Privacy policy
Version 1.0 · Effective 2026-10-25
1.What we collect
Your teacher account: name and email address; the password is stored hashed by the authentication service and is never visible to us. The student data you enter: name, grade, class, grades, submissions and interventions. We do not collect contacts, location, advertising identifiers, or your behaviour outside the app.
2.Who can see it
You. Every student table is bound to a teacher id, and the database itself refuses any read or write belonging to another teacher, even with a valid-looking student id. No member of staff has default access to your records.
3.AI processing
When you request analysis, signals are sent to the model provider: percentages, deltas, counts of assessments and counts of missing submissions, with the student referenced as s1 rather than by name. The code checks the payload before sending and aborts if any name appears. Free-text feedback and assignment names are never sent. With no provider configured, nothing is sent at all.
4.Retention
Student data stays until you delete it. Deleting hides the student and their records from every screen immediately, keeps them restorable for 30 days, then removes them permanently along with their grades, submissions and alerts. One audit line remains without a name: that a permanent deletion ran, and when.
5.Your rights
You can export or delete your students' records at any time, and ask for your whole account to be deleted. We answer access, correction and deletion requests within 30 days, except for what law or a security audit requires us to keep.
6.Security
Traffic is encrypted, sessions live in cookies that scripts cannot read, no secrets are printed to logs, and access control is never implemented by hiding interface elements.
7.Contact
For any privacy question, write to the service owner at the address published on the About page, with the word privacy in the subject line so it reaches the right place.