Privacy Policy
Information on how your data is handled for the CHETI service
1. Controller
Provider and person responsible for content
Dr. Nils Fitting
c/o RPTU Kaiserslautern-Landau
Department of Chemistry / Chemistry Didactics
Erwin-Schrödinger-Straße 52
67663 Kaiserslautern
Contact
Email: nils.fitting@chem.rptu.de
Project name
CHETI – AI learning platform for chemistry didactics
2. Types of data processed
We distinguish between two user groups:
a) Teachers (registered users)
To use CHETI as a teacher and manage student access, you must register. We store:
- First and last name
- Email address
- Password (encrypted)
- Associated school type/institution (optional)
Legal basis: Art. 6(1)(b) GDPR (contract performance for account provision).
b) Students / learners (anonymous or pseudonymous use)
Students use the service via access codes or simplified logins generated by the teacher. We do not store real names or email addresses for these accounts. We only store:
- Generated user ID (pseudonym)
- Chat histories and inputs (prompts)
- Usage statistics (e.g. number of messages, selected topics)
Important: If the teacher keeps an external list assigning codes to students (e.g. "Code A1 = Lisa"), this constitutes pseudonymized data. The teacher alone is responsible for the assignment.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing the learning function).
3. Use of AI models & data transfer
CHETI allows different AI models to be selected for generating responses. Your inputs (prompts) are forwarded to the respective provider.
Please note when selecting a model: you decide which model you use.
AI models used (third-party providers)
Depending on the selected model, data is transferred to providers in the USA or within the EU. US providers are certified under the EU-U.S. Data Privacy Framework (DPF) or protected by standard contractual clauses.
Providers in the USA: OpenAI (GPT), Google (Gemini), Anthropic (Claude).
Provider in the EU: Mistral AI (France), also for text recognition (OCR) of uploaded images and documents.
4. Cookies & local storage
We use technically necessary cookies (session cookies) and your browser’s local storage to maintain login status and save settings such as the selected AI model or dark mode.
There is no use of third-party tracking tools (such as Google Analytics) for advertising purposes.
5. Storage duration & server logs
- Server logs: IP addresses are stored for security purposes for 7 days and then deleted.
- Chat data: Chat histories are stored in the database so they can be shown to you in the history. You can delete them in the app at any time.
- Accounts: Teachers can request deletion of their account at any time by emailing the controller. This also deletes all linked student data.
6. Your rights
You have the right to access, rectification, deletion, and restriction of processing of your data.
Because we often do not have real names for student accounts, we can only fulfill access rights here if you provide the corresponding user ID.
Supervisory authority: State Commissioner for Data Protection Rhineland-Palatinate.