Draft preview. Owner details, the provider and storage audit, and legal review must be completed before publication.
Providers & processing
The services this version of ESL Teaching Studio and its website use, what they handle and why. Lessons and student records you create stay on your computer unless you export them.
| Provider / function | Information involved | Role and purpose | Location | Retention |
|---|---|---|---|---|
| Supabase: teacher accounts, Terms acceptance, privacy requests | Account email, display name and sign-in records (Supabase Auth); the Terms version you accepted and when; privacy requests you send from the app | Hosts the account and request records for the operator | Project region: EU (Paris, eu-west-3) | deleted or irreversibly anonymized within 30 calendar days, unless a shorter legal deadline or a specific lawful hold applies |
| Supabase: license server | License status from the merchant, a protected copy of the license key, pseudonymous (hashed) computer identifiers and activation times | Checks subscriptions and the computer limit for the operator | Project region: EU (Paris, eu-west-3) | five years under the applicable Philippine accounting-record rule, counted from the filing deadline for the year concerned, and longer only for an unresolved tax matter or other legal requirement |
| Lemon Squeezy: checkout, subscriptions, license keys | Order, billing and subscription details you give at checkout | Merchant of record for purchases | See the provider's own notices | See the provider's own notices |
| GitHub: app downloads and update checks | The app asks GitHub for the latest release; GitHub sees the request (including your IP address) | Hosts installers and release information | See the provider's own notices | Not stored by the operator |
| Google Drive backup | Not active in this version of the app | Will only run after you connect your own Drive | Not applicable yet | Not applicable yet |
| Google (Gmail): account e-mails and correspondence | Your e-mail address and the content of account e-mails (sign-up confirmation, password reset); support and privacy messages you send us; a reference and category for each privacy request you submit | Sends and stores e-mail for the operator | Google's infrastructure, which may be outside your country; see Google's notices | 12 months after the case is closed, including attachments; identity documents copied for verification are removed as soon as verification is complete |
| Cloudflare Pages: this website | Request details such as IP address and browser type, processed to deliver the pages | Hosts the policy website for the operator | Cloudflare's global network; see Cloudflare's notices | Cloudflare's own policies; we receive no visitor logs |