Informative translation. The legal documents are binding in their Czech version. Read the Czech original.
Privacy notice
What data we process about you, why, and for how long.
Effective from 1 September 2026
Draft pending legal review. The text matches what the application actually stores and who it is passed to. Because much of it concerns minors, have it reviewed by a lawyer before launch.
1. Who the controller is
- Controller
- Sabina Horká, Veselá 199/5, 602 00 Brno-střed, Czechia, company no. 21945683
- Contact
- sabina.studoora@gmail.com, +420 736 119 277
The controller has not appointed a data protection officer; the scale of processing does not require one.
2. What data we process
About the pupil: name and surname, date of birth, school and year, email and phone (if they have their own), subjects taught, lesson schedule and attendance, assignments set and submitted including their grades, practice results in the app (which exercise, when, which answers the pupil chose and how many marks they scored), a record of how well the pupil knows each individual task and when it is due to be asked again, and any text the pupil writes when reporting a problem with a task, the tutor's notes on progress, and a profile photograph if you upload one.
About the legal guardian: name and surname, email, phone, billing address, and company number where applicable.
From the enquiry form: name, email and the text of the message.
Technical: records of sign-ins to the application and records of changes to important data (who confirmed a lesson or issued an invoice, and when).
3. Why we process it and on what basis
- Performance of a contract — scheduling lessons, tracking credit, setting and grading assignments, practice and its results, communicating about the teaching.
- Legal obligation — issuing invoices and keeping accounting records.
- Legitimate interest — securing the application and keeping change records; handling enquiries before a contract is entered into.
- Consent — only where something goes beyond the above, such as publishing a testimonial or a photograph. Consent can be withdrawn at any time.
4. Pupils under 18
Most pupils are under 18. Their legal guardian acts for them, gives the necessary consents and has access to their child's data. Notes on teaching progress are private to the tutor by default; they are shared only when the tutor explicitly marks them as shared.
5. Who we pass data to
We do not sell data and do not pass it on for marketing. We use these processors:
- Hetzner Online GmbH (Germany) — running the server and database the application lives on.
- Fakturoid s.r.o. (Czechia) — issuing invoices; the payer's name and billing details are passed on.
- Google Ireland Ltd. — video calls and calendar entries for online lessons, and sending email notifications.
- Functional Software, Inc. (Sentry) — monitoring technical errors in the European region (Germany). Only technical details of the error are sent; names, emails, phone numbers, notes and form contents are not included in reports.
Data is processed within the European Union, or in countries with a comparable level of protection on the basis of standard contractual clauses.
6. How long we keep it
- Teaching data (lessons, assignments, notes, practice results) for the duration of the arrangement and one year afterwards, so it is possible to pick up again.
- Accounting documents for the period required by the Czech Accounting Act.
- Enquiries that did not lead to an arrangement, for a maximum of six months.
7. Your rights
You have the right of access to your data, and rights to rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Where consent was the basis, you may withdraw it at any time.
You can exercise these rights by email at the address in section 1. We will respond within one month at the latest.
You also have the right to lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.
8. Cookies and analytics
The website uses no analytics or advertising cookies and does not track visitors. Once you sign in, the application stores an authentication token in your browser — without it you could not stay signed in. Nothing else is stored in your browser.
9. Security
Communication with the site is encrypted (HTTPS). The application can only be reached after signing in, and each user sees only the data that belongs to them. Uploaded files are not publicly accessible.