1. Introduction
DigitalTeacherHK (“we”) operates rollclass.fun and Classroom Hub (the “Service”). We value your privacy and aim to handle personal data lawfully and fairly in the spirit of Hong Kong’s Personal Data (Privacy) Ordinance (PDPO), Taiwan’s Personal Data Protection Act, and Macao-related personal data rules.
This Policy explains how we collect, use, store, disclose, and protect personal data. Using the Service means you have read this Policy; when registering or first creating an account via a third party, you must expressly agree to this Policy and the Terms of Service.
2. Data controller
Operator: DigitalTeacherHK
Service: rollclass.fun / Classroom Hub
Email: digitalteacherhk@gmail.com
3. Data we collect
Depending on features you use, we may collect:
- Account data: email, password (hashed; we cannot read plaintext passwords), sign-in logs.
- Teaching / class data: class names, student names or nicknames, groups, seats, RollCoin records, settings, blackboard content, game records, and other data you enter or generate.
- Technical data: browser type, device info, IP address (may be logged by cloud providers), error logs and usage for operations and security.
- Local data: in guest mode some data stays only in your browser (localStorage) and is not uploaded.
Important: If you enter student personal data, as an educator or school representative you must ensure school authorisation and (where applicable) student/parent consent, and enter only the minimum needed for teaching.
4. Purposes and legal bases
We process personal data only as needed to:
- create and manage teacher accounts;
- provide classroom management, cloud sync, backup and restore;
- keep the Service secure, prevent abuse, and troubleshoot;
- respond to enquiries or support requests;
- improve the Service and show institution-level social proof in aggregated, de-identified form (§4A);
- comply with applicable law or regulatory requirements.
Bases include: performing our contract with you (Terms), your consent (registration or first Google/third-party sign-in), and legitimate interests (running a secure education platform and showing institution-level usage to prospective users), without overriding your rights.
4A. Institution social proof
To help prospective users understand adoption, we may display on the sign-in page or other public UI, in aggregated, de-identified form, names of schools/institutions where teachers use the Service. Such display:
- shows only institution names (and region tags such as HK / TW / MO);
- does not publish individual teachers’ names, emails, photos, classes, student data, or other personally identifying information;
- may infer institution names from institutional email domains and human review; inferences are indicative only and do not mean official partnership, sponsorship, or exclusive designation;
- if you believe your institution should not be listed, email digitalteacherhk@gmail.com to request removal (we will handle within a reasonable time).
5. Cloud storage and third parties
After sign-in, class data may sync over TLS to a cloud database provider (currently Supabase). The provider processes data on our instructions under its security and compliance standards.
We do not sell your personal data. We disclose data only:
- to technical vendors needed to run the Service (under confidentiality);
- when required by law, court order, or to protect our and users’ legitimate interests;
- for institution-name social proof under §4A (no personal identifiers);
- with your explicit consent.
6. Cross-border transfers
Cloud servers may be outside Hong Kong or Taiwan. Where data is transferred elsewhere, we use appropriate safeguards (e.g. encrypted transit and contractual protections) consistent with applicable privacy law.
7. Retention
We retain data while needed to provide the Service. If you delete your account or request deletion, we delete or anonymise related personal data within a reasonable time, except where law requires retaining backups or records.
8. Security
We take reasonable technical and organisational measures, including HTTPS/TLS, access controls, password hashing, and provider database security. Internet transmission is never absolutely secure; keep your credentials safe.
9. Your rights
Depending on your location, you may have rights to:
- access personal data we hold about you;
- correct inaccurate data;
- request deletion (where no legal retention duty applies);
- object to or restrict certain processing;
- withdraw consent (without affecting prior lawful processing).
Email digitalteacherhk@gmail.com; we may verify identity before acting and will respond within a reasonable time.
10. Cookies and local storage
We use localStorage and similar technologies for language preference, auth state (via third-party auth), and local class data. You may clear them in browser settings, which may affect functionality.
11. Children and student data
The Service is primarily for teachers and educators, not direct student account registration. Student-related data is entered by teachers in a teaching context; teachers and schools are responsible for lawful authorisation and school policies.
12. Policy updates
We may update this Policy. Material changes will be noted in the Service or on registration pages; continued use after updates means acceptance. Please review this page periodically.
13. Contact
Questions about this Privacy Policy: digitalteacherhk@gmail.com