Privacy Policy

1. Who we are

Timewise Primary is provided by Alexander George Neophitou, a UK sole trader trading as Timewise Primary. For teacher account data we are the data controller under UK GDPR and the Data Protection Act 2018. Contact: alexneophitou@neweducationoutlook.co.uk.

2. Pupils

Pupils do not create accounts. They open a shared timeline by typing a short class code. We do not ask pupils for names, emails or any other personal information, and we set no cookies for them. Teachers should avoid adding identifiable pupil information to timelines; where a school chooses to (for example in a personal history timeline), the school is the controller of that content and we process it on its behalf.

3. What we collect and why

• Account details (email address, name if provided by a Google sign-in, login credentials): to create and secure your account. Legal basis: contract.
• Your content (timelines, labels, dates, uploaded images): to provide the service. Legal basis: contract.
• Plan and school details (your plan, school seat list of colleague emails): to manage subscriptions and seats. Legal basis: contract.
• Support messages: to answer your questions. Legal basis: legitimate interests.
• Technical and usage data (pages visited, device and browser type, errors, IP address in server logs): to keep the service secure, fix problems and improve it. Legal basis: legitimate interests.

4. Visitor analytics

We use Lovable's visitor analytics. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. Detailed data is kept for 90 days and daily summaries for a year. This is recorded for every visitor, without cookies and without identifying anyone.

5. Cookies and local storage

We use only essential browser storage to keep teachers signed in. We use no advertising or marketing cookies.

6. Who we share data with

• Service providers that host our app, database, file storage and AI image generation.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, payments, tax compliance and invoicing. Paddle handles your card details; we never see them.
• Google, if you choose to sign in with Google.
• Professional advisers (such as accountants or lawyers) where needed.
• Authorities where required by law.

We never sell your data.

7. International transfers

Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or standard contractual clauses (including the UK International Data Transfer Addendum) to protect it.

8. How long we keep data

We keep account data and content while your account is active. When you delete a timeline or close your account, we delete or anonymise the related data within a reasonable period, except records we must keep by law.

9. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls so only you can see your timelines, and private image storage.

10. Your rights

You have the right to access, correct, delete, restrict or object to the processing of your data, to data portability, and to withdraw consent where we rely on it. Email us to make a request; we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

11. Changes

We may update this policy and will show the new date above.