Privacy
Privacy policy
What FairCall handles, why it is handled, and the controls available to teachers and schools.
At a glance
Privacy commitments for pilot schools, teacher accounts, and student roster data.
- FairCall is designed for reflection and planning, not grading or assessment.
- Teachers can export data at any time and can delete accounts and class data.
- We do not sell data and do not use third-party ad tracking.
- For school deployments, schools are generally data controllers and FairCall operates as a processor.
Privacy foundation
FairCall is a teacher reflection tool for equitable classroom participation, not a grading or assessment platform.
Role under UK GDPR
In most school contexts, the school or trust is the data controller and FairCall is the data processor. Individual teacher use outside a formal school agreement may change role allocation; where needed, we clarify this in onboarding agreements.
Lawful basis
We generally rely on contract and legitimate interests to provide and improve the service. Where schools act as controller, they determine their own lawful basis and FairCall processes data under their instructions.
1. Who we are
FairCall provides software that helps teachers run fairer cold-calling routines and review participation patterns. If you have questions about this policy, contact support@faircall.app.
2. Data we collect
Teacher account data
email address, password hash, authentication/session metadata.
Class and student data
class names, student names, optional student identifiers, optional photo URLs.
Lesson activity data
lesson timestamps, selected student events, optional outcome logs (correct/partial/incorrect), and attendance/absence marks for a lesson.
Operational data
sync status and error telemetry needed to keep the app reliable.
3. Why we use this data
- Provide and secure the service (login, data access, tenant isolation).
- Run lesson workflows (ask/select, optional logging, summary and trends).
- Support teacher reflection and participation equity checks.
- Diagnose reliability issues and improve performance.
- Meet legal obligations and respond to data-rights requests.
4. Data sharing and subprocessors
We only share data with service providers needed to run FairCall. Current and planned subprocessors include:
| Subprocessor | Purpose | Region | Status |
|---|---|---|---|
| Vercel | Frontend hosting and delivery | EU/US (config dependent) | Planned |
| Railway | Backend hosting and PostgreSQL database | UK/EU preferred | Current |
| Cloudflare (future) | Asset and object storage (if enabled) | EU preferred | Future option |
5. International transfers
Where data is processed outside the UK, we use appropriate safeguards, for example contractual protections and region controls, and work with schools on transfer transparency.
6. Retention and deletion
- Default policy target is retention for the current academic year plus one additional year, unless deletion is requested earlier.
- Teachers can export data from Account at any time.
- Teachers can delete class data and account data through in-app controls.
- School customers may request custom retention schedules through their agreement.
7. Security controls
- Password hashing with bcrypt and authenticated access controls.
- Teacher-level tenant isolation so teachers can access only their own data.
- Secure transport (HTTPS/TLS) in production environments.
- Input validation and secure backend query handling.
8. Your rights
Subject to applicable law, you may request access, correction, export, restriction, or deletion of personal data. To submit a request, contact support@faircall.app.
9. Children and student data
FairCall is intended for teacher use. Students do not create accounts in this MVP. Schools remain responsible for ensuring lawful use of student data in their context.
10. Changes to this policy
We may update this policy as the product evolves. Material updates will be reflected by changing the date above and publishing revised text on this page.
Related compliance documents
Continue school review with terms, DPA, and DPIA references.
Need help with a privacy review?
Start the right support path for policy questions, school review, or account-level export and deletion controls.