Privacy Policy

1. General

Inform(Ed) is an online service designed for recording, analyzing, and improving classroom and teaching activities.

Inform(Ed) is developed and operated by Thomas Flynn Mulvoy, Gotthardstrasse 102, 6490 Andermatt, Switzerland ("we", "us", "our", and our subsidiaries or affiliates).

This Privacy Policy applies whether you log-in to Inform(Ed) in the browser at edinformed.com or any of our other products or services that link to this Privacy Policy that we may provide now or in the future (collectively, the "Service(s)").

This Privacy Policy does not apply to websites or services or practices of companies that we do not own or control, such as third-party services you might access through links or other features (e.g. e-mails or notifications) on Inform(Ed). Please note that such other services may have their own privacy policies. We recommend reviewing their policies before sharing any personal in- formation with them.

For the purposes of this Privacy Policy, the 'data controller' is the Partner, while we act as the 'data processor' in relation to personal data, pursuant to the GDPR regulations as also referred to further below.

By using Inform(Ed), you acknowledge that you accept and agree to this Privacy Policy and our Service Agreement. If you have any questions regarding this Privacy Policy or data protec- tion in general, please send us an e-mail at tommy@edinformed.com.

2. What is Inform(Ed) and how is it used?

Inform(Ed) is an online service designed for recording, analyzing, and improving classroom and teaching activities.

Generally, a school, district or a teacher purchases a service package to use the Services, accepts the Service Agreement and becomes our contractual partner (“Partner”). The Partner acts as data controller while we act as data processor on behalf of the data controller and will process the data only at its direction and control.

The Partner may create its own account or have one or several more users create their own accounts to make use of the Services («User»). Data Subjects may be Partners, Users and other persons such as students of a class to which the Services are applied to.

As per GDPR, Users may submit Data Subject requests (such as access, correction, or deletion of data) through the Partner, who will act as our primary contact for such requests. We will assist the Partner in responding to such requests as needed. We offer a Data Processing Agree- ment (DPA), an agreement we enter with data controllers that further describes our duties, re- sponsibilities, and commitments with respect to personal data that we collect or receive.

For further information on your taking part and use of the Service, please see our Service Agree- ment at edinformed.com.

3. What data does Inform(Ed) store?

3.1 Data that you, your school or district provide us with

We will collect first name, surname, school and e-mail address of the Partner and the User.

The Partner is responsible for the privacy of the User and other data subjects, such as students. It is the Partner’s obligation to get User’s consent as well as parental consent when needed before using our Services if their personal data may be affected.

The Partner will be able to view and administer the User accounts, including any content and evaluations stored under the User accounts.

f you contact us via help chat or e-mail, these messages and the date and time of the messages will be stored so that we can communicate with you.

3.2 Information that we automatically receive through your use of Inform(Ed)

When you use Inform(Ed), we will store data about your use.

This data includes: class recordings, generated transcripts, your device type, operating system and Internet browser as well as your pseudonymized IP-address.

We do not store the last three digits of your IP-address in our system, so it cannot be used to identify you.

We will not store or track your device location. Because we do not store your full IP-address, it can also not be used to identify your precise location. We use your pseudonymized IP-address to get a very broad approximation of your location that is reliable on the country level but not on a city level.

4. What is this data used for?

We do not engage in profiling or behavioral advertising and will not use personal information for marketing or advertising purposes without your explicit consent. We do not sell or rent any of your personal information to any third-party for any purpose. Third-party advertising is not permitted in Inform(Ed) and User, classroom or student-data is never used for behaviorally- targeted advertising.

We use the personal information we collect only to provide and improve Inform(Ed), for edu- cational purposes, security, and safety purposes, to answer your requests and questions sent to our customer service or as allowed or required by law.

5. How long is the data stored?

Personal data will be deleted as soon as the purpose for which it was stored ceases to apply.

User data and uploaded content such as recordings will be stored for as long as you have an active user account at Inform(Ed). If you no longer use Inform(Ed) and are not a member of a school directory administered by a Partner, we will automatically delete your user data 12 months after you last logged in or after your Inform(Ed) membership ends.

If you are a member of a school directory, the school as the Partner is responsible for deleting your user account via our user Interface when the purpose for which it was stored ceases to apply (e.g. when you leave the school).

We do not retain a personal data for any longer than is necessary for educational purposes or legal obligations, or to provide the Service for which we receive or collect the user's personal information. Additionally, we only keep a User's personal information for as long as her or his user account is active, unless we are required by law or the user's school to retain it, need it to ensure the security of our community or our Service, or to enforce our Service Agreement.

6. Does Inform(Ed) share data with third parties?

We do not sell your personal data. We do not share personal information with any third-parties except in the limited circumstances described in this Privacy Policy and as stated below:

  • The Partner and other Users You Interact with on Inform(Ed): The Partner and other User that have been authorized by the Partner can see your account content and details.
  • Information You Shared: Please remember that information (including personal Infor- mation) or content that you voluntarily share with others -including with other In- form(Ed) Users - can be viewed, copied, saved, and used by the people you share it with. We cannot control what people do with the information you choose to share with them and we are not responsible for how others collect, use, or share that information or con- tent.
  • Trusted Service Providers: We work with vendors, service providers, and other partners as far as necessary to provide Inform(Ed) by performing tasks on our behalf. These com- panies have only limited access to data and are contractually bound to process the data solely on our behalf and only for the purpose for which it was disclosed. They are not third parties as defined in the GDPR but data processors on our behalf. We may need to share or provide information (including personal information) to them to help them per- form these functions, for example sending e-mails on our behalf, hosting, and security. We may also authorize these companies to collect information on our behalf. These ser- vice providers must adhere to confidentiality and security obligations in a way that is consistent with this Privacy Policy.
  • Legal Requirements: We may disclose information if we have a good faith belief that doing so is necessary to comply with the law, such as complying with a subpoena or other legal process. We may need to disclose personal information if, in good faith, we believe it is necessary to protect the rights, property, or safety of Inform(Ed), our em- ployees, our community, or others, or to prevent violations of our Service Agreement or other agreements. This can include, without limitation, responding to law enforcement Z29292CH00 13.06.2025 page 4/8 and requests by the government. Where appropriate, we notify users about the legal re- quests, unless providing notice is prohibited by the legal process itself, by court order, or by applicable law; or if we believe that providing notice would be ineffective, create a risk of injury or bodily harm to an individual or group, or create or increase a risk of fraud upon Inform(Ed), or its users. In cases where we have to comply with legal re- quests without notice for these reasons, we will attempt to notify the user about the re- quest after the fact where appropriate and where we believe in good faith that we are no longer prevented from doing so.
  • Change of control: This Privacy Policy will continue to apply, and any acquirer would only be able to handle personal information as stated in this policy (unless the school, parent or eligible User consent to a new policy). We will inform the Partner of an acqui- sition within 30 days following the completion of such a transaction, by posting on our homepage, or by e-mail to the Partner’s e-mail address if such was provided to us. If the Partner does not consent to the use of personal information by such a successor com- pany, subject to applicable law, the Partner may request its deletion. We may also make information, including personal information, available to a potential Investor or acquirer (or their advisors) in advance of any such transaction completion.
  • In the unlikely event that Inform(Ed) goes out of business, or flies for bankruptcy, we will protect your personal information and will not sell it to any third-party.
  • With Partner’s consent: Other than in the cases above, we won't disclose any personal information for any purpose other than with the Partner’s consent.

7. How is the security of the data guaranteed?

The Inform(Ed) User account is protected by a password and/or a login-code. To protect against unauthorized access to the User account, the password and login-code must be kept secret at all times. The security of personal information is important to us. We are committed to protecting personal data and have implemented technical, physical and administrative security measures to prevent unauthorized use, disclosure, or access to personal information, in particular:

Privacy by design and default: Our engineering team is committed to ensuring the security of personal information. When we develop new features, we do this with privacy and security in mind from the outset.

We perform security testing; conduct risk assessments and ensure compliance with our security policies.

We periodically review our data processing practices to guard against unauthorized access to systems.

When User enter any information anywhere on Inform(Ed), we encrypt the transmission of that information using secure socket layer technology (SSL/TLS) by default.

We make sure passwords are stored and transferred securely using salted hashing and encryp- tion.

Data centers meet the highest security standards and are certified according to DIN ISO/IEC 27001.

We automatically delete inactive accounts and user data 12 months after the User last logged in or after User’s Inform(Ed) membership ends and User is not a member of a school directory administered by a Partner.

We limit access to personal information to employees and independent contractors who are authorized to process it for us. These individuals are bound by strict confidentiality obligations and may face disciplinary action or termination if they fail to meet these obligations.

While we strive to maintain the security of personal information and work hard to ensure the integrity and security of our systems, no system is 100% immune and we cannot guarantee the security of information. User information may be compromised due to outages, attacks, human error, system failure, unauthorized use, or other factors beyond our control. We have an incident response management in place that ensures that we can respond in an adequate and timely man- ner to mitigate risks and inform users.

If we learn of a security breach, we will attempt to notify you electronically (subject to any applicable laws and school reporting requirements) so that you can take appropriate protective steps; e.g., we may post a notice on our homepage (edinformed.com) or elsewhere on the Ser- vice, and may send e-mail to you at the e-mail address you have provided to us. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.

8. Our commitments to transparency and User rights

The Partner has control over the personal information shared with us. The Partner and the User can access or correct this information at any time and also delete the account.

We provide ways to object, restrict or withdraw consent (where applicable) for the use of per- sonal information provided to us. We make it easy for to contact us and to transfer the personal information shared through the Service.

To exercise any of these rights, send an e-mail to tommy@edinformed.com. Please note that we may ask to verify your Identity before taking any further action on your request and we may require acceptable forms of personal identification.

We will not discriminate against you for exercising any of your rights under applicable privacy laws. Unless in accordance with the applicable privacy law, we will not do any of the following: deny you goods or services, charge you different prices or rates for goods or services, including granting discounts or other benefits, or imposing penalties, suggest that you may receive a dif- ferent price or rate for goods or services or a different level or quality of goods or services.

9. Data Subject Rights

Residents in Switzerland and the European Union are entitled to certain rights with respect to personal information that we hold about them under the Swiss Data Privacy Act or the General Data Protection Regulation (GDPR) respectively

These data subject rights need to be invoked through the Partner as our primarily contact and contractual partner.

We will grant the following rights also to data subjects to which these specific regulations are not applicable.

9.1 Right to information

Every User and other data subject has the right to receive free information about the personal data stored about him/her. Please send us an e-mail to tommy@edinformed.com with the fol- lowing information for your identification: user name, name, e-mail address, postal address and date of birth.

9.2 Right to correction

Every User and other data subject has the right to rectification and/or integration if the personal data processed concerning him/her is incorrect or incomplete.

9.3 Right to limit processing

Under the following conditions, you may request the restriction of the processing of personal data concerning you:

  • If you dispute the accuracy of the personal data concerning you for a period of time that allows us to verify the accuracy of the personal data.
  • If the processing is unlawful and you object to the deletion of the personal data and instead demand the restriction of the use of the personal data.
  • We no longer need the personal data for the purposes of the processing, but you need the personal data to assert, exercise or defend legal claims.
  • If you have lodged an objection to the processing in accordance with Art. 21 GDPR and it has not yet been established whether the legitimate reasons of the data controller in relation to your reasons outweigh the others.
  • If the processing of personal data relating to you has been restricted, such data may be processed, with the exception of storage, only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest. If the restriction on pro- cessing has been restricted under the above conditions, you will be informed by us before the restriction is lifted.

9.4 Right of deletion

You can delete User data by clicking the "delete user" button in the settings. We will delete all your personal User data stored on our servers after a safety period of 30 days and confirmation by the Partner.

9.5 Right to data transferability

The Partner can mark User accounts that they have created or for which they are responsible for administration for deletion after a transition period of 30 days. The Users must be informed by the school. The Users are given the opportunity to transfer the data stored in the User account to a new account and to continue using it independently within a period of 30 days, provided they have agreed to the Service Agreement separately. After this period the user accounts will be automatically deleted.

You have the right to request a copy of your personal data in electronic format. Upon request, we will send you a file containing your personal data. To do so, please send us an e-mail to tommy@edinformed.com with the following information for your identification: user name, registration code, first and last name, possibly maiden name, e-mail address and postal address.

9.6 Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you.

9.7 Right to revoke the declaration of consent under data protection law

You have the right to revoke your data protection declaration of consent at any time. Revocation of your consent does not affect the legality of the processing that has taken place on the basis of your consent until revocation.

9.8 Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a supervisory authority, in particular in the State of your residence, workplace or the location of the probable offense if you believe that the processing of personal data concerning you is in breach of applicable privacy regulations.

10. What is the legal basis for the processing under GDPR?

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) lit. a GDPR serves as the legal basis.

When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations which are necessary to carry out pre-contractual measures.

Insofar as processing of personal data is necessary to fulfil a legal obligation to which our com- pany is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

11. How will I be notified about changes to this policy?

We may occasionally update this Privacy Policy as our practices and legal requirements evolve or to further protect our users. Please see "last updated" at the top of this page for the date it was last updated. We will not reduce your rights under this Privacy Policy without your explicit consent. If we make any significant changes, we will notify you by posting a notice on the Service and/or sending an e-mail (using the e-mail address you provided), so you can review any edits and make sure you are informed about them.

Furthermore, if we ever make material changes to the types of personal information we collect from children, or how we use it, we will notify parents in order to obtain parental consent or notice for those new practices and provide schools with the necessary information about these changes where they have obtained parental consent (or acted as the agent of the parent and provided consent on their behalf).

We encourage you to review this Privacy Policy regularly, to stay informed about our pro- cessing of personal information through the Service. If you don't agree with any changes to the Privacy Policy, you may delete your account. By continuing to use the Service after the updated Privacy Policy has become effective, you acknowledge that you accept and agree to the current version of the Privacy Policy.

12. How can I contact Inform(Ed) with questions?

If you have any questions or concerns about this Privacy Policy or how we protect user data, please contact us at tommy@edinformed.com.

You may also write to us at:

Thomas Flynn Mulvoy

Gotthardstrasse 102

6490 Andermatt

Switzerland