PollyClass privacy
Last updated: 18 September 2026
What we hold about you, the tutor
Your email address and a password, stored only as a hash we cannot read. Your name and your school name if you give them. Your settings, such as the language you teach and the language you read the product in. The notes and lesson plans you write. Ordinary usage records: when you signed in, what you opened, what you published to a student. If you write to us, we keep the email.
What we hold about your learners
Only what teaching needs. The name you typed for the student, which is often just a first name. The practice you send them and what they answered. How far they got. If a learner connects their own PollyStop account, their account and their wider learning live under PollyStop's policy from then on, and what you see stays limited to their work with you.
Guest practice, and the 14 days
A learner can practise from your invite link without making an account. We store that practice against the invite token and a random key in their browser, not against a name. Those guest sessions expire 14 days after they start and are then deleted. If the learner creates an account from the link before that, what they practised moves into their own account and stops being a guest session.
What we never do
We never sell data, yours or your learners', to anyone. We do not use learner practice to train AI models. There is no advertising in PollyClass and no advertising trackers in it. We never show a learner's practice to another tutor, and we never turn your class into a template for somebody else.
Who processes it
A short list, and each one receives only what its job requires.
- Amazon Web Services hosts our servers, database and files, in the United States.
- Postmark delivers our transactional email, such as password resets.
- MailerLite is our mailing list. It receives your email address and first name, and every email has an unsubscribe link.
- Bugsnag (SmartBear) receives error reports so we can fix what broke.
Because our servers are in the United States, using PollyClass from the EU means your data is transferred there. We rely on our providers' standard contractual clauses for that.
How long we keep it
As long as your account exists. Guest practice goes at 14 days, as above. Ask us to delete your account and we delete your notes, your student rows and the practice records attached to them. Copies in our backups rotate out on the normal backup cycle.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask for it in a portable format, or object to some of the processing. Email daniel@tyb.ai and we answer within 30 days. A learner can ask us the same things about their own data. If you are in the EU or the UK, you can also complain to your data protection authority.
Age
A PollyClass tutor account is for adults, 18 and over. Learners practise through PollyStop, which is for 13 and over. If you want to add a student under 13, their parent has to agree first and the parent should hold the account.
Changes
If this policy changes in a way that matters, we update the date at the top and tell you by email. The current version always lives at this address.