Privacy policy

This policy explains how personal information is handled in ClaseAlDía for customers in Canada. There are two roles, because responsibility is different in each.

1. Who is responsible and how to contact us

ClaseAlDía is run by an individual based in Spain, identified in the legal notice. For any privacy question, write to soporte@tuclasealdia.com.

2. Your account information

• Account details: name, email, password (stored only as an irreversible hash), centre name and, if you add them, a phone number and contact email.
• Subscription details: plan, status, trial and renewal dates. Payment is handled by Link, LLC (Stripe), which sells the subscription as merchant of record; ClaseAlDía never sees or stores your card details.
• Technical data: IP address and access logs needed for security, abuse prevention and rate limiting.
• Messages you send to support.

We use this information to create your account and provide the Service, to send you service notices (welcome, end of trial, password reset, important changes), to keep the Service secure, to answer your questions and to meet legal obligations such as tax. We do not sell personal information, share it for cross-context behavioral advertising or use it for targeted advertising.

Support requests

Requests you send from the app or by email (and any screenshots you attach) are kept so we can help you and are deleted when you delete your account. Questions sent from the website without an account (name, email, message and the page you wrote from) are used only to reply. Please don’t include students’ information in requests or screenshots unless it is strictly necessary.

Use of artificial intelligence. An AI assistant (Claude, by Anthropic) reads support requests to sort them and drafts some replies. It may answer how-to questions directly; proposed changes to the service and sales or account questions are reviewed and approved by a person before you get a reply. So that the assistant can work, a copy of each request goes through a private GitHub repository without email addresses or phone numbers, with names replaced by pseudonyms and the text encrypted; the file is deleted once the request has been dealt with, and what remains in the repository history is encrypted. Notices of new requests and proposed replies also reach the owner’s mailbox, hosted on Gmail (Google).

How long we keep it

For as long as your account is active. If you delete your centre, your account information and everything you entered are deleted. We may keep the minimum information needed, for the periods the law requires, to deal with possible claims and tax obligations. Deleted data may remain for a limited time in the database’s recovery backups until they are overwritten.

3. Student and family information

The student, family, attendance, schedule and payment information that each centre enters into ClaseAlDía belongs to that centre, which decides why and how it is used. ClaseAlDía processes it only on behalf of, and on the instructions of, the centre, under the data processing agreement the centre accepts when signing up. We do not use it for our own purposes: no advertising, no profiling and no passing it on to third parties.

• Requests go to the centre. If you are a student or a parent and want to see, correct or delete your information, contact your tutor or centre. If you write to us, we will pass your request to the centre and help it respond.
• Each centre is responsible for telling families what it collects and, before entering a child’s information, for obtaining the consent of a parent or guardian where the laws that apply to you (in Quebec, consent for a child under 14 is given by the person having parental authority) requires it.
• Online enrolment form: on the Centre and Centre+ plans, a centre can publish a form for families to apply for a place. The information sent (student’s name and, optionally, date of birth; contact person’s name, email and, optionally, phone; groups requested and comments) is collected on behalf of that centre. We record the acceptance of the centre’s privacy information and the confirmation of being the child’s parent or guardian, keep a pseudonym of the IP address (never the address itself) to prevent abuse, and delete declined requests after 90 days.

4. Children

ClaseAlDía is not aimed at children: the people who sign up are adult professionals. We do not knowingly collect personal information directly from children; information about children is entered by the centre, or by a parent or guardian on the enrolment form, and the family portal only displays information.

5. Service providers

Cloudflare and Resend routinely process student and family information and are bound by obligations equivalent to ours. GitHub, Anthropic and Google can receive such information only if a support request contains it; to limit this, we remove email addresses and phone numbers, replace names with pseudonyms and encrypt the text before it goes to GitHub. If we add or change a provider that processes student information, we will tell customers by email reasonably in advance.

6. Where your information is stored

Your information is stored in the European Union, on Cloudflare infrastructure, and some of the providers listed above process it in the United States. It is therefore stored and processed outside Canada and outside Quebec, where it is protected by the GDPR and by contractual safeguards, and it may be accessible to the courts and authorities of those places under their laws.

7. Security

We apply reasonable technical and organizational safeguards: encrypted connections (HTTPS), hashed passwords, family-portal links with random identifiers that can be regenerated, role-based access and limits on login attempts. No measure is infallible. If a breach of security safeguards (a confidentiality incident, in Quebec) creates a real risk of significant harm, we will notify you and the competent authorities as the law requires.

8. Your rights

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and the provincial laws that apply to you, including Quebec’s Act respecting the protection of personal information in the private sector (Law 25), you can ask to access the personal information we hold about you, to have it corrected and to withdraw your consent, subject to legal or contractual limits. Email soporte@tuclasealdia.com; we will answer within the time the law sets (30 days under PIPEDA and in Quebec). The person in charge of the protection of personal information is the owner of ClaseAlDía, identified in the legal notice.

Customers can also export and delete their data directly in the app. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d’accès à l’information (cai.gouv.qc.ca). Because ClaseAlDía is run from Spain, you can also contact the Spanish Data Protection Agency (aepd.es).

9. Cookies and similar technologies

The details are in the cookie policy. In short: the app uses one strictly necessary session cookie, the website uses cookie-free statistics and your browser keeps a few preferences (language, region) in its local storage.

10. Changes to this policy

If we make significant changes, we will tell you and update the date on this page. This policy follows the same rules as the Spanish privacy policy, which applies to every country.