Privacy policy

Last updated 2026-08-05

In plain English

Your school decides what happens to your students' data. We only act on your instructions.

Each school's data lives in its own database — not a shared table with a column saying which school a row belongs to. That is a physical boundary, not a filter someone could forget to apply.

We do not sell data, do not run advertising, and there is no third-party tracking in the parent app.

Who is responsible for what

Your school is the data controller: you decide what student data to collect and why. Schoolory is the processor: we hold and process it on your instructions. Our Data Processing Agreement sets this out in contract form.

What we hold

For your staff: name, email, phone, job details, and whatever HR information you choose to record.

For students and parents: name, contact details, date of birth, classes, attendance, progress reports and tuition records — the things a school needs to run.

For us: your subscription and billing status. Card details are handled by Paddle and never reach our systems.

What we do not do

We do not use your data or your students' data to train AI models.

We do not embed advertising or analytics trackers in the parent portal. Parents opening a link about their child are not a marketing audience.

We do not sell or rent data to anyone, in any form, including aggregated.

AI features

AI features send the specific records needed for that task — a student's attendance figures, for example — to Anthropic, who process it and return a result. Anthropic do not train on it.

AI is off until you switch it on. You can use your own Anthropic key if you would rather the data go through your own account.

Where your data lives

Databases are hosted on Turso. You can choose the region when your workspace is created, so a school in the EU can keep data in the EU.

Data is encrypted in transit and at rest, and backups are held to the same standard.

How long we keep it

For as long as you have an account, plus 30 days after you close it. After that the database is deleted — not archived, not flagged inactive.

Your rights

Parents and staff should contact the school first: the school holds the relationship and the records.

If you need to reach us directly, email support@schoolory.com. We answer within five working days.