Privacy Policy

1. Data Controller

The data controller is Ipseron, contactable at: [email protected]. Our Data Protection Officer can be reached at the same address.

2. Data We Collect

We collect the following categories of personal data:

• Account Data: Name, username, email address (optional), role (kid/teacher/parent)
• Authentication Data: Hashed passwords or PINs
• Educational Data: Class schedules, homework assignments, completion status, progress records
• Usage Data: Login timestamps, feature interactions
• Communication Data: Notifications and messages within the Platform

3. Legal Basis for Processing

We process personal data based on:

• Consent (GDPR Article 6(1)(a)) — for optional features like email notifications
• Contract Performance (GDPR Article 6(1)(b)) — to provide Platform services
• Legitimate Interest (GDPR Article 6(1)(f)) — for security and improvement of services
• Legal Obligation (GDPR Article 6(1)(c)) — to comply with Romanian education regulations

4. Children's Data

For users under 16, we process data only with verifiable parental/guardian consent, in accordance with GDPR Article 8 and Romanian Law No. 190/2018 Article 9. We implement additional safeguards for minors' data, including restricted data sharing and enhanced security measures.

5. Data Sharing

Personal data is shared only within the Platform's educational context (e.g., teachers can view student homework status). We do not sell personal data. Data may be shared with:

• Hosting providers (for Platform operation), under data processing agreements
• Romanian authorities, when legally required

6. Data Retention

Personal data is retained for the duration of the account's active use plus 1 year after deletion, unless longer retention is required by Romanian education law. Authentication data is deleted immediately upon account removal.

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data (Article 15)
• Rectify inaccurate data (Article 16)
• Erase your data ("right to be forgotten") (Article 17)
• Restrict processing (Article 18)
• Data Portability (Article 20)
• Object to processing (Article 21)
• Withdraw consent at any time (Article 7(3))

8. Data Security

We implement appropriate technical and organizational measures to protect personal data, including encryption of passwords, secure HTTPS connections, and access controls aligned with GDPR Article 32.

9. Supervisory Authority

You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at [email protected].

10. Changes to This Policy

We will notify users of material changes to this Privacy Policy via the Platform. The latest version is always available at /privacy.

11. Contact

For privacy-related inquiries: [email protected]