1. Responsible operator
Teacher Gradebook is a personal tool that helps teachers organize classroom information. The publisher and contact for personal data requests is the individual operating Teacher Gradebook; an email address and contact address will be published before accounts or cloud services are enabled. Once accounts become available, this operator will determine the purposes and methods of processing account information, analytics and cloud backups. Depending on the relationship between the teacher, school and publisher, roles concerning student data must be defined in the specific implementation agreement.
2. Scope and usage choices
You can work locally without an account. Class data stays on your device or in browser storage unless you export it or explicitly enable sync. Version 1.2.0 supports Google/Apple sign-in; signing in does not grant Pro or upload gradebooks. Guest data and each account have separate workspaces. Optional anonymous analytics does not include gradebook content. Website technical logs may include IP, access time and browser information, separately from installation analytics.
3. Types of data processed
- Local data: academic years, classes, student details, grades, rewards, notes and information you enter.
- Exports: JSON backups and reports you save; JSON is not password-encrypted.
- Optional analytics: random installation identifier, platform, app version and launch times, without student names or grades.
- Accounts: name, email, Google/Apple identifier, plan, sessions and linked providers. Provider secrets are not shipped to the app.
- Cloud after opting in: the account gradebook data, revision, time, size and up to five earlier versions. Guest data is not automatically copied into the account.
4. Purposes and legal basis for processing
Local data supports the teacher’s work within the app. When accounts become available, account data will be used for authentication, session security, support, plan entitlements and user requests. Optional analytics counts devices, app versions and daily usage; gradebook contents are not sent for this purpose. Technical website data may be necessary for operations, abuse prevention and troubleshooting.
We will explain the purposes, data types, recipients and applicable legal basis when each new feature is enabled. Where consent is required by law, it must be given through an affirmative action and may be recorded separately. Continuing to use local features alone does not mean consenting to upload student data to the cloud.
5. Sync and protective measures
Only accounts with active Pro can sync. Enable and confirm sync separately in Account & sync; signing in does not enable it. Whole-account sync runs while the app is open. If two devices have changed, you choose which copy to use, with a safety copy saved before replacement. Up to five safety copies are kept locally.
Cloud data is encrypted with the server key, not end-to-end encryption; someone with authorized access to the key and server can decrypt it. Web sessions use an HttpOnly cookie; native apps use operating-system credential storage. Admin access is role-controlled, and Pro grants/revocations are recorded.
6. Sharing, providers and processing locations
We do not sell student data or use gradebook contents for advertising. If you choose Google or Apple sign-in, or payment through an app store or payment gateway, the relevant provider will process the necessary data under its own policies. Hosting, email, backup and other processors selected in the future will receive only the data needed to provide their services, subject to the relevant agreements and safeguards. Data may be provided in response to a valid request from a competent authority under the law.
[Before cloud services are enabled: disclose provider names, storage countries, any international data transfers and the appropriate safeguards.] Server locations should not be assumed before infrastructure is finalized.
7. Retention and deletion
Local data remains until you delete it in the app, clear browser data or uninstall the app; you manage and delete exported files separately. When you turn analytics off, the app stops sending launch events and attempts to request deletion of the installation identifier stored on the server; this server deletion may fail while offline. When Pro ends or expires, cloud backups stop updating; they are kept for 30 days for download and then permanently deleted from active storage. Emails are scheduled when the plan ends, seven days before deletion, one day before deletion and after deletion. Actual delivery depends on production email configuration. App sessions last up to 30 days. Infrastructure backups rotate through a daily cleanup which removes files older than 14 days; a deletion request does not rewrite those archives. Profiles remain until account deletion; transaction processing is not integrated. Some data may need to be retained longer to meet legal obligations or resolve disputes; the scope and duration will be stated.
8. Your rights and how to submit a request
You can view, edit, export or delete local data within the app’s capabilities. You can turn anonymous analytics on or off in settings. When a server account exists, you may request access, correction, provision, deletion or restriction of processing, withdraw consent where applicable and exercise other rights provided by law. We will reasonably verify your identity before handling requests to protect your data, and respond within the time limits required by applicable law. See the account deletion guide. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
9. Student data and minors
The product is intended for teachers and is not designed for students to create their own accounts. Names, grades and notes may relate to children. Teachers should check their authority, school rules and the appropriate legal basis before entering, exporting or requesting sync of data. Include only necessary data and avoid sensitive information unrelated to learning. A teacher’s confirmation does not replace the publisher’s obligations or any consent or representative authority required by law. Before cloud services are enabled for student data, the assessment of roles and procedures for protecting children’s data must be completed.
10. Contact and policy changes
[A support email address and privacy contact must be added before release.] When processing activities change substantially, particularly when accounts, behavioral analytics or cloud sync are enabled, we will update this policy and display an appropriate notice before the changes take effect.
References to the current legal framework: Law on Personal Data Protection No. 91/2025/QH15 and Decree No. 356/2025/NĐ-CP.