Privacy policy
In plain English
Your school decides what happens to your students' data. We only act on your instructions.
Each school's data lives in its own database - not a shared table with a column saying which school a row belongs to. That is a physical boundary, not a filter someone could forget to apply.
We do not sell data, do not run advertising, and there is no third-party tracking in the parent app.
Who is responsible for what
Schoolory is operated by VNIS Vietnam Company Limited, a company registered in Vietnam (business registration number 0106023568) with its registered office at No. 25, Alley 8, Lane 260 Cau Giay Street, Cau Giay Ward, Hanoi, Vietnam. That company is the one holding the data described below, and the one you contract with.
Your school is the data controller: you decide what student data to collect and why. VNIS Vietnam Company Limited is the processor: we hold and process it on your instructions. Our Data Processing Agreement sets this out in contract form.
What we hold
For your staff: name, email, phone, job details, and whatever HR information you choose to record.
For students and parents: name, contact details, date of birth, classes, attendance, progress reports and tuition records - the things a school needs to run.
For us: your subscription and billing status. Card details are handled by Paddle and never reach our systems.
What we do not do
We do not use your data or your students' data to train AI models.
We do not embed advertising or analytics trackers in the parent portal, or in the app your staff use. Parents opening a link about their child are not a marketing audience.
We do not sell or rent data to anyone, in any form, including aggregated.
Cookies and analytics on our marketing site
On the public pages of https://schoolory.com - the pages describing and selling the product - we use Google Analytics to understand which pages help schools decide. It loads only if you accept the cookie banner. Decline and no Google script is loaded and nothing is sent.
Your choice is remembered in your browser's local storage, not in a cookie, so nothing is stored until you have actually chosen.
This applies to the marketing site alone. The application, the parent portal and the check-in screens contain no third-party analytics whatsoever, whatever you choose here.
We also keep our own count of page views on the marketing site. It sets no cookie, stores no IP address and creates no visitor identifier, so it counts views rather than people.
AI features
AI features send the specific records needed for that task - a student's attendance figures, for example - to Anthropic, who process it and return a result. Anthropic do not train on it.
AI is off until you switch it on. You can use your own Anthropic key if you would rather the data go through your own account.
Where your data lives
Databases are hosted on Turso, currently in Asia-Pacific. Additional regions, including the EU, are being added; when more than one is available you choose yours when the workspace is created, and it cannot be moved afterwards without copying the database.
Data is encrypted in transit and at rest, and backups are held to the same standard.
How long we keep it
For as long as you have an account, plus 30 days after you close it. After that the database is deleted - not archived, not flagged inactive.
Your rights
Parents and staff should contact the school first: the school holds the relationship and the records.
If you need to reach us directly, email support@schoolory.com. We answer within five working days.