Privacy Policy
How Classroom Hub handles personal data for teachers, schools, and students — in plain language, under UK GDPR.
Last updated: June 2026
Who We Are
Classroom Hub is a classroom management platform built for teachers and schools. We are committed to handling personal data responsibly, transparently, and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
- Data controller
- Classroom Hub
- Contact
- [email protected]
- Application
- my.classroomhub.app
Overview
This policy explains what personal data we collect, why we collect it, how we store it, and your rights in relation to it. It applies to:
- Teachers and school staff who use Classroom Hub
- Schools and educational institutions who subscribe to our service
- Students whose data is entered into the platform by their teacher or school
We collect only the data necessary to provide the service. We do not sell personal data to third parties. We do not use student data for advertising purposes. See also our Terms of Service.
What Data We Collect
Account holders (teachers and administrators)
When you create an account we collect:
- Your name and email address
- Your school or institution name
- Your password (stored as a secure hash — we never store it in plain text)
- Usage data such as login timestamps and feature interactions, used to improve the service
Student data
Student data is entered directly by the teacher or school — we do not collect it independently. The only information required for the platform to function is a student's first name. Any additional information entered — such as progress notes, observations, or attainment records — is entirely optional and entered solely at the discretion of the teacher or school.
Optional data a teacher may choose to enter includes:
- Year group or class assignment
- Progress notes, observations, and attainment records
- Any stickers and rewards assigned by the teacher
We treat all student data as sensitive. We do not require, request, or store student email addresses, home addresses, photographs, or any government identifiers.
Usage and technical data
We automatically collect limited technical data to keep the service running reliably:
- Browser type and device type
- Pages visited within the application and timestamps
- Error logs used for debugging
- Approximate location derived from your IP address when automatic weather location is enabled and browser location is unavailable
This data is aggregated and not linked to individual identities where possible.
Location and weather (teachers only)
If you use the weather widget on your dashboard or Classroom Screen, Classroom Hub may use your approximate location to show local weather. This applies to teacher accounts only — we never request location from students.
- Browser location (optional) — when you open the dashboard, your browser may ask once for permission to use your device location. We only call this when you are logged in and viewing the dashboard in context. We do not track your location continuously.
- What we store — if you allow it, we save your approximate coordinates and city name in your account settings so the weather widget can refresh without asking again. You can update or reset this at any time in Settings.
- If you decline — we fall back to approximate location from your IP address, a city you enter manually, or a default location until you choose otherwise.
- Third-party weather data — coordinates or city name are sent to OpenWeatherMap solely to fetch current weather conditions for display. We do not use location for advertising or profiling.
How We Store Your Data
Classroom Hub is built on Supabase, a secure cloud infrastructure provider. Your data is stored in encrypted databases hosted within the European Union. Supabase acts as a data processor on our behalf under a Data Processing Agreement.
Passwords are hashed using industry-standard encryption. Data in transit is protected using TLS (HTTPS). We do not store payment card details — payments are processed by Stripe, who maintains their own PCI DSS compliance.
Traffic to Classroom Hub is routed through Cloudflare's network for security and performance purposes. Cloudflare may process IP addresses and request metadata as part of this service, subject to their own privacy policy.
Why We Process Your Data
| Data | Legal basis | Purpose |
|---|---|---|
| Account information | Contract | To create and manage your account |
| Student records | Legitimate interest / Contract | To provide the classroom management service |
| Usage data | Legitimate interest | To improve reliability and features |
| Email address | Contract | To send service-related communications |
| Approximate location (teachers only) | Consent / Legitimate interest | To display local weather on dashboard and Classroom Screen widgets |
We do not use personal data for automated decision-making or profiling.
Children's Data
Classroom Hub takes the privacy of children seriously and operates in line with the UK Information Commissioner's Children's Code (Age Appropriate Design Code).
Classroom Hub has been deliberately designed to operate on minimal student data. The only information required to use the platform is a student's first name. Any additional information entered — such as progress notes, observations, or attainment records — is entirely optional, entered at the discretion of the teacher or school, and used solely by them to manage their classroom. It is never required for the platform to function.
- Student data is entered and controlled exclusively by the teacher or school, not by the students themselves
- We do not knowingly allow children to create accounts directly
- We do not display advertising to students
- We do not use student data for any purpose other than delivering the classroom management service to their teacher
- We do not request or collect location data from students
- Schools act as the data controller for their students' data; Classroom Hub acts as the data processor — see our Data Processing Addendum
If you are a parent or guardian and have concerns about data relating to your child, please contact your child's school in the first instance, or contact us directly at [email protected].
Data Retention
- Active accounts
- Data is retained for as long as your account is active.
- Cancelled accounts
- Account and associated class data is deleted within 90 days of cancellation.
- Student data
- Deleted when the associated teacher account is closed, or earlier upon written request.
- Usage logs
- Retained for a maximum of 12 months, then deleted.
You can request earlier deletion at any time by contacting [email protected].
Your Rights Under UK GDPR
You have the right to:
- Accessthe personal data we hold about you
- Correctinaccurate data
- Deleteyour data (right to erasure)
- Restricthow we process your data
- Portyour data to another service
- Objectto processing based on legitimate interest
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to This Policy
We will update this policy as the service evolves. When we make material changes we will notify account holders by email and update the "Last updated" date at the top of this page. Continued use of the service after changes are published constitutes acceptance of the updated policy.
Contact
For any privacy-related questions or requests:
- [email protected]
- Subject line
- Privacy Request
We aim to respond to all privacy enquiries within 5 working days.