What we know about you, and what we do with it.

Each school normally decides why and how information about its students, parents and teachers is used. The school is therefore normally the data controller for that information.

Skolos processes that information on the school's behalf as a data processor. Skolos is the data controller for information it collects directly to operate the website, respond to school enquiries, manage customer relationships and protect the service.

Skolos is a school administration platform for weekend schools. It helps schools manage users, students, classes, courses, schedules and related administration.

Students do not have their own login accounts in version 1.

Depending on how a school uses Skolos, we may process:

• Account information, such as name, email address, phone number, school and role.
• School administration information, such as student names, classes, courses, guardian relationships, teacher assignments, schedules, homework, announcements and attendance.
• School registration and pilot request information.
• Login activity and authentication state handled through Supabase.
• Audit logs for important administrative actions.
• Request metadata, including IP address, browser and device information, where processed by hosting, authentication or security providers.
• Application errors and security events needed to investigate problems.

Authentication passwords are handled securely by the authentication provider and are not visible to Skolos administrators.

Information may be processed to:

• Provide the service.
• Create and manage accounts.
• Enforce role-based access.
• Support school administration.
• Send necessary login or service messages.
• Protect the service and prevent misuse.
• Investigate errors and security incidents.
• Respond to school enquiries.
• Meet legal obligations.

The school determines the legal basis when Skolos processes information on the school's behalf. For processing controlled directly by Skolos, the legal bases may include performance of an agreement, legal obligations and legitimate interests in operating and securing the service.

We do not sell personal information.

Information is shared only when necessary to provide the service, comply with the law or protect the service and its users. School information is restricted by school and assigned role.

Skolos uses these confirmed providers:

• Supabase for database, authentication and storage.
• Cloudflare for website delivery, performance and security.
• Bird for necessary SMS delivery.

We have not stated hosting regions, transfer mechanisms, retention periods or certifications here because those details were not verified in the current repository.

Information is retained only while needed to provide the service, meet legal requirements and protect the system. School data is handled according to the agreement with the school when that agreement ends.

Skolos keeps audit logs for important administrative actions. Browser-side cache data may be stored temporarily to support login, offline access and reliable loading.

Depending on the situation, you may have rights to access, correction, deletion, restriction, objection, data portability where applicable and withdrawal of consent where consent is the legal basis.

For school-managed information, you should normally contact your school first. You also have the right to complain to the Norwegian Data Protection Authority.

Skolos uses cookies and similar browser storage technologies that are necessary to operate and secure the service. They support authentication, remember your selected preferences, restore the application after an interruption, and enable caching and offline functionality.

These technologies may include localStorage, sessionStorage, Cache Storage and IndexedDB.

Skolos does not currently use analytics, advertising or marketing cookies. Because we only use technologies that are necessary to provide the service and its requested functions, we do not currently display a cookie consent banner.

Skolos uses technical and organisational measures to protect personal information and the service. These measures include authentication, role-based access controls and audit logging for important administrative actions. No online service can guarantee absolute security, but we continuously work to protect Skolos and its users.

This notice may be updated when the service, providers or legal requirements change. Schools will be informed about significant changes.

Contact details must be confirmed before production use:

• Legal company name: TODO_LEGAL_COMPANY_NAME
• Organisation number: TODO_ORGANISATION_NUMBER
• Privacy email: TODO_PRIVACY_EMAIL
• Support email: TODO_SUPPORT_EMAIL
• Business address: TODO_BUSINESS_ADDRESS

Read the Terms of Use.