Privacy Policy
How AdapEdu collects, uses and protects personal data.
Last updated: 13 September 2026
This policy explains what personal data AdapEdu processes, why we process it, and the rights you have. AdapEdu is an education-accommodations platform that helps schools and individual teachers turn tests and homework into fair, readable versions for students with documented learning needs.
1. Who is responsible for your data
For individual teachers using AdapEdu with their own account, AdapEdu is the data controller. When a school or organisation subscribes to the Enterprise plan, the school is the data controller and AdapEdu acts as a data processor under a Data Processing Agreement. Contact us at [email protected] with any privacy questions.
2. What we collect
Account data: your name and work email. Roster data you upload: student names, pseudonyms and accommodation profiles describing documented learning needs (which can be special category data). Document data: the tests, homework and adapted versions you upload or generate. Usage and technical data such as diagnostic logs needed for security.
3. How we use it
To provide and operate the service — create and adapt documents, manage classrooms, roles and invitations, and store your work. To keep the service secure and to meet legal obligations. We do not sell personal data. We use access logs and audit trails to protect the service and your data.
4. Legal bases
We process your data to perform our contract with you (Art. 6(1)(b) GDPR), to comply with legal obligations, and where we have a legitimate interest in operating and securing the service. Special category data about students' learning needs is only processed for educational accommodation purposes and on an appropriate basis under Art. 9 GDPR — typically with the explicit consent of a parent or guardian, or another valid ground. Please obtain the consents required by your school and families before uploading student data.
5. Cookies and consent
AdapEdu uses essential cookies required for sign-in and security (always active). With your permission we also use analytics to understand how the service is used, plus functionality and marketing cookies. Our analytics is provided by BuddyStat and loads only after you grant the analytics category; choices are aligned with Google Consent Mode v2 so nothing runs before you decide. You can change your choices at any time via the "Cookie preferences" link in the footer.
6. Sharing and processors
We only share data where necessary to run the service - for example EU/EEA hosting and infrastructure providers, and BuddyStat for privacy-conscious analytics. We never sell data. Processors are bound by contract under Art. 28 GDPR, and a list of sub-processors is available in our DPA.
7. Retention
We keep your data only as long as needed to provide the service or as required by law. You (or your school admin) can delete documents, students and classes at any time and set automatic retention periods. Pseudonymised records used for security may be kept longer and are not linked to individuals.
8. Your rights
You have the right to access, correct, delete and port your personal data, to restrict or object to processing, and to withdraw consent at any time. To exercise these rights, contact [email protected]. Where the school is the controller, please direct requests to your school. You may also lodge a complaint with your local supervisory authority.
9. Security
We apply role-based access control, pseudonymisation, encryption in transit and at rest, and a clear audit trail. Access is scoped so teachers only see the classrooms they are assigned to.
10. Contact
Questions about this policy or your data can be sent to [email protected]. If you are an Enterprise customer, contact your school administrator or our support team for requests related to the DPA.
For questions, data requests or to delete your data, you can also email [email protected]