Privacy and student data
Read this before you upload a class list.
What you should upload
Only upload student information you are authorised by your school to process, and only what a seating plan needs: a name, and the SEN, EAL and CEFR details if you use them. Do not add dates of birth, medical details, assessment data or free-text comments about a child.
What this application stores
For each plan: the plan name, class, room, subject, your notes, the room layout, and for each student a name plus gender, SEN, EAL and an optional CEFR English level. Nothing else about a student is stored, because nothing else has a field to store it in.
Who can see it
Only the account that created a plan can open it. Ownership is checked on the server for every request, so changing a number in the address bar does not reveal another teacher's class. Administrators can see account names, plan counts and system logs; they cannot open your plans or read your student lists through the admin area.
What leaves this server
No student data. Student information is not sent to any external service, AI system or analytics provider, and there are no third-party scripts or trackers on any page. The only messages that leave the server are account emails (confirming your address and resetting your password), sent to your own address from the app's mailbox. They contain your name and a link, never student information.
PDFs and printing
Exported PDFs show student names only unless you explicitly choose to include gender or support indicators (SEN, EAL and CEFR). If you do include them, the footer says so, and the file should be handled as a confidential document.
Retention
Plans stay until you delete them. Deleting a plan removes its students, seats and assignments immediately. Delete a class list once you no longer need it, in line with your school's retention policy.
Accounts whose email address is never confirmed, and which have never signed in, are deleted automatically after 7 days.
Logs
The application logs actions such as sign-ins, imports and exports, with the account and time. Student names are never written to the logs.