Classori
Back

Privacy Policy

Last updated: May 31, 2026

At Classori we take the privacy of families — and above all of children — very seriously. This Privacy Policy explains what personal data we process, for what purposes, on what legal basis, and what rights you have. By using Classori (the website classori.com, our web and mobile apps, and the associated services, hereinafter the “Service”) you accept the practices described here.

We comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Spanish data protection law, as well as with the privacy legislation applicable to users in the United States.

1. Data controller

The controller of the Service is Angel Garcia Llompart (“Classori”, “we”). You can contact us about any privacy matter at privacidad@classori.com.

Classori will in the future be provided through a company (LLC). When that transition happens, we will update this policy to indicate the new responsible entity, without changing the safeguards described here.

2. Who decides about the data: school and Classori

Classori is a tool that schools use to manage their day-to-day operations. With regard to the data of students and their families, the school acts as the data controller (it decides what data to enter and for what educational purpose), and Classori acts as the data processor: we process that data only following the school’s instructions and to provide it with the Service.

With regard to the data of your own user account (email, name, preferences) and the operation of our platform, Classori acts as the controller.

3. What data we collect

Account and contact data

  • First and last name.
  • Email address.
  • Role (management, educational team or family) and the school you belong to.
  • Profile photo, if you choose to add one.
  • Notification and language preferences.

Data entered by the school about minors

  • The child’s name, date of birth and classroom.
  • Observations, photos and videos of classroom activity.
  • Lesson progress, attendance, portfolio and reports.
  • Emergency contacts and people authorized for pick-up.
  • Information relevant to care (e.g. allergies or medical notes) when the school chooses to record it.

Payment data (schools only)

For billing of the Service we collect the necessary subscription data. Card details are processed directly through our payment provider (Stripe) and are not stored on our servers.

Technical data

We automatically log minimal technical data necessary for security and operation (IP address, device and browser type, device identifier for sending push notifications, and error logs). We do not use this data for advertising purposes.

4. What we use your data for and legal basis

  • Providing the Service (managing accounts, classrooms, documentation and family–school communication). Basis: performance of the contract and, for minors’ data, the contract with the responsible school.
  • Sending notifications (push and email) about classroom activity, according to your preferences. Basis: performance of the contract and legitimate interest; you can adjust or disable them at any time.
  • Billing and payments for the Service to schools. Basis: performance of the contract and legal obligations.
  • Security, fraud prevention and support. Basis: legitimate interest and compliance with legal obligations.
  • Improving the Service through aggregated or anonymized data. Basis: legitimate interest.

5. Children’s data

Children’s data is entered and managed under the school’s responsibility, within the framework of the educational relationship with families. Classori does not collect children’s data directly from them or for commercial purposes. We apply reinforced role-based access controls so that only authorized staff and the corresponding families can see each child’s information.

We never use facial recognition, fingerprints or any biometric data of minors, nor surveillance, nor targeted advertising.

6. Who we share data with

We do not sell or rent your personal data to third parties, nor do we use it for advertising. We only share it with providers that help us deliver the Service (“processors”), under contract and confidentiality and security obligations:

  • Supabase — authentication and database.
  • Vercel — application hosting.
  • Stripe — payment processing (schools only).
  • Anthropic — AI assistant features for school staff (queries and summaries about classroom data). Data sent through the API is not used to train models.
  • Apple (APNs) and Google (Firebase Cloud Messaging) — delivery of push notifications to your devices.
  • Email delivery providers for email notifications.

We may also disclose data when required by law, a competent authority or a court order, or to protect the rights and safety of individuals.

7. International transfers

Some of our providers process data on servers located outside the European Economic Area, mainly in the United States. In those cases we ensure an adequate level of protection through the mechanisms provided for in the GDPR (such as the European Commission’s Standard Contractual Clauses or recognized adequacy frameworks).

8. Data retention

We keep data while the account is active and the school maintains its relationship with the Service. When an account or a school is closed, we delete or anonymize the data unless we must retain it to comply with legal or accounting obligations or to defend against claims.

9. Your rights

You can exercise the following rights at any time by writing to us at privacidad@classori.com:

  • Access to the data we hold about you.
  • Rectification of inaccurate or incomplete data.
  • Erasure (“right to be forgotten”) of your data.
  • Objection and restriction of processing.
  • Portability of your data in a machine-readable format.
  • Withdrawing consent where processing is based on it.

Where the data relates to educational activity, we may need to direct your request to the responsible school. In any case we will inform you of how it is resolved. If you believe we have not handled your request properly, you have the right to complain to the Spanish Data Protection Agency (www.aepd.es) or to the supervisory authority in your country.

10. Deleting your account

You can delete your account directly from the app, in Settings (school staff) or in My profile (families), via the “Delete my account” option. When you do, we delete your profile and associated data (including notification tokens), except information we are legally required to keep.

11. Security

We apply reasonable technical and organizational measures to protect your data: encryption in transit and at rest, role-based access control, backups and monitoring. You are responsible for keeping your credentials confidential; let us know if you suspect unauthorized use of your account.

12. Cookies

We use only the technical cookies and technologies necessary to keep your session and the proper functioning of the Service. We do not use advertising cookies or third-party tracking for commercial purposes.

13. Changes to this policy

We may update this Privacy Policy to reflect operational or legal changes. If the change is significant, we will notify you by email or within the Service. The “last updated” date indicates the version in force.

14. Contact

For any questions about privacy or about this policy, write to us at privacidad@classori.com.