Privacy policy

This policy explains how personal information is handled in ClaseAlDía for customers in the United States. There are two roles, because responsibility is different in each.

1. Who is responsible and how to contact us

ClaseAlDía is run by an individual based in Spain, identified in the legal notice. For any privacy question, write to soporte@tuclasealdia.com.

2. Your account information

• Account details: name, email, password (stored only as an irreversible hash), center name and, if you add them, a phone number and contact email.
• Subscription details: plan, status, trial and renewal dates. Payment is handled by Link, LLC (Stripe), which sells the subscription as merchant of record; ClaseAlDía never sees or stores your card details.
• Technical data: IP address and access logs needed for security, abuse prevention and rate limiting.
• Messages you send to support.

We use this information to create your account and provide the Service, to send you service notices (welcome, end of trial, password reset, important changes), to keep the Service secure, to answer your questions and to meet legal obligations such as tax. We do not sell personal information, share it for cross-context behavioral advertising or use it for targeted advertising.

Support requests

Requests you send from the app or by email (and any screenshots you attach) are kept so we can help you and are deleted when you delete your account. Questions sent from the website without an account (name, email, message and the page you wrote from) are used only to reply. Please don’t include students’ information in requests or screenshots unless it is strictly necessary.

Use of artificial intelligence. An AI assistant (Claude, by Anthropic) reads support requests to sort them and drafts some replies. It may answer how-to questions directly; proposed changes to the service and sales or account questions are reviewed and approved by a person before you get a reply. So that the assistant can work, a copy of each request goes through a private GitHub repository without email addresses or phone numbers, with names replaced by pseudonyms and the text encrypted; the file is deleted once the request has been dealt with, and what remains in the repository history is encrypted. Notices of new requests and proposed replies also reach the owner’s mailbox, hosted on Gmail (Google).

How long we keep it

For as long as your account is active. If you delete your center, your account information and everything you entered are deleted. We may keep the minimum information needed, for the periods the law requires, to deal with possible claims and tax obligations. Deleted data may remain for a limited time in the database’s recovery backups until they are overwritten.

3. Student and family information

The student, family, attendance, schedule and payment information that each center enters into ClaseAlDía belongs to that center, which decides why and how it is used. ClaseAlDía processes it only on behalf of, and on the instructions of, the center, under the data processing agreement the center accepts when signing up. We do not use it for our own purposes: no advertising, no profiling and no passing it on to third parties.

• Requests go to the center. If you are a student or a parent and want to see, correct or delete your information, contact your tutor or center. If you write to us, we will pass your request to the center and help it respond.
• Each center is responsible for telling families what it collects and, before entering a child’s information, for obtaining the consent of a parent or guardian where the laws that apply to you, including any state student-privacy laws requires it.
• Online enrollment form: on the Center and Center+ plans, a center can publish a form for families to apply for a place. The information sent (student’s name and, optionally, date of birth; contact person’s name, email and, optionally, phone; groups requested and comments) is collected on behalf of that center. We record the acceptance of the center’s privacy information and the confirmation of being the child’s parent or guardian, keep a pseudonym of the IP address (never the address itself) to prevent abuse, and delete declined requests after 90 days.

4. Children

ClaseAlDía is not aimed at children: the people who sign up are adult professionals. We do not knowingly collect personal information directly from children; information about children is entered by the center, or by a parent or guardian on the enrollment form, and the family portal only displays information.

5. Service providers

Cloudflare and Resend routinely process student and family information and are bound by obligations equivalent to ours. GitHub, Anthropic and Google can receive such information only if a support request contains it; to limit this, we remove email addresses and phone numbers, replace names with pseudonyms and encrypt the text before it goes to GitHub. If we add or change a provider that processes student information, we will tell customers by email reasonably in advance.

6. Where your information is stored

Your information is stored in the European Union, on Cloudflare infrastructure, and some of the providers listed above process it in the United States.

7. Security

We apply reasonable technical and organizational safeguards: encrypted connections (HTTPS), hashed passwords, family-portal links with random identifiers that can be regenerated, role-based access and limits on login attempts. No measure is infallible. If a security incident affects your personal information, we will notify you and the authorities as the law requires.

8. Your rights

Depending on the state where you live (for example California, Colorado, Connecticut, Virginia or Utah), you may have the right to know what personal information we hold about you, to get a copy of it, to have it corrected or deleted, and to opt out of its sale or use for targeted advertising. We do not sell personal information, share it for cross-context behavioral advertising or use it for targeted advertising, so there is nothing to opt out of. To make a request, email soporte@tuclasealdia.com; we will verify your identity before acting on it, you can use an authorized agent where the law allows, and we will not treat you differently for exercising your rights.

Customers can also export and delete their data directly in the app. If you are not satisfied with our answer, you can also contact the Spanish Data Protection Agency (aepd.es), because ClaseAlDía is run from Spain and is subject to the GDPR.

9. Cookies and similar technologies

The details are in the cookie policy. In short: the app uses one strictly necessary session cookie, the website uses cookie-free statistics and your browser keeps a few preferences (language, region) in its local storage.

10. Changes to this policy

If we make significant changes, we will tell you and update the date on this page. This policy follows the same rules as the Spanish privacy policy, which applies to every country.