ClassFlo ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the ClassFlo platform ("the Service"). By using the Service, you consent to the practices described in this policy.
ClassFlo sends nothing to your students or their parents — no lesson reminders, no alerts, no marketing, no email of any kind. It stores no email address and no telephone number for them, for any purpose. Portal access is a code you pass on yourself, by whatever means you already use.
We use your information to:
We do not sell your personal information. We share data only in the following circumstances:
We use the following third-party services to operate ClassFlo:
When you enable the student portal, limited information (student name, lesson schedule, lesson history, and package details) is made accessible to your students via a unique, authenticated link. You control which students have portal access.
We may disclose your information if required by law, regulation, legal process, or governmental request.
Your data is stored on Supabase-managed PostgreSQL databases with Row Level Security (RLS) enabled. We implement the following security measures:
While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
We retain your data for as long as your account is active or as needed to provide the Service. Specifically:
Upon account deletion, we will delete or anonymise your data within 30 days, except where retention is required by law.
Two things sit outside that deletion because they are not ours to delete. If you connected a Stripe account to take payments from students, that account belongs to you and stays with Stripe after your ClassFlo account is gone — close it in your Stripe dashboard. Subscriptions and purchase records held by Apple or Polar are likewise kept by them under their own terms.
ClassFlo uses essential cookies to operate the Service:
user_id): Maintains your logged-in session. Expires after 30 days. Required for the Service to function.We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@classflo.app. We will respond within 30 days.
As a tutor using ClassFlo, you act as the data controller for the student information you input into the Service. You are responsible for:
Your data may be processed and stored in countries outside your country of residence, including the United States (where our infrastructure providers operate). Where data is transferred internationally, we ensure appropriate safeguards are in place through our service providers' data processing agreements and compliance certifications.
A ClassFlo tutor account is for adults: you must be 18 or over to create one. Tutors record information about students who are often minors — a name, a year group, lesson history and a lesson balance — and that information is entered and controlled by the adult tutor, who decides what to store and for how long.
Students and parents do not have accounts. They open a portal link the tutor shares with them, which shows that student's own lessons and balance and, where the tutor has enabled it, lets a package be bought. A device opening that portal sends us the access token from the link and, if a purchase is made, the payment is handled by Stripe or Apple; we do not collect analytics, advertising identifiers or location from it, and there is no messaging, posting or profile to fill in.
We do not knowingly collect personal information directly from a child under 13 outside that tutor-controlled record. If you believe we have, contact us and we will remove it promptly. Parents who want a student's record removed should ask their tutor, who controls it, or contact us.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: