Privacy Policy

Last Updated: January 6, 2025

This Privacy Policy describes how Student Portal ("we", "our", or "us") collects, uses, and protects your personal information when you use our application.

1. Information We Collect

We collect the following types of information:

  • Account Information: Name, email address, and profile information
  • Calendar Data: When you connect Google Calendar, we access your calendar events to sync with lessons
  • Lesson Information: Details about lessons, students, schedules, and payments
  • Usage Data: Information about how you use the application

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Student Portal service
  • Sync your lessons with Google Calendar
  • Send email notifications about lessons, payments, and reminders
  • Improve and optimize our application
  • Communicate with you about service updates

3. Google Calendar Integration

When you connect your Google Calendar:

  • We request read and write access to your calendar events
  • We use this access to import events and export lessons to your calendar
  • Your calendar access tokens are securely stored and encrypted
  • You can disconnect Google Calendar at any time from your profile settings
  • When you disconnect, we immediately delete your access tokens

Note: Student Portal's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Storage and Security

We take data security seriously:

  • All data is stored securely using Supabase infrastructure
  • Communication with our servers is encrypted using HTTPS/SSL
  • Access tokens are encrypted and stored securely
  • We implement industry-standard security measures

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We only share data:

  • With Google Calendar when you explicitly authorize the integration
  • With service providers necessary to operate the application (e.g., Supabase for data storage)
  • When required by law or to protect our rights

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct or update your information
  • Delete your account and associated data
  • Disconnect third-party integrations (like Google Calendar)
  • Export your data

7. Data Retention

We retain your data as long as your account is active. When you delete your account, we permanently delete your personal data within 30 days, except where we are required to retain it by law.

8. Cookies and Tracking

We use essential cookies to maintain your session and provide authentication. We do not use tracking cookies or third-party analytics that collect personal information.

9. Children's Privacy

While students may use our service, accounts must be created by adults (teachers or parents). We do not knowingly collect personal information from children under 13 without parental consent.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Google API Services Compliance

Student Portal's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.