Effective date: 11 February 2026

1. Introduction

KickstartCoders Ltd ("we", "our", or "us") operates the Smart Teacher mobile application and web platform at smart-teacher.net (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

We are the data controller for the personal data processed through the Service, as defined under the General Data Protection Regulation (GDPR) and applicable data protection laws. Our contact details are provided in section 14 below.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please do not use the Service.

2. Data Storage Model

Smart Teacher is a cloud-based application. All your teaching data — including classes, students, attendance records, grades, lesson plans, and schedules — is stored on our servers. This allows you to access your data from any device and ensures it is backed up automatically. Your data is stored in a PostgreSQL database hosted on Google Cloud Platform, with files and media stored in Google Cloud Storage.

3. Information We Collect

3.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Google, we receive your name, email address, and profile picture from Google.

3.2 Teaching Data

To provide our Service, we store information you create and manage, including:

School and organisation details
Class names, schedules, and settings
Student names, groups, and profiles
Attendance records
Grades, assignments, and assessment data
Lesson plans and planning schemes
Files and images you upload

This data is created and managed by you. You are responsible for the content you enter, including any student personal data. We process this data on your behalf to provide the Service.

3.3 AI-Generated Content

When you use AI-powered features (such as student reports or lesson plan generation), we send relevant teaching data (e.g., student grades, attendance, class context) to our AI provider to generate the requested content. See section 7 for details on our AI provider.

3.4 Payment Information

If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full credit card number or payment credentials on our servers. We receive and store limited billing information from Stripe, including your subscription status, payment history, and the last four digits of your payment method.

3.5 Usage and Analytics Data

We automatically collect certain information when you use the Service, including device type, operating system version, app version, screen views, feature usage events, and general interaction patterns. This data is pseudonymised and does not include your teaching content (student names, grades, etc.).

3.6 Account Usage Statistics

We collect aggregate usage statistics associated with your account, such as login history, platform used (web or mobile), and the number of classes, students, and courses you have created. This information is used for account management, enforcing plan limits, and understanding how the Service is used so we can improve it.

4. Legal Basis for Processing (GDPR)

Under the GDPR, we process your data on the following legal bases:

Contract (Art. 6(1)(b)) — Processing your account information and teaching data is necessary to provide the Service you have signed up for.
Legitimate interests (Art. 6(1)(f)) — We collect analytics data to improve the Service, monitor performance, and fix issues. We have assessed that this does not override your rights and freedoms.
Consent (Art. 6(1)(a)) — Where required by applicable law (e.g., for certain cookies or marketing communications), we obtain your explicit consent.
Legal obligation (Art. 6(1)(c)) — We may process data where required to comply with legal or regulatory obligations (e.g., tax records for paid subscriptions).

5. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service
Authenticate your identity and manage your account
Store and synchronise your teaching data across devices
Generate AI-powered content (student reports, lesson plans) when you request it
Process payments and manage subscriptions
Send essential service communications (account verification, password resets, security alerts)
Track account usage statistics for account management and plan enforcement
Analyse usage patterns to improve the Service and develop new features
Monitor app stability and diagnose crashes

6. Data Storage and Security

Your data is stored on Google Cloud Platform (GCP) infrastructure. We implement industry-standard security measures including:

Encryption of all data in transit using TLS 1.2+
Encryption of data at rest in our database and storage systems
Secure authentication via Firebase Authentication with support for multi-factor options
Tenant-level data isolation — each organisation's data is logically separated
Role-based access controls
Regular security monitoring, patching, and dependency updates
Secrets managed via Google Cloud Secret Manager

7. Third-Party Services

We use the following third-party services to operate the Service. Each processes data as described:

Firebase Authentication (Google) — Secure sign-in, account management, and Google Sign-In integration. Processes email, name, and authentication tokens.
Firebase Privacy Policy
Firebase Analytics (Google) — Anonymised app usage analytics. Collects device identifiers, app events, and usage data. Does not receive your teaching data.
Firebase Privacy Policy
PostHog — Product analytics and feature usage tracking. Collects pseudonymised event data. Does not receive your teaching data.
PostHog Privacy Policy
Sentry — Error tracking and stability monitoring for our backend services. Collects error reports and stack traces. Does not receive your teaching data.
Sentry Privacy Policy
Firebase Crashlytics (Google) — Crash reporting and stability monitoring for the mobile app. Collects device state, stack traces, and crash identifiers. Does not receive your teaching data.
Firebase Privacy Policy
Google Cloud Platform (PostgreSQL, Cloud Run, Cloud Storage) — Hosts our backend infrastructure, database, and file storage. All your teaching data is stored here.
Google Cloud Privacy Notice
Google Gemini AI — Powers AI features such as student reports and lesson plan generation. When you request AI-generated content, relevant teaching data (grades, attendance, class context) is sent to Google's Gemini API. This data is used solely to generate the requested content and is not used by Google to train AI models, per Google Cloud's data processing terms.
Google Cloud Privacy Notice
Stripe — Payment processing for subscriptions. Stripe processes your payment card details directly. We receive only limited billing information (subscription status, payment history, last four digits). We never see or store your full card number.
Stripe Privacy Policy
Resend — Transactional email delivery (account verification, password resets). Processes email addresses and email content necessary for delivery.
Resend Privacy Policy

These services may transfer data outside the European Economic Area (EEA). Where this occurs, appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or the service provider's participation in an approved transfer mechanism.

8. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

With your explicit consent
With the third-party service providers listed in section 7, subject to data processing agreements and confidentiality obligations
If required by law, regulation, or legal process
To protect the rights, safety, or property of KickstartCoders Ltd, our users, or others
In connection with a merger, acquisition, or sale of assets, in which case your data would remain subject to this Privacy Policy

9. Children's Privacy

Smart Teacher is designed for use by educators and school administrators, not by children directly. While teachers may enter student names and academic data into the Service, this data is managed by the educator and/or school. The educator acts as the data controller for student data they enter, and is responsible for ensuring they have appropriate legal basis (such as legitimate interest or consent from parents/guardians) to process that student data. We do not knowingly collect personal information directly from children under 16 (or the applicable age in your jurisdiction). If you believe a child has provided us with personal information without appropriate consent, please contact us at info@kickstartcoders.com and we will take steps to remove such information.

10. Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

Access (Art. 15) — Request a copy of the personal data we hold about you.
Rectification (Art. 16) — Request correction of inaccurate or incomplete personal data.
Erasure (Art. 17) — Request deletion of your account and all associated data.
Data portability (Art. 20) — Request an export of your data in a structured, commonly used, machine-readable format.
Restriction (Art. 18) — Request that we restrict processing of your data in certain circumstances.
Objection (Art. 21) — Object to processing based on legitimate interests, including profiling and analytics.
Withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@kickstartcoders.com. We will respond within 30 days (or sooner where required by law). You also have the right to lodge a complaint with your local data protection supervisory authority.

11. Account Deletion

You can delete your Smart Teacher account directly from within the app:

Open Smart Teacher
Go to Settings
Tap Delete Account
Confirm the deletion when prompted

This will permanently delete your account and all associated cloud data, including classes, students, grades, attendance records, lesson plans, AI-generated reports, and subscription records. This action cannot be undone.

12. Data Retention

We retain your data for as long as your account is active or as needed to provide you with the Service. Specifically:

Account and teaching data — Retained while your account is active. Permanently deleted within 30 days of account deletion.
Payment records — Retained as required by tax and financial regulations (typically 7 years for transaction records).
Analytics data — Retained in aggregate, anonymised form. Cannot be traced back to individual users after account deletion.
Crash reports — Retained for up to 90 days for debugging, then automatically purged.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Where required by law, we will seek your explicit consent to material changes. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Controller: KickstartCoders Ltd

Email: info@kickstartcoders.com