Privacy Policy

Last updated: May 28, 2026

1. Who We Are

Classlinks is operated by Classlinks, located in Reem Island, Abu Dhabi. For any privacy-related inquiries, you can reach us at hello@classlinks.app.

2. Data We Collect

We collect the following information when you use our service:

  • Account data — email address, name, and authentication credentials (Google OAuth or email/password).
  • Family data — children's names, subjects, and class schedules you create.
  • Uploaded content — documents, links, and files you attach to lessons.
  • Usage data — pages visited, features used, and device/browser information collected automatically.
  • Payment data — the service is free during beta, so we do not currently collect any payment information. If we introduce paid plans, payments will be handled by a third-party provider and we will not store card numbers or payment credentials.

3. How We Use Your Data

  • To provide and maintain the scheduling service.
  • To manage your account and family members.
  • To send service-related notifications (account and service updates).
  • To improve the service based on usage patterns.

4. Data Sharing

We do not sell or rent your personal data. We share data only with:

  • Supabase — our database and authentication provider.
  • Vercel — our hosting provider.
  • Google Drive — only if you connect your account, to sync lesson materials.
  • Creem — to process payments securely.

All providers are bound by their own privacy policies and data processing agreements.

5. Children's Data & Parental Consent

Protecting children's information is central to how this service works. The service is designed to be set up and operated by a parent or legal guardian, who acts on behalf of their children.

  • Parent/guardian accounts only.Accounts must be created by an adult (18+). By adding a child's information, you confirm that you are the parent or legal guardian and that you consent to us processing that information to provide the service.
  • No direct collection from children.We do not knowingly collect personal information directly from children. Children's names and schedule details are entered by the parent/guardian who owns the account.
  • Limited data.We only store the minimum needed to run a schedule: a child's first name (or nickname), and the subjects, classes, times, and any files you choose to add. We do not require a child's surname, address, photo, or contact details.
  • No advertising or profiling.We never use children's data for behavioural advertising, and we never sell or rent it.
  • Parental control.The parent/guardian can view, edit, export, or delete a child's information at any time, directly in the app or by contacting us at hello@classlinks.app.

This approach is intended to align with children's-privacy requirements across jurisdictions, including the U.S. Children's Online Privacy Protection Act (COPPA), the EU/UK GDPR provisions on children's data (including Article 8), and the UAE Personal Data Protection Law (PDPL). If you believe a child's data has been provided to us without proper authority, contact us at hello@classlinks.app and we will delete it promptly.

6. Data Storage & Security

Your data is stored securely on Supabase infrastructure. We use encryption in transit (HTTPS/TLS) and enforce row-level security policies to ensure that each family can only access their own data. Authentication is handled via secure tokens and optional Google OAuth.

7. Data Retention

We retain your data for as long as your account is active so your schedules and files stay available to you. You can delete individual records (kids, subjects, schedules, files) at any time in the app. To request full deletion of your account and all associated data — including all children's information — contact us at hello@classlinks.app, and we will action it without undue delay.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Export your data in a portable format.
  • Withdraw consent for optional data processing at any time.

To exercise any of these rights, contact us at hello@classlinks.app.

9. International Data Transfers

We use infrastructure providers (such as Supabase and Vercel) that may store and process data on servers located in different countries. Wherever your data is processed, we require these providers to protect it under their own data processing agreements and to apply safeguards consistent with this policy and applicable data-protection laws.

10. Cookies

We use essential cookies for authentication and session management. For full details, see our Cookie Policy.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance of the updated policy.