Privacy Policy of stillwell

Introduction

Better Lives ApS is committed to protecting the privacy of our users and customers. This privacy policy explains how we collect, use, share, and protect personal information in accordance with the General Data Protection Regulation (GDPR).

This policy covers stillwell (the teacher web app) and Stillwell browser (the student browser).

This document was generated using the iubenda GDPR privacy policy template and then customized for stillwell: GDPR privacy policy template.

Data Controller and contact

Data Collection

We collect personal data when you use our services or interact with us. This may include:

1. Teacher account information
   Example: When a teacher creates an account or signs in (email or social login), we process their name and email address to provide access to stillwell.
2. Organization / school information (optional)
   Example: A teacher may provide school or organization details in the product to help manage their setup.
3. Support communications
   Example: If you contact us for support, we process the information you provide so we can respond and resolve issues.
4. Usage data, technical data, and cookies
   Example: We use cookies required for authentication. We also collect technical and usage data such as IP address, device identifiers, and product usage analytics to operate and improve the services.
5. Student session data (Stillwell browser)
   Example: Students do not create accounts. Stillwell browser may process a pseudonym and information the student chooses to enter (typically a first name) to participate in a classroom session.
6. Stillwell browser activity and capture data
   Example: Stillwell browser may log browsing history and related data. Additionally, Stillwell browser may capture screenshots, keystrokes, clipboard content, and similar information as part of the product functionality.
7. Billing details (when applicable)
   Example: If we offer paid plans, we (and our payment providers) may process billing details to handle payments and invoicing.

Purpose of Processing

Your data is processed for the following purposes:

1. To provide and improve our services
   Example: We use data to operate stillwell and Stillwell browser, manage teacher accounts, and improve reliability and product functionality.
2. For customer support and communication
   Example: If you contact support, we use your data to respond to your requests and resolve issues.
3. To comply with legal obligations
   Example: Where applicable, we retain information needed for accounting and compliance purposes.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

1. Your consent
   Example: Where required by law, we rely on consent for optional analytics cookies.
2. The need to fulfill a contract with you
   Example: We process teacher account data to provide access to stillwell.
3. Our legitimate interests
   Example: We process technical and usage data to secure and improve the services and prevent abuse.
4. Legal requirements
   Example: We may process data to comply with applicable laws, audits, or lawful requests.

Data Transfer Outside the EU/EEA

In some cases, personal data may be processed by service providers in locations outside the EU/EEA. Where this occurs, we rely on appropriate safeguards (such as standard contractual clauses) as required by GDPR.

Use of Cookies and Other Trackers

We use cookies and similar technologies required to provide the service (for example, authentication). We also use product analytics to understand how the services are used.

At this time, we do not use marketing pixels.

Service Providers (Processors)

We use the following service providers to operate the services:

• Vercel (hosting)
• Supabase (database and authentication)
• PostHog (analytics)
• Sentry (error monitoring)

Data Subject Rights

Under GDPR, you have the right to:

1. Access your personal data
2. Rectify incorrect data
3. Erase your data in certain circumstances
4. Restrict or object to processing
5. Data portability

You can exercise your rights by contacting rune@stillwell.io. Students may request deletion themselves.

Data Security

We take appropriate measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.

Data Retention

Personal data is retained as long as necessary for the purposes stated, unless a longer retention period is required or permitted by law.

Changes to this Policy

We may update this policy. We will update the effective date above when changes are made.

Contact Us

For questions or to exercise your data protection rights, please contact us at:

• Data Controller: Better Lives ApS
• Address: Asser Jensens Vej 62, 7000 Fredericia, Danmark
• Email: rune@stillwell.io

This document was generated using the iubenda GDPR privacy policy template and then customized for stillwell: GDPR privacy policy template.