Privacy Policy and Terms of Use

Edited in August 2026

1. Contact

For any questions about your personal information, please use our contact form:

Legal operator name: Studio Scolaro inc.

https://scolaro.app/contact.html

For a plain-language explanation of the data lifecycle by data type: https://scolaro.app/data-lifecycle.html

2. Information We Collect

We only collect information necessary for the purposes described in this policy.

Registration Information

To create an account:

First and last name
Email address
Phone number (teachers only, so we can discuss their experience with them)
Password (stored in encrypted form)
Status (teacher / student)
Educational establishment (mainly for teachers and institutional accounts)

Pedagogical and Usage Data

As part of using the Platform:

Tests, questionnaires, assignments, and evaluations created
Files uploaded, imported, or provided as pedagogical context
Exam questions created, imported, generated, modified, or used in the Platform
AI-generated questions adjusted by the teacher
Student responses, exam copies, texts, and projects
Grades, scores, feedback, and comments
Time spent on activities and progression in evaluations
Browsing history within the Platform (pages viewed, main actions)
Account preferences (language, display options, class settings, etc.)

Technical Data

For security and technical operation purposes:

IP address
Browser type and version
Operating system and device type
Technical identifiers (session tokens, account IDs, etc.)
Error and activity logs
Cookies and similar technologies (see Section 8)

Google Classroom Data

If a teacher chooses to connect Google Classroom, we may collect and process the information needed for the Classroom features visible in Scolaro:

Connection status, granted OAuth permissions, access tokens, and refresh tokens needed to maintain the connection
Active courses: identifier, name, section, room, state, enrollment code when available, and Classroom link
Imported rosters: name, email address, Google Classroom user identifier, profile photo when provided, Scolaro account match status, and Scolaro class join status
Selected assignments and course materials: titles, descriptions, Classroom links, attachment links or metadata, content type, state, and creation or update dates
Assignment identifiers, submission identifiers, and draft grades needed to post a Scolaro test to Classroom and sync corrected results as draft grades

Scolaro does not automatically read the full content of private Drive documents attached to Classroom. Classroom content selected by the teacher may be used as context to generate a test requested by the teacher.

3. How We Use Your Information

Service Provision

We use your information to:

Create, manage, and authenticate your user account
Enable the creation, distribution, and taking of tests and evaluations
Generate questions, instructions, and feedback using artificial intelligence (AI)
Automatically correct certain responses and calculate scores
Display progress reports, results, and pedagogical analyses
Provide technical support and respond to your assistance requests

Service Improvement and Product Development

We may analyze aggregated or pseudonymized data to understand Platform usage, evaluate correction and suggestion quality, develop features, and optimize its performance, ergonomics, and security. We may also use, in accordance with applicable law and generally recognized best practices, usage data irreversibly anonymized to track adoption, engagement, traction, and trends, and to improve our algorithms and the Platform's quality, reliability, security, and performance. We minimize directly identifiable information for these purposes.

Communications

We may use your contact information to:

Send important service-related notices (security, significant modifications, planned interruptions)
Respond to requests sent via the contact form
Inform teachers and school officials of significant Platform updates
Send teachers and school officials who consent optional communications, including newsletters and product updates
Send students who consent only optional educational or Scolaro product-use communications; this choice never authorizes advertising, marketing, commercial promotions, or newsletters intended for teachers

You can withdraw consent to optional communications at any time using the unsubscribe link or by writing to us at https://scolaro.app/contact.html. Withdrawal does not affect essential account, security, transactional, or service emails.

Google Classroom Integration

We use Google Classroom data only to provide or improve the Classroom features requested by the teacher in Scolaro, including:

Connecting, reconnecting, or disconnecting the teacher's Google Classroom account
Listing active courses and importing selected courses as Scolaro classes
Linking a Scolaro class to a Classroom course and importing a reference roster
Showing match status between the Classroom roster and Scolaro accounts or responses
Using assignments, materials, titles, descriptions, and Classroom links chosen by the teacher as test-generation context
Creating a draft assignment in Classroom containing a link to an existing Scolaro test
Sending Scolaro results as Classroom draft grades when the student can be matched to the imported roster

4. Sharing Your Information

We do not sell your personal information. We may share it with technical providers, authorized educational institutions, and competent authorities when needed to deliver the service, maintain security, comply with the law, or protect our rights.

When a language-review feature is used, the submitted text may be sent by our server to LanguageTool's hosted API to identify grammar, spelling, and style candidates. Scolaro does not send direct account identifiers with that request.

Scolaro's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Google Classroom data is not sold, transferred to advertising platforms, used for ad targeting, used to determine credit-worthiness, or used to create, train, or improve a generalized or non-personalized AI or machine learning model.

5. Data Hosting

Most data is stored in Montreal. Some data, such as login information or certain technical processing data, may however be stored in the United States. LanguageTool language checks are processed on servers located in Germany.

6. Your Rights Regarding Personal Information

If you need anything regarding your data rights, please contact us through the following form:

https://scolaro.app/contact.html

7. Use of AI and Automated Decisions

Scolaro uses AI to generate questions, suggest corrections, and produce pedagogical feedback. These outputs are assistive only: the teacher or institution remains responsible for final decisions, and human review can be requested when needed.

8. Cookies and Analytics Tools

We use cookies to keep you signed in, secure the platform, remember preferences, and measure service usage. Essential cookies are required for operation, while analytics cookies are used only with your consent and can be managed through our preferences tools or your browser.

Google Analytics automatically measures public pages, selected actions, registration steps and estimated active time, as well as eligible teacher workspace activity. No separate analytics consent prompt or preference is required. Advertising features and Google Signals are disabled. We do not send names, emails, account IDs, entered content, documents, grades, or private record identifiers. Teachers use a random provider identifier; authorized Scolaro administrators can connect it to their account privately.

Teacher eligibility is checked periodically. Account deletion requests include deletion of associated teacher analytics history. Google event and user-data retention is configured for two months. Google may process information outside Canada. Historical OpenPanel deletion requests remain supported during the transition.

Student web activity is not sent to Google Analytics. The iOS app uses Firebase Analytics for automatic app/session measurements and Firebase Crashlytics for crash reports in production; Scolaro does not add account identifiers or custom activity events to these SDKs. Separately, web and iOS signup collect anonymous reliability diagnostics: an expiring random operation identifier, platform, method, stage, outcome, fixed error category and release version. No email, account identifier, entered content or persistent device identifier is included. Detailed diagnostics are kept for seven days and daily aggregates for 90 days in private Supabase storage. Only aggregate signup totals are exported to a separate Google Analytics diagnostics stream. Private operational alerts contain no student contact information. This operational reporting is independent of behavioral analytics and marketing-email consent.

Public social links may carry a profile label (ig for Instagram, fb for Facebook, tt for TikTok or ys for YouTube) or a numbered ad label such as ig_00 or tt_01. Existing google_01 ad labels are also supported. Tagged home links open teacher registration without an access code. We remember the latest valid label in the same browser for 30 days, include it in public-page and registration analytics, and save it privately with teacher registration without an access code so the signup notification can identify the source. Profile traffic and paid campaigns are distinguished in analytics. Labels contain only a supported platform prefix and, for ads, an underscore followed by digits; no advertising click identifier or arbitrary URL content is collected.

9. Minors and School Context

Scolaro is used mainly in an educational setting. For minor students, the school or responsible teacher must ensure required authorizations are in place, and we limit collection to information necessary for the platform's educational use. Optional student notifications remain subject to school or parental authorization when required by law.

10. Information Security

We apply reasonable security measures such as encryption, access controls, and technical monitoring to protect your information. If a serious privacy incident occurs, we will follow the notification obligations required by law.

11. User Accounts

To use Scolaro, you must create an account with accurate information, keep your login details confidential, and update your information when needed. You are responsible for activity under your account and must promptly notify us of any unauthorized use. Teachers and institutions that create student accounts or add student data also confirm that they comply with applicable laws, obtain required authorizations when necessary, and only submit information needed for the Platform's educational use.

By using Scolaro, you also authorize us to use the email address associated with your account to help identify the school, educational institution, or organization connected to your use of the service, and to use that information in our communications or discussions with that institution when reasonably necessary to provide the service, clarify a situation, or resolve a matter related to the platform.

When an eligible teacher or school official tries to register while registration is closed or no spot is available for their institution, their email address, institution domain, and selected school information are added automatically to our waiting list if they agreed to receive emails from Scolaro. Otherwise, Scolaro asks for separate confirmation before adding them. A student's email choice never authorizes adding that student to this waiting list. Being added to the waiting list does not, by itself, subscribe the applicant to the newsletter and does not trigger an automatic email; Scolaro may contact them manually when a spot becomes available.

If you contact us, or if an institution associated with your account contacts us, regarding a problem, dispute, technical issue, billing matter, security concern, or any other service-related situation, you authorize us to investigate the matter and to access, review, and verify the data, account information, and related records reasonably necessary to understand, process, and resolve it.

If you connect Google Classroom, you confirm that you are authorized to use the relevant courses, rosters, assignments, materials, and grades in an educational context. You must not connect a course, import a roster, or post grades for a class you are not authorized to administer.

12. Acceptable Use

You must not use Scolaro for illegal, non-educational, abusive, or unauthorized purposes, attempt to bypass security measures, access data without permission, publish or store illegal or inappropriate content, infringe third-party intellectual property rights, or collect or export other users' data without authorization. If these rules are violated, we may suspend or terminate your account and take any appropriate action.

13. Content and Intellectual Property

You retain rights to the content you create or upload to Scolaro, subject to any pre-existing third-party rights, but you grant us a limited, non-exclusive, royalty-free license to host, process, display, reproduce, and technically adapt that content as needed to operate, improve, and develop the service. This license includes all uploaded files as well as exam questions created, imported, generated, modified, or used in Scolaro, only to the extent needed to provide, maintain, and improve requested features. It does not authorize training internal models from uploaded files or student responses. This license does not allow us to sell your content as standalone content or commercially exploit it outside Scolaro without your agreement. The Platform, its interface, code, structure, logos, predefined texts, and AI technology remain Scolaro's protected property, and no ownership rights are transferred to you beyond the licenses expressly stated in these Terms.

14. Role of AI and Automated Decisions

Scolaro uses AI as an assistance tool to generate content, suggest corrections, and produce pedagogical analysis. Official decisions remain the responsibility of the teacher or institution, and human review can be requested when an important decision relies on automated processing.

15. Lotus AI Assistant

The Lotus AI assistant uses a knowledge base to answer questions and guide users. Lotus may however make mistakes or inaccuracies, and nothing it states has any legal value. Conversations may be retained in Scolaro and reviewed under controlled access for support, security, and service improvement. Account identity is used only when necessary for those purposes, including following up on an error report.

16. Third-Party Services (Supabase, OpenAI, Analytics, etc.)

Scolaro relies on certain third-party services, including:

Supabase for hosting, authentication, and database
Google Classroom / Google OAuth for Classroom connection, course imports, reference rosters, course materials, draft assignments, and draft grades
AI Providers (e.g., OpenAI) for automated generation and correction
Analytics Tools (e.g., Google Analytics) to measure and improve Platform usage

The use of these services is governed by contractual agreements aimed at protecting personal information. Some of these services may be located outside of Quebec or Canada.

As part of service security and reliability, we may also log certain technical events related to authentication and account creation, including failed sign-up attempts when an email address is already associated with an account. These events may be recorded in our secure technical logs, including the Supabase database, used to measure error rates and detect unusual spikes in our routine health checks, and may trigger an internal alert email when reasonably necessary to investigate, protect the Platform, or resolve an incident.

Non-necessary cookies and analytics tools are used only with your consent, as described in the Privacy Policy and/or the cookie banner. You can withdraw this consent at any time.

17. Google Classroom OAuth and Google Data

The Google Classroom integration is optional and intended for authorized teachers. Google OAuth may request permissions related to courses, student rosters, Classroom profile email addresses, assignments, and course materials. These permissions are used only for the Classroom features visible in Scolaro, such as course imports, reference roster imports, selecting materials for test generation, creating draft assignments, and sending draft grades.

You can disconnect Google Classroom from profile settings. Scolaro then attempts to revoke the Google token and deletes the local integration record. Classes, tests, or results already created in Scolaro may remain in Scolaro as ordinary educational content until deleted under the applicable tools and rules.

18. Liability, Termination, and Governing Law

Scolaro is provided "as is" to the extent permitted by law. We may suspend or terminate access in cases of misuse or breach of these Terms. These Terms are governed by the laws of Quebec and the applicable federal laws of Canada, and any dispute will be submitted to the courts of Montreal, subject to mandatory applicable rules.

19. Updates to This Document

This page combines the Privacy Policy and the Terms of Use. We may update it to reflect changes to the service, our practices, or legal requirements. The date shown at the top of the page is the current version date.