นโยบายความเป็นส่วนตัว

Privacy policy (English version)

This policy explains what JODJAM (จดจำ, the iPad app and website) collects, why, who receives it, how long we keep it and your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). If the two versions differ, the Thai version applies.

In short

• We collect what is needed for learning and running the service: account data, what you write, and the learning signals your classroom teacher sees.
• We do not sell data, show advertising, use advertising trackers, or use learners' work to train AI models.
• The AI tutor P'HOOQ uses OpenAI. It is optional, works only after you give consent in the app, and you can switch it off at any time under My > AI use.
• Personal documents and notes stay on your device and go nowhere unless you choose to send them.
• You can delete your account in the app. It closes at once and its data is permanently deleted after 7 days.
• Use the contact details at the end of this page to make a request or ask a question. We reply within 30 days.

Data controller

Thanapon Thanadunpremdet (“we”) is the data controller for JODJAM accounts. Address: 203/79 Zelle Salaya 3, Zelle Salaya Condo, Nakhon Pathom 73170, Thailand. Email Contact.areazero.ai@gmail.com

When a teacher creates a classroom and invites students, the teacher chooses to use JODJAM for that class, and teachers in that class see the work and learning signals of the students in it, as described here. We are responsible for account and system data. If you make a request about classroom work, we coordinate with the teacher or school involved.

What we collect

• Account: email, display name, role (student or teacher), birth year, and a parent's email for learners under 13.
• What you create: handwriting, highlights, text, pasted pictures, bookmarks, submitted classwork and attachments.
• Learning activity: pages opened, reading time, searches, “I don't understand” taps and help requests to the teacher, so a teacher can see where the class is stuck.
• Reading paths in class: in class documents a teacher shares, we record, for each learner, the order of pages opened, the time spent on each page, and the pages skipped or returned to. The class teacher sees this by name, together with where the learner circled and the P'HOOQ outcome. Search words and whole-page pictures with handwriting are not shown to teachers. Detailed page-time records are kept for up to 400 days and then deleted. Each time a teacher opens a learner's reading path, that is logged. Personal notebooks and PDFs are never included.
• Live class: during a live class a teacher starts, we record which students joined (which also marks attendance), the “understood / confused” status a student taps, and their poll answers for that class. The teacher sees poll results as totals and live circle positions without names on the live screen. For a Meet, Zoom or Teams link we store only the URL; the call itself happens in that third-party service under its own terms.
• Teacher screen use and feedback: we record which teacher screen a teacher opened and which suggestion they used, and the feedback a teacher chooses to send (helpful or not yet, with a short note if they write one), to improve the product. This contains no learner data, no learner ids and no web addresses carrying data. Usage records are deleted after 180 days. Feedback is kept until our team has handled it, and a teacher may ask us to delete it using the contact at the end of this page.
• Teacher pen marking: a teacher can draw marks, add stamps and write comments on a student's hand-in. We keep these with the submission and show them to the student only once the teacher has returned the work.
• P'HOOQ reading handwriting (started by the teacher): when a teacher asks P'HOOQ to read handwriting, the pages of the hand-in are screened first and then sent to the AI provider (OpenAI) to transcribe the text and suggest scores with the evidence they point to. Student names from the class roster are not sent, but names written on the work may appear in the pictures sent; we cannot reliably hide them, so P'HOOQ is told not to repeat them and a teacher can choose not to use this feature. The teacher always decides the score, and the AI suggestion is never shown to the student.
• Using P'HOOQ (the AI): your questions and the earlier conversation, the picture of the page you are on (or of the circled area with a nearby area), which may contain student handwriting and annotations, that page's text, and lecture audio you ask us to summarise. All of this goes to OpenAI only when the user chooses to use the AI. For personal notebooks, see “What stays on your device”.
• P'HOOQ in a classroom: when a student asks about a class document, we keep the conversation, the circled picture and the picture of the whole page that was asked about (including the student's handwriting on it) in private storage, so P'HOOQ can answer follow-up questions in the same conversation. The classroom's teacher can open the circled picture, the question and the conversation with P'HOOQ. No teacher or student screen shows the whole-page picture today; only the server reads it back to answer follow-up questions. This data stays until the account is permanently deleted.
• Safety reports: when content screening stops a question or an answer, or when you tap “report”, we keep that text, the time and the related page so our staff can review it within 24 hours. When it comes from a personal notebook we keep only the text and the time, with no image and no document reference.
• App and website crash reports (when enabled): error type, app version, device model, operating system and browser, with page text, handwriting, names and email removed before sending.
• Subscriptions: status and expiry from Apple or the web payment provider. We never see or store card numbers.
• Device: a notification token, if you allow notifications.
• Early access: what you tell us when you ask for access (role, school, grade or subject, a message) and whether it was approved, used to open access in waves before launch.
• Forms on the home page: name, email, role and school or organisation when you ask our team to contact you, for example about the school plan, used only to get back to you about it.

Account data is needed to create and use an account; without it we cannot create one. The AI tutor is optional: without consent you can still read, write and use notebooks as usual.

Why we use data, and our legal bases

• To provide the service you asked for (contract): account data, what you create, submitted work, the learning signals teachers see, and subscription status.
• Consent: sending data to OpenAI when you use P'HOOQ (via the consent screens in the app), cloud backup, summarising recordings, and notifications. You can withdraw at any time without affecting other features.
• Legitimate interests: content screening and safety reports to protect learners, preventing misuse, securing the system, and fixing problems from crash reports with personal data removed.
• Legal obligation: keeping transaction records and answering authorities where the law requires.

What stays on your device

• Personal documents you import in the iPad app (PDFs, pictures, notebooks) and what you write on them stay on the device. They are not sent to us or to the AI, unless you ask P'HOOQ or use an AI tool such as translation in a personal notebook and give a separate, additional consent for that, ask P'HOOQ to summarise a recording made in that notebook, or turn on cloud backup.
• When you ask P'HOOQ to summarise a recording in a personal notebook (the app asks you to confirm each time), JODJAM sends only that audio file and the notebook's title through our server to OpenAI to transcribe and summarise it, and deletes the audio from the server as soon as it is transcribed. We do not keep the transcript or the summary on the server; both stay on your device, and teachers cannot see them. We keep only the minutes of audio and AI credits used.
• Cloud backup (off until you turn it on): when on, the app uploads the .jodjam backup of each personal notebook that changed to a private space for your account, encrypted in transit and at rest. Only your account can download it back. Teachers, classes and the AI cannot see it. You can turn it off or delete each notebook's copy under Profile, and every copy is erased when your account is permanently deleted.
• When you ask P'HOOQ in a personal notebook, JODJAM sends the following through our server to OpenAI. If you ask about the page you are on, it sends the picture of the whole page (including any text, handwriting and pictures on it) and that page's text, up to 8,000 characters. If you circle part of the page, it sends the circled image and the area around it. Your question and up to 10 earlier messages go with either. If you use another AI tool in a personal notebook, such as translation, only the part you choose is sent. The other pages of the file are not sent. We do not store these images, texts, questions or answers on the server, and teachers and classmates cannot see them. They do not count as classroom learning data. We keep only a record of how much AI was used and, if content screening withholds something, that text as described under safety reports. The conversation history stays on your device. You can withdraw this consent at any time under My > AI use. Before 22 October 2026 the text shown in the app said only the circled area is sent. Because the scope is wider, the app asks for this consent once more.
• A .jodjam backup of a personal document is made on the device and saved where you choose in the Files app (for example On My iPad or iCloud Drive). We never receive it. Backups are not encrypted, so keep them in a private folder.
• Document lock PINs are kept in the device Keychain and are not part of any backup.

P'HOOQ and OpenAI

• When you ask P'HOOQ, we send to OpenAI (an external provider that processes data outside Thailand): your question, the picture of the page you are on or of the circled area with a nearby area of the page (which may contain student handwriting and annotations), that page's text, the text the iPad reads from the handwriting there (read on the device), and the earlier conversation needed for that question.
• Recordings you ask to summarise: we attempt to delete the server copy of the audio immediately after processing. Uploaded audio that was not processed, or could not be deleted, stays in a cleanup queue and is retried by the daily job. Provider outages may delay deletion further. The original recording on your device remains until you delete it.
• It is optional and always asks first. The app shows a consent screen saying which data goes where. You can withdraw at any time under My > AI use. After withdrawal we send nothing more; what was already sent cannot be recalled from OpenAI but is deleted on the schedule below.
• Under OpenAI's API terms, data sent through the API is not used to train or improve OpenAI's models, and OpenAI may keep requests and answers in abuse-monitoring logs for up to 30 days (or longer where the law requires). OpenAI states that content screening and audio transcription are not kept in these logs, and that an image its safety systems flag as possibly unlawful child content may be kept for review.
• We do not keep the image, question or answer of a personal-notebook circle on our server (see above). For circles in classroom documents we keep the conversation so you can look back on it and so teachers can see where the class is stuck.
• AI answers can be wrong, are not professional advice and do not replace a teacher.

How we use data

• To provide the service: saving and syncing notes across devices, classwork, and showing a classroom's teacher the work and learning signals of students in that classroom.
• To answer questions with AI, grounded in the page being read.
• To keep learners safe: screening questions and AI answers before they are shown, preventing misuse, and limiting AI use.
• To fix app and website problems from crash reports with personal data removed.

We do not sell personal data, show advertising, or use learners' data to train AI.

Content screening

Most learners are children, so questions to P'HOOQ (including the pictures sent with them) and AI answers are checked with OpenAI's moderation service before they are shown. Unsuitable questions are not sent to the AI, unsuitable answers are not shown, and both are kept for staff review as described under safety reports.

Service providers

We share data with these providers only as needed for their task, and do not allow them to use it for their own purposes:

• Supabase: database, accounts and file storage (Singapore region).
• Vercel: servers for the website and API (Singapore region).
• OpenAI: AI answers, transcription and content screening (see P'HOOQ and OpenAI).
• Resend: system emails such as email confirmation and password reset (receives the recipient address and the email content).
• Sentry: app and website crash reports, when enabled, with no page text, handwriting, names or email.
• Apple, RevenueCat and Stripe: subscriptions and payments. We never see or store card numbers.
• Apple and Google: when you choose to sign in with their accounts.
• LiveKit: live class audio and video. When a teacher turns on the microphone or camera in a live class, the teacher's voice and picture are sent through the LiveKit service (a company in the United States that may process data on servers outside Thailand) to the students in that class. Students can only listen and watch: the system never turns on a student's microphone or camera, and live class audio and video are not recorded.

We do not send data to advertisers, data brokers or tracking networks, except where the law requires disclosure to an authority.

Transfers outside Thailand

Some data is processed outside Thailand: in Singapore (database and servers) and by AI, email, crash-report and payment providers located or hosted abroad, for example in the United States. The destination may not have data protection standards equal to Thailand's. We therefore send only what is needed, choose providers that apply their own processing terms and security measures, and always ask for your consent before data goes to an AI provider.

Retention

• Account data and what you create: while the account is active, and permanently deleted 7 days after you delete the account.
• P'HOOQ conversations in classroom documents and learning signals: while the account is active, or until it is deleted.
• OpenAI: up to 30 days in abuse-monitoring logs, as described above.
• Crash reports: for the period Sentry sets, and they contain nothing that identifies you.
• Early-access requests and home-page forms: as long as needed to get back to you; deleted on request.
• Database backups: expire and are overwritten on the database provider's schedule.
• Purchase records: when you delete your account we also ask RevenueCat to delete your customer record (RevenueCat processes this in a queue on its side). Apple and Stripe keep purchase records under their own schedules and laws. We do not control these periods; you can ask us by email to help request deletion.

Deleting your account

You can delete your account yourself in the app under Me > Delete account (or ask by email). The account closes immediately, and after 7 days we permanently delete the account, profile, uploaded files, cloud backups and the data linked to the account, and ask RevenueCat to delete your customer record. The 7 days are there in case you change your mind. If a teacher deletes their account, the classrooms, assignments and classwork they created are deleted too. Deleting your account does not cancel an App Store subscription; cancel it under Settings > your name > Subscriptions. If you signed in with Apple, we revoke the connection to your Apple account. Data held by other providers (see Retention) may remain on their own schedules.

Minors and parents

Most learners are children or teenagers, so JODJAM collects only what it needs, shows no advertising and does not use learners' data to train AI. At sign-up we ask for a birth year to set the right protections, and learners under 13 must give a parent's email.

Under Thai law, a learner under 10 needs a parent or guardian to give consent on their behalf, and a learner aged 10 to under 20 may need a guardian's consent for things a minor cannot do alone. We therefore ask parents to oversee AI consent and subscriptions for learners who are minors. Parents can ask to see, correct, delete or withdraw consent on behalf of their child through the contact below. We use minors' data for learning only.

Your rights

You may ask for access and a copy, to receive or transfer your data in a machine-readable format, to object, to have data deleted or anonymised, to restrict use, to correct it, and to withdraw consent. We reply within 30 days of receiving the request and may ask you to verify your identity first. Send requests by email or by post to our address. If you are not satisfied, you can complain to Thailand's Personal Data Protection Committee Office.

Security and breaches

We send data over encrypted connections, store it encrypted, limit access by account and classroom, and review our measures from time to time. If a personal data breach puts your rights at risk, we will notify the Personal Data Protection Committee Office without delay and within 72 hours where feasible, and notify affected people if the risk is high.

Cookies and tracking

The website uses only cookies needed to sign in and keep the service secure (such as the session and Google sign-in). We use no advertising cookies. The app contains no advertising SDKs, no third-party analytics and no cross-app tracking.

On the public pages of the website only (home, privacy, terms, support, plans, free tools, and sign-in / sign-up) we use Vercel Web Analytics to count visitors and where they come from, and Vercel Speed Insights to measure how fast the page loads on the visitor's device. What we get is statistics such as the page opened, the site that referred the visitor, country, device and browser type, and how long the page took to appear. Both services use no cookies and do not follow you across websites. We keep only the address of the page and the utm_ tags on our own campaign links (which post or ad brought the visit), not the rest of the query string, and we do not measure any page in the learner, teacher, parent or staff areas, nor web pages opened from inside the app.

Changes to this policy

If we make an important change, we will tell you in the app or by email before it takes effect and update the date above. If new consent is needed, we will ask before using data for the new purpose.

Contact

Thanapon Thanadunpremdet · 203/79 Zelle Salaya 3, Zelle Salaya Condo, Nakhon Pathom 73170, Thailand · Email Contact.areazero.ai@gmail.com