Privacy policy

For the data of its own account (Teacher or Institution), Skolina SAS acts as the data controller.

For student data entered or generated in the context of a class, the institution or teacher determines the purposes: they are the data controller, and Skolina acts as a processor within the meaning of Article 28 of the GDPR, solely on their instructions.

We collect only the data necessary to operate the service:

• Account data: email address, name, password (stored in hashed form);
• Student data: first name, last name or class identifier, quiz answers and results — provided by the Teacher or Institution;
• Billing data: processed via our payment provider Stripe (we do not store your card numbers);
• Contact and quote data: name, email address, optional phone number, message, requested licence count, IP address, and browser technical information used to limit abuse;
• Strictly necessary technical data: session information and local settings required for requested features;
• Attribution data recorded by the application: the first page visited, referring website, and any source or campaign parameters present in the URL. The landing website neither collects nor stores it.

We process your data for the following purposes:

• provide, maintain and improve the service (performance of the contract);
• manage your account and provide support (performance of the contract);
• process payments and meet our accounting obligations (legal obligation);
• send you service-related communications (legitimate interest);
• prevent abuse and secure the contact form (legitimate interest);
• measure where application registrations originate (legitimate interest).

We never sell your personal data. We share it only with subprocessors strictly necessary to provide the service, bound by confidentiality and compliance commitments:

• infrastructure hosting within the European Union;
• Stripe for secure payment processing;
• OpenAI for AI-powered content generation;
• Google Analytics for server-side conversion events, only when this optional integration is explicitly enabled;
• a transactional email provider.
• We may also disclose data where required by law.

We implement appropriate technical and organizational measures: encryption of communications (TLS), hashed passwords, access segmentation and least-privilege principle, logging and regular security reviews.

As no internet transmission is completely foolproof, we cannot guarantee absolute security, but we strive to protect your data using recognized standards.

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

• right of access to your data;
• right to rectification of inaccurate data;
• right to erasure (“right to be forgotten”);
• right to restriction of processing;
• right to data portability;
• right to object, and the right to withdraw your consent at any time.

We retain your data for as long as necessary for the purposes described. Account data is kept for the duration of the contractual relationship, then deleted or anonymized within a reasonable time after the account is closed.

Contact and quote requests, including their anti-abuse metadata (IP address and browser technical information), are retained for 3 years. Application attribution data remains in the browser until site data is cleared and may be associated with the account at registration; it then follows the account retention period.

Accounting and billing documents are retained for the legal period (10 years). Student data is retained on behalf of the institution, according to its instructions.

Skolina may be used with underage students. In that case, the institution or teacher is the data controller and ensures it has the appropriate legal basis (public-interest task, consent of the holders of parental authority where applicable).

Skolina acts as a processor: we process student data only to provide the service, without exploiting it for other purposes or sharing it for advertising. No personal account is required for a student to take part in a quiz.

The public website does not place analytics, advertising, or marketing cookies. The authenticated application uses only secure technical cookies required to maintain a session.

We may update this policy. Any material change will be notified to you by email or within the service. The last-updated date appears at the top of this page.

To exercise your rights or for any question about your data, write to us at support@skolina.com. We are committed to responding within 30 days.

You also have the right to lodge a complaint with the French data protection authority (CNIL) or with your local supervisory authority.