Privacy Policy

Version 1.0 · Effective 30 September 2026

1. Who we are

Chalkroll is a lesson and fee tracker for independent private tutors. It is made and run by an independent developer (“Chalkroll”, “we”, “us”). For the account information described below, we decide why and how it is used, so we are responsible for it (in data protection terms, its “controller”).

We don't hold information about your students, so we are not responsible for it in that way — see section 3. For any privacy question, contact admin@chalkroll.com.

2. What we collect

We collect only what we need to give you an account and keep it secure.

We don't collect your location, contacts, photos, microphone or camera, and we don't use advertising IDs.

3. What stays on your phone

Everything you enter about your teaching is saved in the app's private storage on your device:

• students — for example name, grade or school, birth year, gender, phone numbers, parent or guardian name, address and notes;
• schedules, lessons and lesson notes;
• fees and payments, and the payment QR image you add;
• app settings such as language, currency and reminder times.

We don't receive this information, we don't store it on our servers, and we can't see it. Automatic Android cloud backup is turned off for Chalkroll, so it isn't copied to Google Drive without you. Some features move it only when you choose to:

• Backup files. You can save a backup file and keep or send it wherever you choose, optionally locked with a password. We never receive backup files. If you forget the password, we can't open the file.
• Google Calendar. If you turn on calendar sync, the app adds your lessons (student name and lesson time) to a calendar on your phone that you pick. That calendar's provider, such as Google, then stores those events under its own privacy policy.
• Messages. Schedule, invoice, receipt and reminder messages are created on your phone and handed to the chat or text app you pick. We don't send or see them.
• Reminders. Lesson reminders are local notifications on your phone. They may show a student's name on your lock screen, depending on your phone's settings.

Because this information is only on your phone, losing or resetting the phone, uninstalling the app or clearing its data removes it. Keep a backup if you want a copy.

4. How we use your information

• to create and run your account and sign you in;
• to send you sign-up and password-reset codes, and messages about your account or important changes to these documents;
• to keep a record of your agreement to our Terms and this policy;
• to keep Chalkroll secure, prevent misuse and fix problems;
• to answer your messages; and
• to meet legal obligations.

Where the law requires a legal basis, we rely on: providing the service you signed up for, your consent (which you give when you agree to this policy), our legitimate interest in keeping Chalkroll secure, and compliance with the law.

We don't use your information for advertising, we don't build profiles about you, and we don't make automated decisions that have legal or similar effects on you.

5. Who helps us, and where your information goes

We don't sell or rent your personal information. We share it only with service providers that run parts of Chalkroll for us, under agreements that require them to protect it, or when the law requires it.

Your information may be processed in countries other than the one you live in, such as Singapore and South Korea. We choose providers that protect it with appropriate safeguards, such as their standard contractual commitments, and we stay responsible for it. When you sign in with Google or Facebook, their own privacy policies also apply to what you share with them.

We may disclose information if the law, a court or a government authority requires it, or if needed to protect the rights, safety or property of our users or others.

6. How long we keep it

• Account information and agreement records: for as long as you have an account. When you delete your account, we delete them from our systems right away.
• Technical sign-in data, email delivery logs and provider backups: only as long as needed for security and recovery, and in any case removed within 30 days of account deletion.
• Email suppression list: if an email to your address bounces or is reported as spam, our email provider keeps the address on a list so we stop emailing it. It stays until we remove it; ask us and we will.
• Messages you send us: for as long as needed to handle your request, then deleted within one year unless the law requires us to keep them.
• Information on your phone: it stays until you delete it, clear the app's data, uninstall the app or delete your account in the app. We can't delete it for you, because we don't have it.

See how to delete your account.

7. How we protect it

• Connections between the app and our servers are encrypted (HTTPS).
• Your sign-in session is stored in your phone's secure keystore, and passwords are stored only as one-way hashes.
• Access rules on our servers let each account read and add only its own records.
• Only the operator can access our service consoles, protected by strong passwords and two-step verification.

No system is perfectly secure. If a data breach is likely to put you at risk, we will tell you without undue delay, explain what happened and what we are doing about it, and notify data protection authorities where the law requires.

8. Your rights

Depending on where you live, data protection laws give you rights over your personal information. We offer the following to everyone, wherever you live. You can:

• know how your information is used, and get a copy of the information we hold about you;
• correct information that is wrong or out of date;
• have your information deleted;
• receive your information in a common electronic format;
• object to or ask us to limit how we use your information;
• withdraw your consent — we need your account information to provide the service, so withdrawing consent means deleting your account; and
• complain to the data protection authority in your country.

You can delete your account yourself in the app. For any other request, email admin@chalkroll.com from the email address on your account. We will reply within 30 days. We may ask you to confirm it's you before acting on a request.

9. Children and students

Chalkroll is for tutors aged 18 or over. It isn't meant for children, and we don't knowingly create accounts for anyone under 18. If you believe a child has created an account, contact us and we will delete it.

Tutors often keep details about students who are children. That information stays on the tutor's phone and we never receive it. The tutor decides what to record and is responsible for it — including telling parents or guardians and getting their consent where the law requires. See section 5 of our Terms of Service.

10. This website

chalkroll.com has no cookies, analytics, advertising or tracking scripts, and it loads nothing from other sites. Like any website, our host (Cloudflare) processes basic request information such as IP addresses to deliver the pages and protect them from attacks.

11. Changes to this policy

If we change this policy, we will update the version and date above. If a change matters — for example, if Chalkroll starts storing student information on our servers — we will tell you in the app and ask you to agree again before it applies to you. Earlier versions are available on request.

12. Contact us

Questions or requests about your privacy: admin@chalkroll.com

If you have a concern, please contact us first so we can help. You can also complain to the data protection authority where you live.

This policy is published in English and Korean with the same content. If the two versions ever differ, the English version applies.