Privacy Notice

1. Controller and contact

CLASSENDO LTD is the controller of personal information described in this Notice. Our company number is 17373861, our registered office is Flat 20, Danesmoor House, 569 Hob Moor Road, Yardley, Birmingham, B25 8XB, United Kingdom, and privacy enquiries can be sent to classendosupport@gmail.com.

2. Information we collect

• Account information: email address, username, country or region, encrypted authentication credentials, profile details and account identifiers.
• Teaching content: lesson sets, cards, worksheets, prompts, uploaded images, filenames and choices about whether content is public or private.
• Billing information: Stripe customer and subscription identifiers, plan, billing interval, payment status, country, transaction and refund records. Stripe, not Classendo, handles complete payment-card details.
• Usage information: features used, searches, resource interactions, session identifiers and timestamps when analytics consent is given or where collection is strictly necessary.
• Technical and security information: IP address, browser and device information, authentication logs, error logs and information used to prevent abuse and secure the service.
• Communications: support, feedback, refund, safety, copyright and complaint correspondence.

3. Purposes and lawful bases

• Contract: to create and administer accounts, provide features, save resources, process subscriptions, supply Premium and respond to service requests.
• Legal obligation: to keep accounting records, respond to lawful requests, protect consumer rights and comply with tax, company, data-protection and online-safety duties.
• Legitimate interests: to secure Classendo, prevent fraud, moderate public content, diagnose faults, understand service performance and improve teaching tools, where those interests are not overridden by your rights.
• Consent: for non-essential analytics/storage technologies and any optional marketing. Consent can be withdrawn at any time without affecting prior lawful processing.

4. Children and pupil information

Classendo accounts are for adults aged 18 or over. We do not knowingly offer accounts directly to children. Teachers must not upload identifiable pupil information or sensitive student material. If you believe a child has created an account or pupil data has been uploaded, contact us so we can investigate and remove it where appropriate.

5. Providers and recipients

We share information only where necessary with service providers acting for us or as independent controllers. These currently include Supabase for authentication, databases and file storage; Stripe for checkout, subscriptions, fraud prevention and refunds; our website hosting and infrastructure providers; and, when an AI feature is used, relevant AI-processing providers such as OpenAI or Replicate. We may also share information with professional advisers, regulators, courts, law enforcement or a purchaser of the business where legally permitted.

Public usernames and deliberately public lesson content can be viewed by other Classendo users. Do not make information public if you do not want other users to access or copy it.

6. International transfers

Some providers process information outside the United Kingdom. Where required, we use recognised safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, and contractual and technical protections. Contact us to request further information about applicable safeguards.

7. Retention

• Account and saved teaching content: while the account is active, then normally deleted or anonymised within 30 days of a valid deletion request, subject to backups and legal exceptions.
• Backups: normally overwritten within 90 days.
• Billing, tax and transaction records: generally six years after the relevant financial period or longer if legally required.
• Security and access logs: normally up to 12 months, longer where needed to investigate an incident or prevent abuse.
• Content reports, complaints and enforcement records: normally up to three years after closure, longer where litigation, safeguarding or legal obligations require.
• Cookie-consent records: for as long as needed to demonstrate and respect the latest preference.

8. Your rights

Depending on your location and the lawful basis, you may have rights to access, correct, erase, restrict, object to or receive a portable copy of personal information, and to withdraw consent. You may also complain to the UK Information Commissioner's Office or your local data-protection authority.

Send requests to classendosupport@gmail.com. We may need to verify your identity. We will not discriminate against you for exercising a privacy right.

9. Security and automated decisions

We use access controls, authentication, encryption in transit, restricted administrative access and other proportionate safeguards. No online service can guarantee absolute security.

Classendo does not currently make solely automated decisions that produce legal or similarly significant effects for users. Automated security signals may assist human review of fraud, abuse or content reports.

10. Updates

This Notice is effective from 5 August 2026. We will update it when our processing or legal obligations materially change and will bring significant changes to users' attention where appropriate.