Privacy Policy

1. Publisher and data controller

The Schoolyra service is published by Mohamed Motaouakkel, sole operator based in Agadir, Morocco. Tax identifiers — ICE: 003925599000048 · IF: 71933274.

For any question about your personal data, you can contact our data contact at privacy@schoolyra.com.

2. Data we collect

We limit collection to what is strictly necessary to run the service:

• Account: email address, password (stored hashed, never in clear text), name (optional), country and preferred language.
• Credits and usage: your credit balance, top-up history, sign-in dates and number of papers graded.
• Purchase: full name, email, country, amount and order number. Payment is made by bank transfer; we never collect or store any card data.
• Exam content: the exams you create and the answer sheets you scan are stored privately and encrypted on our infrastructure, accessible only to you. To grade them, scanned papers (which may contain a pupil's name and code) are sent to our AI grading provider — see section 5.
• Technical data: information needed for security and proper operation (server logs, browser type) and anonymous audience measurement.

3. Purposes and legal bases

We process your data for the following purposes:

• Provide the service: account creation, authentication, exam creation, grading and score calculation (performance of the contract).
• Manage purchases and licenses and meet our accounting and tax obligations (legal obligation).
• Send transactional emails (purchase confirmation, password reset) (performance of the contract).
• Ensure security, prevent fraud and improve the service (legitimate interest).

4. Cookies and audience measurement

Schoolyra uses cookies that are necessary for your session and for security. For audience measurement we use Plausible (privacy-friendly, no tracking cookies) and — only if you accept analytics cookies — Google Analytics, which does set cookies. A banner lets you accept or decline analytics; nothing analytics-related loads until you accept, and your choice is saved and can be changed at any time.

5. Data sharing and subprocessors

We never sell your data and never share it for advertising. Your scanned answer sheets and exam content are used only for grading and are never reused for any other purpose. To run the service we rely on a limited number of subprocessors bound by confidentiality obligations:

• Anthropic (Claude AI) — our AI grading provider. Scanned answer sheets, which may contain a pupil's name and code, are sent to Anthropic solely to transcribe and grade the paper. Anthropic processes them on our behalf, does not use them to train its models, and may process them outside Morocco (including the United States) under appropriate safeguards.
• Supabase — database, authentication and file storage.
• Our hosting and content-delivery (CDN) provider — serving the web application.
• Email delivery provider — transactional emails.
• Plausible — anonymous audience measurement.
• Google (Google Analytics) — audience measurement, loaded only with your consent.

6. Data retention

Scanned answer sheets: automatically deleted 30 days after grading (or sooner if you delete the exam or submission). User accounts: kept while the account is active, then up to 12 months after the last sign-in. Transaction data (invoices, orders): kept 10 years to meet accounting obligations. Support requests: 24 months. You can request deletion of your account at any time.

7. Data security

Data is encrypted in transit (HTTPS) and at rest. Access is protected by authentication and by row-level security (RLS) rules ensuring each teacher can only access their own data. Passwords are stored hashed. Despite these measures, no system is completely secure; we encourage you to use a strong, unique password.

8. International transfers

Our providers may host data outside your country of residence, in particular within the European Union. When data is transferred outside Morocco or the EU, we ensure appropriate safeguards (standard contractual clauses or equivalent) are in place.

9. Your rights

Under the General Data Protection Regulation (GDPR) and Moroccan law 09-08, you have the rights of access, rectification, erasure, restriction, objection and portability regarding your data. To exercise them, write to privacy@schoolyra.com; we respond within 30 days at most. You may also lodge a complaint with the competent authority (the CNDP in Morocco or the CNIL in France).

10. Children's data

Schoolyra is intended for teachers and education professionals. The service is not directed at people under 16 and we do not knowingly collect their data. Scanned answer sheets may contain pupils’ names: these remain the teacher’s responsibility, are processed only for grading (including by our AI grading provider — section 5) and are deleted 30 days after grading.

11. Changes to this policy

We may update this policy to reflect legal or technical changes. The last-updated date appears at the top of this page. For any significant change, we will notify you by email or within the app.

12. Contact

For any question about this policy or your data, write to us at privacy@schoolyra.com.