Privacy policy
Last updated: 1 November 2026This policy explains how personal data is handled in ClaseAlDía. It helps to distinguish two roles, because responsibility differs in each.
| Data | Whose | Our role |
|---|---|---|
| Account and subscription data | The customer: the tutor or centre owner | Controller |
| Pupil, family, attendance and payment data entered by the customer | Pupils (including children) and their families | The customer’s processor |
1. Controller
The controller of customers’ data is the owner of ClaseAlDía, whose details are in the legal notice. For any privacy question, write to hola@go4funnylife.com.
2. Our customers’ data (as controller)
What we process
- Account data: name, email address, password (stored using an irreversible hash), centre name and, if you provide them, a phone number and contact email.
- Subscription data: plan, status, trial and renewal dates. Card details are processed by Stripe; ClaseAlDía does not store them.
- Technical data: IP address and access logs needed for security, abuse prevention and rate limiting.
- Messages you send to our contact address.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating your account, providing the service and managing your subscription | Performance of a contract (Art. 6(1)(b) GDPR / UK GDPR) |
| Sending you service notices (welcome, trial ending, password reset, important changes) | Performance of a contract and service obligations |
| Security and prevention of fraud and abuse | Legitimate interests (Art. 6(1)(f)) |
| Answering your enquiries | Legitimate interests and, where relevant, your request |
| Meeting legal obligations (for example tax) | Legal obligation (Art. 6(1)(c)) |
We do not use your data for advertising and we do not sell it to anyone.
Support requests
Requests you send from the app (and any screenshots you attach) are kept so we can help you and are deleted when you delete your account. Please don’t include pupils’ data in screenshots unless it is strictly necessary.
How long we keep it
For as long as your account is active. If you delete your centre, your account data and everything you entered are deleted. We may keep the minimum information needed, for the legal periods, to deal with possible claims and tax obligations.
3. Pupil and family data (as processor)
The pupil, family, attendance, timetable and payment data that each centre enters into ClaseAlDía is that centre’s responsibility: the centre decides why and how it is used. ClaseAlDía processes it only on behalf of, and on the instructions of, the customer, as processor, under the data processing agreement the customer accepts when signing up.
- Rights are exercised with the centre. If you are a pupil or a parent and want to access, correct or erase your data, contact your tutor or centre. If you write to us, we will pass your request to the responsible customer and help them deal with it.
- Each customer is responsible for informing their families, having a legal basis and, where the law that applies to them requires it, obtaining a parent’s or guardian’s consent.
- We do not use that data for our own purposes: no advertising, no profiling, no passing it to third parties.
4. Children
ClaseAlDía is not aimed at children: the people who sign up are adult professionals. Data about children is entered by the centre, which is responsible for any parental consent the law that applies to it requires and for its duty to inform.
5. Sub-processors and providers
| Provider | Service |
|---|---|
| Cloudflare, Inc. | Hosting, database and content delivery network. Cookie-free web statistics. |
| Stripe Payments Europe, Ltd. | Subscription payments. Receives customer data only, never pupil data. |
| Resend | Sending the service’s emails, including notices to families on behalf of each centre. |
The providers that process pupil and family data (Cloudflare and Resend) act as sub-processors and are bound by obligations equivalent to those in this document. If we change a sub-processor or add a new one, we will tell customers by email in reasonable time beforehand.
6. International transfers
Some providers may process data outside the European Economic Area and the United Kingdom, in particular in the United States. Where that happens, the transfer relies on appropriate safeguards: the European Commission’s standard contractual clauses (with the UK Addendum or the UK’s International Data Transfer Agreement where UK data is concerned) and, for providers that have joined it, the EU–US Data Privacy Framework and its UK Extension.
7. Security
We apply reasonable technical and organisational measures: encrypted connections (HTTPS), hashed passwords, family-portal links with random identifiers that can be regenerated, role-based access control and limits on login attempts. No measure is infallible; if a breach affects personal data, we will notify it as the law requires.
8. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@go4funnylife.com and identifying yourself. Customers can also export and delete their data directly in the app. If you think your rights have not been respected, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority in your own country, for example the Information Commissioner’s Office in the UK (ico.org.uk) or the Data Protection Commission in Ireland (dataprotection.ie).
9. Cookies and similar technologies
The detail is in the cookie policy. In short: the app uses one technical session cookie and the website uses cookie-free statistics.
10. Typefaces
The website’s typeface is served from our own domain, with no connection to third-party servers.
11. Changes to this policy
If we make significant changes, we will tell you and update the date on this page. If this policy is translated and the versions differ, the Spanish version prevails.