Privacy policy

For the data of its own account (Teacher or Institution), Skolina SAS acts as the data controller.

For student data entered or generated in the context of a class, the institution or teacher determines the purposes: they are the data controller, and Skolina acts as a processor within the meaning of Article 28 of the GDPR, solely on their instructions.

We collect only the data necessary to operate the service:

• Account data: email address, name, password (stored in hashed form);
• Student data: first name, last name or class identifier, quiz answers and results — provided by the Teacher or Institution;
• Billing data: processed via our payment provider Stripe (we do not store your card numbers);
• Usage and analytics data: audience measurement and cookies, subject to your consent;
• Attribution data: entry source and first page visited, for statistical purposes.

We process your data for the following purposes:

• provide, maintain and improve the service (performance of the contract);
• manage your account and provide support (performance of the contract);
• process payments and meet our accounting obligations (legal obligation);
• send you service-related communications (legitimate interest);
• measure audience and prevent fraud (consent or legitimate interest).

We never sell your personal data. We share it only with subprocessors strictly necessary to provide the service, bound by confidentiality and compliance commitments:

• infrastructure hosting within the European Union;
• Stripe for secure payment processing;
• OpenAI for AI-powered content generation;
• a transactional email provider.
• We may also disclose data where required by law.

We implement appropriate technical and organizational measures: encryption of communications (TLS), hashed passwords, access segmentation and least-privilege principle, logging and regular security reviews.

As no internet transmission is completely foolproof, we cannot guarantee absolute security, but we strive to protect your data using recognized standards.

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

• right of access to your data;
• right to rectification of inaccurate data;
• right to erasure (“right to be forgotten”);
• right to restriction of processing;
• right to data portability;
• right to object, and the right to withdraw your consent at any time.

We retain your data for as long as necessary for the purposes described. Account data is kept for the duration of the contractual relationship, then deleted or anonymized within a reasonable time after the account is closed.

Accounting and billing documents are retained for the legal period (10 years). Student data is retained on behalf of the institution, according to its instructions.

Skolina may be used with underage students. In that case, the institution or teacher is the data controller and ensures it has the appropriate legal basis (public-interest task, consent of the holders of parental authority where applicable).

Skolina acts as a processor: we process student data only to provide the service, without exploiting it for other purposes or sharing it for advertising. No personal account is required for a student to take part in a quiz.

We use cookies that are strictly necessary to operate the service and, subject to your consent, audience-measurement and preference cookies. You can change your choices at any time from the cookie settings or your browser settings.

We may update this policy. Any material change will be notified to you by email or within the service. The last-updated date appears at the top of this page.

To exercise your rights or for any question about your data, write to us at support@skolina.com. We are committed to responding within 30 days.

You also have the right to lodge a complaint with the French data protection authority (CNIL) or with your local supervisory authority.