Privacy

Your data, explained simply.

Last updated: 26 September 2026

Controller and contact

The controller for account, contact, early-access list and commercial relationship data is Àlex Pedrol i González (Spanish tax ID 46762843W), the self-employed owner of AulaWise, with professional address at Gorgonçana 7, 08292 Esparreguera, Spain. For any privacy question, you can write to hello@aulawise.com.

When an academy or teacher enters student data, they will normally act as controller for that data; AulaWise processes it to provide the service and under their instructions.

What data we process

We store the data AulaWise needs to work: user account, classes, students, marks, mocks, attendance, reports, goals and settings you enter in the tool.

If you write through the contact form, we process your name, email, role and message so we can reply. If you join early access, we process the details you provide to notify you of the launch and manage your request.

Do not enter health data, diagnoses, family circumstances, disciplinary data or other particularly sensitive information unless it is strictly necessary and you have a legal basis to process it.

Purposes and legal basis

We use data to create and protect the account, show the dashboard, save progress, generate reports, provide support, prevent misuse and keep the service secure. The usual basis is performance of the service you request and our legitimate interest in keeping it secure.

We use contact details to answer enquiries. For early-access notices or related promotional communications, we rely on your request or consent; you can stop receiving them at any time by writing to hello@aulawise.com.

We do not sell teacher, student or centre data, and we do not use it to train our own models.

Reports supported by artificial intelligence

AulaWise only uses AI when a teacher expressly asks to generate an individual assessment. To do this, it sends OpenAI the student's display name and the academic data strictly needed for that report, such as results, attendance, trends and papers to strengthen.

We do not send the student's email address or the teacher's internal notes to this feature. The generated text is a supporting draft: the teacher must review it, edit it if necessary and approve it before sharing it.

AI does not automatically decide whether a student passes, progresses to another level or accesses a course. Estimates and recommendations are indicative only and do not replace professional teacher judgement or any official result.

Technical providers and transfers

AulaWise uses Clerk for authentication, Supabase for database storage, Vercel for hosting and anonymous analytics, Resend for email, and OpenAI for optional AI report generation. Google Analytics only loads if you accept it through the cookie notice.

These services act as technical providers. Some may process data outside the European Economic Area; where that happens, applicable contractual safeguards and provider measures are used. OpenAI states that data sent to its API is not used to train its models by default, although it may retain technical logs for a limited period to prevent abuse.

Retention and security

We keep account and teaching-content data while the account remains active or while it is needed to provide the service. Contact or early-access data is kept until the enquiry is resolved, the service launches or you ask to be removed, unless a legal obligation requires longer retention.

We use access controls, authentication, encryption in transit and reasonable technical measures to protect information. No system is completely infallible; for that reason, we also limit the data processed and review access to the service.

Your rights and complaints

You can request access, correction, deletion, restriction, objection or portability of your data by writing to hello@aulawise.com. If AulaWise processes a student's data on behalf of a centre or teacher, the request should first be made through that controller.

You can also lodge a complaint with the Spanish Data Protection Agency if you consider that processing does not comply with applicable law.

Centres, teachers and minors

The teacher or academy must properly inform students and families about the use of AulaWise, identify the applicable legal basis and only enter necessary data. This care should be heightened where minors are involved.

AulaWise makes the applicable data-processing agreement available to govern instructions, security, subprocessors, assistance with data rights and deletion or return of data at the end of the service.