Privacy Policy

EduTrackly is an educational platform that helps educational institutes manage communication, homework, attendance, and academic resources. The platform is operated by the EduTrackly Team.

Contact us at any time for privacy-related concerns:

3.1 Account & Profile Information

When you register or are invited to EduTrackly, we collect:

• Full name and display name
• Email address
• Role (Admin, Teacher, or Student)
• Institute and group membership
• Profile information you voluntarily add (e.g., profile photo, bio)

3.2 Activity & Usage Data

While using EduTrackly, we collect:

• Homework submissions and attached files
• Chat messages sent within groups
• Files and media shared through the platform
• Attendance records (automatically generated when homework is submitted)
• Routine schedules and academic materials uploaded by teachers
• Notifications generated and received

3.3 Technical & Security Data

For security, support, and abuse prevention, we collect the following login and session data:

• Login email address
• Login status (successful or failed)
• IP address at time of login
• Device type, browser, and operating system
• Approximate location (derived from IP address)
• Date and time of login events

3.4 Support Access Logs

If a support team member needs to access your account to resolve an issue, any access to your public profile data is logged automatically. This includes which support member accessed the account, what data was viewed, and the date and time of access.

We use the data we collect strictly for the following purposes:

• To provide and operate the EduTrackly platform and its features
• To authenticate users and maintain secure sessions (via cookies)
• To enable communication between teachers, students, and admins within your institute
• To automatically record attendance when students submit homework
• To support institute admins and teachers in managing their groups and members
• To send notifications about platform activity relevant to you
• To investigate and resolve reported issues or disputes
• To detect, prevent, and respond to fraud, abuse, or illegal activity
• To improve platform performance and user experience

EduTrackly uses Supabase as its cloud storage and database infrastructure. All files uploaded to the platform — including homework submissions, chat attachments, profile photos, and study materials — are stored on Supabase servers.

The EduTrackly platform administrator has technical access to files stored on Supabase. This access exists solely for the purpose of platform maintenance, support, and security. It is not used for surveillance or commercial purposes.

Please note: Supabase has its own data processing and retention policies. We recommend reviewing Supabase's Privacy Policy at supabase.com/privacy for details.

5.1 File Deletion

When you delete a file from EduTrackly, that file is removed from the platform. We make reasonable efforts to ensure deletion is reflected in our storage. However, we cannot guarantee the immediate or complete deletion of data from all Supabase infrastructure layers (such as backups or caches), as this is subject to Supabase's own data retention policies.

EduTrackly uses cookies strictly for authentication and session management. These cookies are essential for keeping you logged in and ensuring your session is secure. We do not use tracking, advertising, or analytics cookies.

• Session cookies: Maintain your login state while you use the platform
• Authentication tokens: Verify your identity securely across requests

The EduTrackly platform administrator operates a secure admin panel with the following capabilities, used exclusively for platform operations, security, and user support:

• View which users have joined the platform, which institutes they belong to, and which groups they are members of
• View login history including status, device, browser, OS, IP address, location, and date
• Suspend, block, or permanently delete accounts that violate our policies
• Monitor failed login attempts for security purposes

We do not sell or share your personal data with third parties for commercial purposes. Your data may only be disclosed in the following limited circumstances:

• With Supabase: As our infrastructure provider, Supabase processes and stores data on our behalf. They act as a data processor under our instructions.
• Legal obligations: If required by applicable law, court order, or government authority, we may disclose data to comply with legal obligations.
• Safety and security: To protect the rights, property, or safety of EduTrackly users or the public, we may share information with appropriate authorities.

We do not share your data with advertisers, data brokers, or any third party for marketing or commercial purposes.

EduTrackly is an educational platform. The following content is strictly prohibited:

• Illegal content of any kind
• Adult or sexually explicit content
• Content that exploits, harms, or endangers minors
• Harassment, hate speech, or abusive material
• Content that violates any applicable law or regulation

We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse. These include:

• Secure authentication using JSON Web Tokens (JWT)
• CSRF (Cross-Site Request Forgery) protection on all sensitive requests
• Role-based access control ensuring users only access data relevant to their role
• Encrypted data transmission over HTTPS
• Audit logging of administrative and support access

While we do our best to protect your data, no system is completely immune to security risks. If you believe your account has been compromised, please contact us immediately at Contact Us.

You have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you
• Correction: You can update or correct inaccurate information in your profile at any time
• Deletion: You can delete your account at any time. Your account will be deactivated and permanently deleted after a 30-day grace period. You can recover your account by logging in within those 30 days.
• Objection: You can object to certain uses of your data by contacting us

To exercise any of these rights, please contact us at Contact Us. We will respond to your request within a reasonable timeframe.

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account and profile data: When you delete your account, it enters a 30-day grace period. During this time your account is deactivated but not permanently removed. After 30 days, your account and associated data are permanently deleted from our active systems.
• Files and uploads: Deleted from the platform when you remove them, subject to Supabase infrastructure retention policies
• Login and security logs: Retained for a reasonable period for security and audit purposes
• Chat messages: Retained while your account and group memberships are active

Upon permanent deletion (after the 30-day grace period), we will remove your personal data from our active systems. Some data may remain in backups for a limited period as governed by our infrastructure provider's policies.

EduTrackly does not have a minimum age requirement, as the platform is designed to serve students of all ages in an educational context. However, if EduTrackly is being used by students under the age of 13, it is the responsibility of the educational institute (and the admin who registers the institute) to ensure appropriate parental or guardian consent has been obtained in accordance with applicable local laws.

EduTrackly does not knowingly collect data from minors for any purpose beyond what is necessary to provide the educational services described in this policy.

We may update this Privacy Policy from time to time as the platform evolves. When we make significant changes, we will notify users through the platform or by email. The updated policy will always be available on our website with the revised effective date.

Continued use of EduTrackly after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us: