Privacy Policy

1. Introduction

[Company Name] ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you use the teacher-tools web application ("the Service").

We are registered in the United Kingdom. This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are (Data Controller)

For personal data relating to your account (name, email, billing information), [Company Name] is the data controller.

For Student Data you enter into the Service (student names, photographs, scores, and related information), you (the teacher, school, or institution) are the data controller, and [Company Name] is the data processor. We process Student Data only on your instructions and for the purpose of providing the Service to you.

Contact: legal@dekoder.dev

3. Information We Collect

3.1 Information You Provide

Account data: When you register, we collect your name, email address, and a password (hashed — we never store plaintext passwords).

Profile data: Any additional information you add to your profile.

User Content: Lesson materials, tests, notes, resource links, flashcard decks, audio files, images, and any other content you create or upload.

Student Data: Student names, photographs, assessment scores, team assignments, and other classroom-related information that you enter into the Service.

Communications: Messages you send to us (support requests, feedback, legal inquiries).

3.2 Information Collected Automatically

Usage data: We log basic technical information when you use the Service, including IP address, browser type, pages visited, and timestamps. This is used for security monitoring, debugging, and service improvement.

Server logs: Our hosting infrastructure maintains standard server logs including IP addresses, request paths, and response codes. These are retained for a limited period for operational purposes.

3.3 What We Do NOT Collect

• We do not use advertising cookies, tracking pixels, or third-party analytics that profile users across sites.
• We do not collect data directly from students. All Student Data is entered by authorised account holders.
• We do not sell personal data to third parties.

4. How We Use Information

We do not use Student Data for any purpose other than providing the specific classroom tools you use. Student Data is never used for marketing, profiling, advertising, or product analytics.

5. Student Data — Special Notice

Your responsibility: As the data controller, you are responsible for obtaining appropriate consent, complying with your institution's data protection policies, ensuring Student Data is accurate, and deleting it when no longer needed.

Our commitment: As the data processor, we process Student Data only to provide the classroom tools you activate. We do not use Student Data for our own purposes, do not mine or profile it, and delete it when you remove it or your account is terminated (subject to our 30-day retention window).

Display Mode: The Service includes a Display Mode toggle that locks the interface into view-only and hides editing controls. We recommend using Display Mode whenever the Service is displayed on a shared screen.

6. Cookies & Similar Technologies

The Service uses only essential cookies and browser storage:

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

7. Data Retention

You may request earlier deletion by contacting us. We will respond within 30 days.

8. Data Storage & Security

Where data is stored: The Service is hosted on servers provided by DigitalOcean in Bangalore, India.

Security measures: Data is encrypted in transit using TLS (HTTPS). Passwords are hashed using industry-standard algorithms. Database access is restricted to authorised systems. Regular security updates are applied. Access to production data is limited to essential personnel.

Your responsibilities: You are responsible for keeping your account credentials secure and for using appropriate access controls within your organisation.

9. International Data Transfers

If you are based in the UK, your personal data is transferred to and processed in India, where our servers are located. We rely on Standard Contractual Clauses (SCCs) as the appropriate safeguard under Article 46 of the UK GDPR. If you require a copy of the SCCs, contact legal@dekoder.dev.

10. Third-Party Service Providers

We do not share Student Data with any third party beyond our hosting provider (where it is stored) and email provider (where notification content may transit).

11. Your Rights (UK GDPR)

Under UK GDPR, you have the following rights: access, rectification, erasure, restriction of processing, data portability, objection to processing, and rights relating to automated decision-making (which we do not use).

To exercise any of these rights, contact legal@dekoder.dev. We will respond within one month. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

12. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect personal data directly from children. Student Data is entered by adult account holders who are responsible for obtaining appropriate consents.

13. Data Breaches

In the event of a personal data breach, we will notify the ICO within 72 hours where required, notify affected users without undue delay if there is high risk, and take immediate steps to contain and remediate the breach.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Continued use after changes take effect constitutes acceptance of the revised policy.

15. Contact & Complaints

Data protection inquiries: legal@dekoder.dev

Supervisory authority: Information Commissioner's Office (ICO) — ico.org.uk — 0303 123 1113