clearline action opens the selected supported clip in the main Clearline app using a URL fragment containing only the clip URL and title. This fragment is removed after reading and is not sent in the initial HTTP request. Playback alone does not save the clip. A floating control lets you independently choose Home School (reviewed learning library) or My collection (ordinary private account/device saves). Play may inspect video/source/iframe URLs on the explicitly selected page to identify supported players; it does not collect video bytes or bypass private/signed streams or embedding restrictions. The right-click Play action sends only the chosen link/video URL and available title to the main app. Vimeo or an external video host receives ordinary playback requests only after you confirm the connection notice; YouTube follows the existing consent setting.
Clearline Homeschool extension 0.3 reads the selected tab URL/title when opened. Clicking Add submits that link and, for articles, up to 3,000 characters of main-page text to your private Homeschool review queue. Forms and comment containers are excluded. Your existing Homeschool browser session authenticates requests; the extension does not read cookies or create access tokens. Signed-out/offline submissions remain in a local queue of at most 100 links for up to seven days and retry when Chrome runs. Approved sources are automatically categorized in the private Homeschool library, separately from My collection. A guardian exception requires the existing guardian PIN and a reason, and is labeled separately from system approval.
YouTube background discovery is off by default and requires optional YouTube host permission and guardian PIN approval. While Chrome runs, it checks video link titles/URLs in up to three open non-incognito YouTube tabs every ten minutes, with a maximum of five submitted links per run and twenty per UTC day. It excludes comment and ad containers and does not access browsing/watch history, cookies, account information, comments or video files. Stop scanning from the extension or private learning library. A bounded local record of discovered video URLs avoids repeats for up to thirty days. Imports, reviews, categories and guardian reasons are private account data included in account export/deletion. Drama entertainment and explicit adult content identified from source titles or source-text classification are excluded from the learning and guardian-review queues. These text checks do not inspect every frame. Other uncertain learning resources may be approved as a private exception after a guardian enters their PIN once. This unlock lasts up to 20 minutes, applies only to import approvals in that page, and uses an expiring signed capability bound to the current account, login and PIN configuration. The PIN itself is not retained by the page. Removed resources are hidden immediately and can be restored or undone without a PIN; the retained private URL prevents the scanner from adding the same resource again. Removed records are included in account export and deleted with the account. Article excerpts are cleared after approval or rejection. Cloudflare Workers AI processes supplied source text and public references for categorization and review; available text checks do not inspect every video frame or guarantee accuracy.
For signed-in saved links, Clearline may request the saved page from its server to read an Open Graph preview image. The page operator can see that server request. If an image is available, your browser loads it directly from the image host when its card appears; that host can receive your IP address and browser request information. Clearline does not read the entire linked page for this feature and falls back to the domain name when no usable image is available.
The optional “Beyond the feed” suggestions classify only the titles and notes of links already visible in your Clearline collection. This runs in your browser after you opt in; the inferred topic is not uploaded or stored as a server-side profile. The opt-in choice is saved in browser storage and can be switched off. You can also choose a topic manually without enabling classification. Suggested Wikipedia links are not contacted until you open one; then Wikipedia receives an ordinary browser request under its own privacy practices. Clearline does not obtain YouTube watch history from a user or channel ID.
Sharing from your phone
If you use Share and choose Clearline on Android, or the “Play on Clearline” Shortcut or Safari bookmark on iPhone and iPad, Clearline reads only the link you shared and its title (or the words that came with it). The play link is built on your device, the clip opens in the main app, and the shared link is removed from the address bar and browser history entry. Playing alone does not save anything; saving happens only if you choose it. After you have opened Clearline once, a small helper in your browser (a service worker that caches nothing) handles later shares on your device, so the link is not sent to Clearline. The very first share, before that helper is installed, or in a browser that does not support it, sends the shared link in the request address (/share?url=…) to Clearline’s hosting on Cloudflare. We checked our setup: that address is served as a static page without running Clearline’s own code, our log settings do not record invocations and redact query strings, and Clearline’s code never writes request addresses to its logs or database. We do not store it. Cloudflare, as the hosting provider, handles ordinary network requests under its own practices, which we cannot see or control. YouTube, Vimeo and other video hosts receive requests only when you play, as described above.
Reports, appeals, and moderation records
A report may include its category, optional details, target, reporter account identifier, and time submitted. An appeal may include your account identifier, affected post or comment, reason, and submission/review times. Moderator actions can create records identifying the moderator, action, target, reason, and time. These records may be needed to review abuse, enforce the Terms, handle appeals, and investigate incidents.
YouTube discovery and links
The watch page displays YouTube thumbnails from i.ytimg.com before playback; loading those images may send your IP address and browser request information to YouTube. The embedded player loads when you choose to play and confirm the first-use notice. When discovery is enabled and you submit a search, Clearline sends the query to the YouTube Data API and receives video identifiers, titles, channel names, and thumbnail URLs. A short-lived edge cache may retain normalized results for up to three minutes. Discovery does not mean Clearline downloads or imports video files. Opening a YouTube player connects your device to YouTube, which may receive your IP address, device/browser information, and request details under its own terms and privacy practices. Google sign-in is a separate use of Google services.
Private uploads and AI images
During the limited beta, eligible signed-in testers can upload their own images or short videos to a private collection. These files, their titles, types, sizes, and creation times are stored in Cloudflare R2 and are available only through an authenticated account route; they are not published to the community. If you request an AI image, your prompt is sent to Cloudflare Workers AI for generation, and the generated image is saved privately to your collection. Do not include sensitive personal information in prompts. Upload and generation limits apply, and provider processing or security logs may persist outside your collection. Account export includes media metadata, but not copies of the media files; download anything you want to retain before account deletion. Deleting an item or your account removes its current R2 object, subject to provider-side backups and logs.
Home School private beta
Eligible signed-in testers who confirm they manage the learning space as a guardian can save a broad age range, learning stage/grade, any number of interests (chosen from presets or typed as custom entries, up to 50, each up to 40 characters), and a city or area in Thailand in a private learning profile. The city is used to show a "This week near you" list of local activity listings (currently live for Bangkok only, aggregated from the Greener Bangkok and NSM Curiosity organizer feeds) and a short weather outlook for every city; no precise device location is collected by this feature. Weather is fetched by Clearline's server from Open-Meteo using the chosen city's centre coordinates, not your device's location. Opening an activity link contacts that organizer directly; listings are not verified upcoming events or age ratings. They can also save private goals, skills, and guardian-entered progress, obstacles, or evidence. Do not enter a child's full name, contact information, health information, school records, or other sensitive details. These records are visible only to the signed-in account, included in account export, and removed by account deletion. A guardian may mark a goal achieved; the AI does not assess or certify a child's ability. The guardian declaration is self-attested and is not identity or parental-status verification.
The optional Learning Companion sends the question to Cloudflare Workers AI together with either the selected goal, skill, optional age range and up to six recent notes, or, when no goal is selected, the profile’s age range, grade and interests, plus up to three of your saved notebook entries that share keywords with the new question. It sends nothing until you confirm; the Home School assistant bar asks once and remembers that confirmation only until the browser tab’s session ends. The conversation for the current topic is held only in your browser for that tab and is sent back with each follow-up question so the assistant can hold a conversation; it is cleared when you start a new topic or close the tab, and Clearline does not store it as a transcript. If you choose “Save to notebook” under an answer, Clearline privately stores the question and a short extracted summary of that answer, plus a few keyword tags, in your account’s learning notebook; that saved entry is included in account export and account deletion, is never shared across accounts, and may be reused as brief context in later Learning Companion conversations. Cloudflare may retain operational or security logs regardless of what you save. Responses may be inaccurate and should be reviewed by a guardian. This beta is not a child account, a substitute for a teacher or clinician, or a public school record. Home School features are for use by adults; Clearline does not offer accounts for children.
The Home School assistant bar can also take a limited set of actions on your behalf, but only through a fixed list of validated tools it does not control: it can read your learning profile, goals, recent activity, and saved resources, and can add or remove interests, save a note or resource, or update a plan step immediately. Creating or changing a goal, creating a multi-step learning plan, or changing the profile's age range, grade, or city instead creates a proposal that is shown to you with Approve/Cancel controls and only takes effect once a guardian approves it; cancelling discards it. It cannot create calendar events, registrations, or reminders, and cannot escalate to a person. To do this, Clearline privately stores, per account: a short rolling summary of the conversation and a few remembered facts, any action currently awaiting your approval, a log of every tool call it made (what it was asked to do, what it changed, and whether you approved or cancelled it), and any learning plans you approved. These are included in account export and removed by account deletion, are never shared across accounts, and the assistant is instructed never to ask for or store a child's full name, birthday, school name, home address, or health information. The dashboard's quiet suggestion cards remember which ones you dismissed, per account, so they are not shown again; that list is also included in account export and removed by account deletion. Clearline also privately tracks, per account, which learning topics (concepts) a child has seen, practised, or mastered — the topic label and status only, never a full name, school, or health detail — built from chat explanations, check-in answers, completed plan stages, watched videos, and reflections, shown on the dashboard's Progress tab and included in account export and removed by account deletion.
The Home School skill map (Subjects) lets a guardian pick a Thai or English program and records, per account and skill, a 0–100 practice score, attempt/correct counts, and last-practiced time; practice questions are multiple-choice sets generated by Cloudflare Workers AI for each skill, independently re-checked by the model and screened by Llama Guard before use, then cached and reused across accounts (the question text itself is not personal data and is not tied to any one account). Per-account skill scores are included in account export and removed by account deletion; a guardian may also set a chosen program and interface language, stored with the learning profile.
The optional learning brief reads only an English/Thai Wikipedia article summary fetched from Wikipedia, or an excerpt entered by the guardian. The selected goal, skill and excerpt are sent to Cloudflare Workers AI after a separate confirmation. Cloudflare-hosted Meta Llama Guard 3 checks submitted question or source text and generated responses; unclear or flagged results are withheld. Clearline does not save the excerpt or AI brief as a transcript. A pasted excerpt is not independently verified, and a Wikipedia summary is not a full article. Other platforms' videos and posts are not read by this feature. Text screening can miss harmful material and does not establish age suitability; a guardian should compare AI output with the source before sharing it with a child.
Home School video playback uses the official YouTube player. For each Home School video, Clearline stores server-side, per account and video: the furthest position reached, the video's duration, whether a forward skip was detected, how many check-in prompts were answered, how many were required, and the completion and last-updated times. This progress lets a lesson resume from where it left off on any signed-in device, blocks jumping ahead without watching (seeking back is always allowed), and marks a video "Completed ✓" only once the furthest position reaches about 95% of the duration, no forward skip was detected, and any check-ins were answered. This browser also keeps a local, unsynced fallback copy of playback position for up to 90 days, which can be cleared with browser storage. YouTube may receive playback information directly. During playback, one or two brief "Still with us?" check-in prompts may pause the video and ask for a tap plus an optional one-line answer; only whether you responded is kept (as a count, server-side, with the watch progress above) — the typed answer itself is never sent to Clearline or stored anywhere. Progress and check-in counts are included in account export and removed on account deletion. Neither a completion badge nor a seek indicator can prove a child watched or understood a video. After playback, an optional reflection sends the video title, broad topic, age range and learner's answer to Cloudflare Workers AI for screening and a draft suggestion. Reflections themselves do not use video transcripts. The separate recommendation review described below can use public caption text or a creator synopsis. The answer and AI draft are stored privately for adult review, never posted publicly or emailed, and deleted after 30 days. By default, a guardian is asked to confirm this each time; a guardian setting, "Always send reflections to AI," turns off that repeated confirmation, is off unless a guardian turns it on, and is stored with the learning profile. Adult approval or rejection, an adult-chosen direction for future suggestions, and an optional adult comment are stored with the reflection. The adult review page requires the signed-in account plus a 6–10 digit PIN; the PIN is stored as a salted hash, but neither the PIN nor a self-declaration verifies parental status. Adult review data is included in account export and deletion. Do not enter identifying or sensitive child details. This remains an adult-managed beta, not a validated child assessment.
Under a Home School video, an optional "Talk about this clip" panel offers two or three discussion prompts generated by Cloudflare Workers AI from that video's title, topic, and description only — never a transcript — and cached so the same clip is not regenerated for every learner. If a child types an answer, it is screened by the same self-harm/privacy pre-checks and Llama Guard used elsewhere in Home School, then sent to Cloudflare Workers AI only after a guardian's one-time confirmation or the "Always send reflections to AI" setting, and the model replies as a Socratic tutor (it asks for reasoning or offers another viewpoint, and never simply states an answer as fact). Each clip's conversation is capped at a few exchanges. The discussion thread — the child's answers and the tutor's replies — is stored privately per account and video for 30 days, is included in account export and deletion, and a "Save to notebook" button copies it into the learning notebook described above if a guardian or learner chooses to keep it. A mid-video check-in prompt may use one of these same discussion prompts instead of a generic question; an answer there follows the same consent and safety rules, or stays local and is not sent anywhere if consent has not been given. The same video metadata (title, topic, description) is also used to generate an optional "3-question challenge" multiple-choice quiz once per clip; Clearline grades it on the server, awards a small in-app badge for a perfect score, and records only which topics were answered correctly or not (no chat text) as learning-topic evidence, described above. Neither feature reads or infers anything from the video itself beyond its public title/topic/description.
A guardian may also turn on an optional "Presence check (camera)" for Home School videos; it is off unless a guardian enables it, and the setting is stored with the learning profile. When on, it asks your browser's own camera permission and, while a lesson plays, shows a visible "Camera on" indicator. Detection runs entirely on your device using the open-source MediaPipe Face Detector, downloaded from the jsDelivr CDN (script from cdn.jsdelivr.net/npm/@mediapipe/tasks-vision, its short-range BlazeFace model file from storage.googleapis.com/mediapipe-models) — it only detects that a face-shaped region is present in a downscaled camera frame roughly every two seconds; it does not identify, recognize, or distinguish who is present. No image, video frame, or face data is drawn, saved, uploaded, or sent to Clearline or any other server — the boolean "someone is present" never leaves your device and is not stored anywhere, even locally. If no one is detected for about 20 seconds, the video pauses with a "come back to continue" prompt. The camera turns off (all camera tracks are stopped) whenever the video pauses or ends, you leave the page, or a guardian turns the setting off. If camera permission is denied or the detector fails to load, Home School falls back silently to the check-in prompts above with no error shown.
Followed interests and in-app updates
In the limited beta, following a topic is always an explicit action. Clearline stores the topic and private alert cards for your account; watch history or saved links never follow a topic automatically. Scheduled checks search public Clearline posts and, when configured, YouTube Data API results for that topic. YouTube receives the topic as a search query from Clearline. Alerts contain source, title, publisher, source URL, publication time and read state. They are not public, are included in account export and deletion, and are removed if you unfollow. Alerts older than 90 days or beyond the newest 200 per account are pruned. No browser push, email, or autoplay is enabled. Clearline does not monitor every website or social platform.
Hosting and service providers
Clearline is hosted on Cloudflare and uses Google for sign-in and YouTube for discovery or playback when those features are enabled. These providers may process network, device, and request information to deliver and secure their services. Cloudflare request/security logs, database backups, and provider-side retention are controlled in part by provider settings and follow those providers’ own retention periods. See Google’s Privacy Policy, YouTube’s Terms, and YouTube API Services Developer Policies.
Home School Thinking Lab uses a source-grounded reading and designed, hypothetical inquiry prompts. Writing is saved privately only when you choose Save, with up to 20 versions per inquiry. It does not award correctness scores or infer ability or mastery. Optional thinking feedback sends the saved writing, reference excerpt, topic, and broad age context to Cloudflare Workers AI only with guardian consent or the existing always-send setting. A separate model checks the follow-up question; this is AI coaching, not a validated assessment. Inquiries and version history are included in account export and deletion. Avoid personal or sensitive information.
Home School interest practice uses the selected interest, broad age band, school grade, recent exercise topics and interface language to retrieve an English Wikipedia introduction and create source-grounded questions with Cloudflare Workers AI. The reference excerpt, generated exercise, submitted choices and correctness are stored privately per account, included in account export and deleted with the account. Core curriculum mastery is not inferred from these exercises. Saving an exercise result to Journal is optional.
Home School video recommendations now require a separate text review. The server attempts to read publicly available YouTube caption text; if captions cannot be retrieved, it may review a sufficiently detailed creator synopsis from the video page or YouTube Data API instead. The public video text, requested topic and broad age band are sent to Cloudflare Workers AI, and selected main claims are compared with a retrieved Wikipedia excerpt. No claim is made to have watched the visuals or verified every statement. The displayed review identifies its basis and limitations. Public-video review summaries and supporting excerpts are cached for seven days; unavailable or insufficient text does not receive a review badge. Searches sent to YouTube/Wikipedia contain the topic, not account identity or private learning notes.
Access, export, deletion, and retention
Signed-in users can download server-held account data and request account deletion from Settings. Device-only drafts and saved links are separate and are not included in server export or deletion. You may also email a deletion or data request to Geowahaha@gmail.com. Before acting on an emailed request, we may ask you to confirm it from the email address linked to your account. Removing content from public view may not erase provider logs, backups, or copies already made by others. Depending on where you live, you may have additional rights under local law; use the contact below to exercise them. Unless a shorter period is stated above, account data and saved content are kept until you delete them or your account; moderation records may be kept as long as needed to handle abuse, appeals, and incidents.
Home School automatically queues video discovery and source-grounded exercise preparation for every saved interest. Preparation can continue on Cloudflare while the app is closed. Private job records contain the account identifier/email for authorization, topic, profile configuration key, status and retry times; they are included in account export and deletion. Generation uses broad learning-profile settings and recent exercise topics, not unsent child answers. Content is shown only after the existing review checks pass. Changing interests, grade or language cancels obsolete queued work.
Home School Math
Guest math tasks, answers and progress stay in the current tab and are not automatically uploaded after sign-in. Download your evidence before closing that tab. Signed-in Beta practice with a learner profile stores issued tasks, submitted answers and explanations, hint/retry counts, numerical results and timestamps in the private family account. These records are included in account export and deletion. Recommendations use a bounded window of recent task evidence, not a diagnosis, intelligence score or Olympiad certification. Unsubmitted writing is not sent by ordinary typing.
Numerical checking, visual models and prepared hints do not call a generative AI provider. If you explicitly choose AI reflection and confirm its notice, the submitted task, answer and explanation are processed by Cloudflare Workers AI, including input/output safety review. Name, email and other private learning conversations are not included in that model request. The optional reflection is saved with the task. It is a fallible suggestion, not a verified proof assessment. Do not include personal details in your explanation.
Learning portfolios and optional sharing
Submitted mathematical attempts and revised explanations are retained as a private sequence; earlier records are labelled latest-state snapshots rather than reconstructed histories. Reports collect saved maths, inquiry revisions, family goals and notes, notebook summaries, adult-approved reflections, learning plans, playback records and cumulative practice snapshots within the chosen period. Playback does not prove understanding; practice snapshots contain cumulative counts rather than period totals. These sources have different meanings and do not establish ability or completion by themselves. Reading the automatic family brief does not require a parent-written assessment. It describes selected numerical results, recorded in-app support, explicit arithmetic corrections and eligible later-day/application tasks, with links to the work; these checks do not validate whole explanations or prove that no help was used elsewhere. Guests can read, print and download a local brief without signing in. Guest maths report evidence stays in tab memory, bounded to 100 tasks and 80 events per task, and is lost on reload; it is not uploaded automatically. Issuing a saved report or activity certificate requires an adult PIN unlock, selection of evidence, a display name and issuer, and review of the preview. Family comments are optional. No AI provider is called for reporting. Issued documents store a fixed snapshot and adult observations; editing source evidence does not change an issued snapshot. Documents and mathematical versions are included in account export and deletion.
Documents stay private unless an adult explicitly creates a sharing link. Anyone holding that link can read only its selected snapshot until its 1, 7 or 30 day expiry or revocation. The link secret stays in the URL fragment and is sent in a request body; only its hash is stored. Links do not send email or contact agencies. Avoid unnecessary personal details, and review all included writing before sharing. Revocation stops future access but cannot remove copies already downloaded. Delete an issued document to remove its saved snapshot and revoke access. Activity certificates are not accredited qualifications or official government documents.
Optional math scratch tools for groups, fractional parts, compatible units and timeline jumps run in the browser without an AI call. Changing a tool does not submit work. If the learner chooses Keep this model, its result is added to the thinking draft with a tool-output label; the learner must still submit or save that draft. The existing account/guest storage and guardian-selected report-sharing rules then apply. Original fictional table givens are kept with selected maths evidence so a reader can interpret the submitted answer without guessing the question data.
Learning pathways and family observations
Free maths, proof prompts and real-world activities do not call an AI provider. Guest pathway writing and drafts are kept in session storage in this browser tab; download them before closing. When you explicitly save while signed in, Clearline stores the selected activity, starting level, your writing and version history in your private family account. Adult observations include the quoted words that support them, their date and the version reviewed. A later edit does not inherit an earlier review. Guest family notes have no account verification. These are activity records and observations, not diagnoses, validated ability scores or certified mathematical proofs. Original pathway work and its revisions may be selected for a guardian-reviewed report; existing private sharing, expiry and revocation controls apply. Pathway records and observations are included in account export and deletion. Future scenarios are general planning material, not predictions about an individual child.
Optional Home School voice conversation
When voice is enabled and you explicitly start a call, microphone audio is sent directly to OpenAI over WebRTC. Clearline's server supplies only the saved learner age band, grade, interests, language and an optional curriculum topic; it does not send the learner's name, email, city, private notes or previous text conversations. Do not speak personal details. The voice is AI generated. Clearline does not record or save voice audio or conversation transcripts. OpenAI processing is subject to the project data controls verified before child use; child voice remains unavailable until that review and guardian permission are in place.
Guardian permission is valid for up to 30 days and is invalidated by relevant profile or guardian PIN changes. You can withdraw permission and end active calls in the voice dialog's Guardian controls. Clearline stores consent timestamps and a hashed profile version, plus session identifiers, provider call identifiers, connection status and start/end/expiry times for termination and usage limits. Closed session metadata is removed after seven days by scheduled cleanup; it is included in account export/deletion. Calls end locally when you press End, close the dialog, leave the page, or switch away. Server cleanup also requests termination after the five-minute deadline. Provider or network failures can delay that cleanup. A separate adult-only test mode sends no child profile context.
Contact and changes
Clearline is operated by Eibpo Tawat Talpolkrang. For privacy questions, data requests, or report-related requests, contact Geowahaha@gmail.com. If our data practices change materially, we will update this page and its effective date.