Privacy Information:
scoolio App

When using the scoolio app for the first time, a short setup of the app is required (Art. 6 (1) sentence 1 lit. b) GDPR). After confirming the minimum age to use the app of 16 years, as well as agreeing to the Terms of Use and taking note of the Privacy Policy, it is necessary to enter which region you come from. By choosing a specific region, you will then be assigned to the respective ‘welcome campus’ in that region (e.g. Welcome Campus Berlin). For example, the holiday dates displayed are based on the assignment to a regional welcome campus. In addition, you can later voluntarily decide in your profile whether you also want to indicate the school you are attending (Art. 6 (1) sentence 1 lit. a) GDPR).

This information will not be passed on to third parties. Even if you are generally free to decide what information you want to provide about yourself as part of your use of the app from the age of 16, we recommend that you talk to your parents about whether and what information you should disclose about yourself. Of course, it is also possible to set up the scoolio app without specifying a school. You can also change the specified school at any time.

During the setup of the scoolio app, you can decide whether you want to register and create a user profile or use the scoolio app without registration and user profile. Further information on data processing during registration can be found below.

The timetable function allows you to enter your individual timetable in the scoolio app. This is stored locally on your device, which means that no information about you or your schedule is transmitted to us or others. If you want to delete your timetable, you can do so directly in the scoolio app.

In addition, you have the option to export your individually created timetable and share it with others via link. To make this possible, the timetable is loaded into a cloud without any information about you.

Taking into account various functional and security aspects as well as existing risks when transferring personal data to third countries under data protection law, we have opted for the cloud solution from Google, a global company. We have concluded the necessary data protection contracts with Google (data processing agreement, contract for joint controllers). If personal data is transferred to the USA, this transfer is based on an adequacy decision (Art. 45(1) GDPR) and Google's certification under the EU-U.S. Data Privacy Framework. In addition, we ensure in the development that, if possible, only pseudonymized or anonymized data is processed by Google. Further information about data processing at Google can be found here.

In the grade overview you can enter all your school grades, display your current overall average and enter a desired average for motivation. Your grade summary is stored locally on your device, which means that no information about you or your grade summary is transmitted to us or others. If you want to delete your Grade overview, you can do so directly in the scoolio app.

In task and appointment management, you can manage all your due and completed tasks and appointments clearly, assign them to individual subjects and set reminders. What further information you enter about yourself there is up to you. Your task and appointment management is stored locally on your device, which means that no information about you or your tasks and appointments is transmitted to us or others. If you want to delete your tasks and appointments, you can do so directly in the scoolio app.

In addition, you can of course also take over your tasks and appointments in the device's own calendar. Depending on the application and your personal settings, the provider of the device's own calendar may receive information about you. The respective provider is then responsible for this data processing. If necessary, inform yourself in advance accordingly with this provider. Even if you are generally free to decide what information you would like to provide about yourself as part of your use of the app from the age of 16, we recommend that you talk to your parents about it beforehand.

If you want, you can also display your timetable, your tasks and appointments and, if necessary, your grade information directly on your smartwatch. Please note that, as with the use of your smartphone, the respective provider of the smartwatch may also receive information about you. The respective provider is then responsible for this data processing. If necessary, inform yourself in advance accordingly with the respective provider. Even if you are generally free to decide what information you would like to provide about yourself as part of your use of the app from the age of 16, we recommend that you talk to your parents about it beforehand.

Flames indicate how many days in a row you use the scoolio app. Every day, the first time the app is opened, a query is sent to the scoolio backend, which stores this information and increases the flame streak. As soon as the scoolio app is not used for a calendar day, the streak is reset. You have the option to retrieve and view your current streak in the app. In addition, the top 100 users with the highest streaks are displayed in a leaderboard. To display the flames, we process your user ID and the respective numerical value (Art. 6 (1) sentence 1 lit. b) GDPR) for the period of use of the scoolio app.

You can earn badges through various promotions in the scoolio app. For this purpose, these actions are sent either directly from the scoolio app or from the scoolio backend. Only the interactions that are necessary for the corresponding badges are recorded. You can view your own badges or your badge progress at any time. In addition, there is a list of the top 100 users with the most badges and in the iOS version a list of the 20 most recently unlocked badges in the dashboard. As a registered user, you also have the option to view the badges of other users on their profile page. To display the badges, we process your user ID and the respective numerical value (Art. 6 (1) sentence 1 lit. b) GDPR) for the period of use of the scoolio app.

For individual functions of the scoolio app, we use your location after your consent (Art. 6 (1) sentence 1 lit. a) GDPR). These include the ‘School search’ and ‘Event’ functions. We ask you if the scoolio app can use your location. We recommend that you first talk to your parents about whether you want to share your location. Location sharing can be revoked at any time via your smartphone's device settings.

Once we have received the approval of your location, we process it so that you can comfortably use the functions of the scoolio app, but never your exact location, but only the approximate region is transmitted. We work with so-called "masked" location data. If you decide not to indicate your location, we will use the location of your school for the above-mentioned functions. If you did not specify a school, we will use the location of the ‘Welcome Campus’, based on your region, which you indicated when setting up the scoolio app.

In order to be able to show you interesting training and study opportunities, we present advertisements in the scoolio app. We work exclusively with the scoolio own and closed advertising system. This means that no information about you is given to other companies to display the advertisements. We use the location of your school or, alternatively, the location of the ‘Welcome Campus’, based on your region, which you have indicated in the context of setting up the scoolio app, to display advertisements relevant to the environment (Article 6(1), sentence 1 lit. f) GDPR).

In the "Future" section, you have the opportunity to learn more about yourself as part of a skill test. You answer 16 questions about relevant character traits, which you can answer in the affirmative or in the negative. Your answers will be sent to the scoolio backend in the form of numerical values. This will then assign you a personality type from a catalog of predefined personality types that will be displayed to you. In order to carry out the skill test, we only process your IP address and the numerical values described (Art. 6 (1) sentence 1 lit. b) GDPR). Your answers and results will not be saved.

In the area of training and study programs, you will find various job profiles as well as concrete training offers from companies. For each training offer, you can request further information from the respective company. As a result, your profile name, your e-mail address and the time of the request are stored in the scoolio backend (Art. 6 (1) sentence 1 lit. b) GDPR). The company you are interested in can then view this data in the scoolio company account. Companies must register with the scoolio system and agree to our General Terms and Conditions. These include that the data may only be used for the purpose of a specific job offer. An automated transfer of your data to the company or third parties does not take place explicitly. Your prospect listing for an offer will be deleted if you delete your or the company's profile.

If you have released your ‘masked’ location (see ‘Sharing your location’), we use it to display events (e.g. professional and career fairs) in the vicinity of your current location relevant to the environment (Article 6(1), sentence 1 lit. a) GDPR). If you decide not to indicate your location, we will use the location of your school for the above-mentioned functions. If you did not specify a school, we will use the location of the ‘Welcome Campus’, based on your region, which you indicated when setting up the scoolio app.

In the scoolio Shows section you will find interesting videos on topics such as school, education and much more. When a video is opened and played, the retrieval is stored anonymously in the scoolio system. The service provider Cloudflare is used to play the video. Through Cloudflare, usage data (e.g. retrieved content and data volumes, access times) as well as communication data (e.g. IP addresses, device information, routing) are processed on our behalf and stored for up to seven days. This data processing is absolutely necessary for the presentation of the expressly requested content (Art. 6 (1) sentence 1 lit. b) GDPR).

Taking into account various functional and security aspects as well as existing risks when transferring personal data to third countries under data protection law, we have opted for the services of Cloudflare, a global company. Since the level of data protection in other parts of the world does not correspond to that of the European Union or Germany, we have concluded data protection contracts with Cloudflare (data processing agreement, standard contractual clauses (Article 46(2)(c) GDPR). In addition, in the development of the scoolio app, we pay attention to data-saving operation of the scoolio app and only carry out data transfers if it is absolutely necessary. Further information about the data processing by Cloudflare can be found in the Privacy Policy as well as here to ensure the data protection requirements.

In addition to the videos, you can start a chat to the video in the scoolio Shows area or request more information about the video from some corporate videos. When requesting information, if you have registered, your profile name, your e-mail address and the time of the request are stored in the scoolio backend (Art. 6 (1) sentence 1 lit. b) GDPR). Without registration, only the time and a randomly generated name are stored. The company you are interested in can then view this data in the scoolio company account. Companies must register with the scoolio system and agree to our General Terms and Conditions. These include that the data may only be used for the purpose of a specific job offer. An automated transfer of your data to the company or third parties does not take place explicitly. Your prospect listing for an offer will be deleted if you delete your or the company's profile.

During registration, information about you is requested which is absolutely necessary in accordance with our terms of use for the use of the scoolio app (Art. 6 (1) sentence 1 lit. b) GDPR) and which can be provided on a voluntary basis (Art. 6 (1) sentence 1 lit. a) GDPR). From this, a basic profile is created, which contains the following information about you:

• Username
• Confirmation of minimum age
• e-mail address
• Depending on the federal state/country chosen in the onboarding process, a fictitious school (“Welcome Campus [Bundesland/Land]”) is linked to the profile with its coordinates.

Even if you are generally free to decide what information you would like to provide about yourself as part of your use of the app from the age of 16, we recommend that you talk to your parents about it before registering.

Registration in the scoolio app is generally possible by providing an e-mail address or using the Facebook, Google or Apple account.

• by e-mail: If you decide to register by entering your e-mail address, you must set a password for your user profile. E-mail address and password form your access data, which we store with us in hashed / encrypted form.
• via Facebook, Google or Apple account: If you use your Facebook, Google or Apple account to register in the scoolio app, you will be redirected to the page of the respective service (Meta Platforms Ireland Limited, Google Ireland Limited or Apple Distribution International Ltd.) and must log in there with your respective access data. Your profile of the respective service will then be linked to the user profile of the scoolio app. In this context, we only receive knowledge of your e-mail address. Of course, we do not receive any further profile data. Further information on the data processing of the individual services can be found in the data protection notices of Facebook, Google, and Apple.

The information provided during registration is merged into your personal user profile. There you can also change or delete your entries at any time. Please note that other registered users of the scoolio app can also view your profile and connect with you as friends (see section "Friends and Likes"). Although you are generally free to decide what information you would like to provide about yourself as part of your use of the app from the age of 16, we recommend that you first talk to your parents about whether and what other information you would like to disclose about yourself via your profile. Optionally, for example, it is possible to specify a personal status, the school currently attended, interests and hobbies, or a profile picture.

Of course, you can also delete your profile at any time. This can be done via the settings and the ‘Delete profile’ button. Your profile information stored with us will then be completely deleted.

The profiles of other users can be given a like. If two users like each other, they are shown to the other user as a friend. In a separate friends list in the app you can see all friends, as well as incoming and outgoing likes. The link is made in the scoolio backend using the profile ID (Art. 6 (1) sentence 1 lit. b) GDPR). Friendships and likes can be withdrawn at any time. The link will then be deleted.

With the scoolio app you can organize your everyday school life and find an education. To introduce the app as well as to introduce individual functionalities, we would like to provide you with exciting information and news by e-mail at the beginning. For this purpose, we use your e-mail address provided during registration (Art. 6 (1) sentence 1 lit. f) GDPR). Of course, you can unsubscribe from the mailing list at any time and object to the processing of your e-mail address for these purposes. You will find an unsubscribe link at the end of each email. For sending the e-mails, we use the service ofMailjet GmbH, with which we have concluded a contract for processing within the meaning of Art. 28 GDPR. Further information on data protection at Mailjet GmbH can be found here.

To make it easier for you to connect with your classmates and other users of the scoolio app, you can use the Discover section to find users who go to your class, are with you at your grade level, attend your school or are in your environment. We use the location of your school or, alternatively, the location of the ‘Welcome Campus’, based on your region, which you specified in the context of setting up the scoolio app, to display other users of the scoolio app in an environment-relevant manner (Article 6(1), first sentence, point (f) of the GDPR).

Please note that other registered users of the scoolio app can also view your profile and connect with you as friends. Although you are generally free to decide what information you would like to provide about yourself as part of your use of the app from the age of 16, we recommend that you first talk to your parents about whether and what other information you would like to disclose about yourself via your profile.

In this area you have the opportunity to offer or search for tutoring. All offers are checked manually by scoolio support and only released if they comply with our terms of use (Art. 6 (1) sentence 1 lit. b) GDPR). A transfer of your information to third parties does not take place. If you are interested in an offer, you can favor it and contact the provider via a direct message in the chat. We use the location of your school or, alternatively, the location of the ‘Welcome Campus’, based on your region, which you have indicated in the context of setting up the scoolio app, to present other offers relevant to the environment (Article 6(1), sentence 1 lit. f) GDPR).

If you set your own offers, these offers will be linked to your profile. Interested parties can thus visit your profile and view the information you have provided. After 90 days, the offers are automatically deactivated. This means that the offers are no longer visible to other registered users. You have the option to change or delete your offers at any time.

Please be careful what information you provide to others within offers or when contacting others about you. Although you are generally free to decide what information you would like to provide about yourself as part of your use of the app from the age of 16, we recommend that you first talk to your parents about whether and what further information you would like to disclose about yourself.

Through the homework help AI function, you can direct tasks and questions to us, which we have answered for you through an AI model. For this purpose, we forward your entered text in our name and in a closed context to a secure text completion interface of OpenAI (OpenAI OpCo, LLC, 3180 18th St., San Francisco, CA 94110, USA). If you provide photo or voice content, it will be converted into text directly on your device by device-specific applications. Each of these requests is processed independently as a new text completion that is completed immediately after the response and therefore cannot be continued or referenced as a conversation.

For the transmission of the entered text to OpenAI, your personal usage data is expressly not transmitted to OpenAI. The communication with the text completion interface of OpenAI takes place exclusively via a secured channel between the Scoolio servers and OpenAI. The data processing takes place on the basis of an express request for use within the framework of the functionalities provided by us (Art. 6 (1) sentence 1 lit. b) GDPR). Inquiries and answers can be deleted by you at any time in the scoolio app. They will be automatically deleted when you delete your account. On the part of OpenAI, the respective requests and answers are stored for as long as it is necessary to answer the requests. However, OpenAI reserves the right to anonymised further processing for statistical and research purposes. The information is passed on by OpenAI to affiliated companies, service providers, service providers, law enforcement authorities and persons involved in the transactions.

In order to ensure that the requests to the homework AI are not inappropriate in accordance with our terms of use (Art. 6 (1) sentence 1 lit. b) GDPR), we have the text content assessed on the basis of a point evaluation procedure. For investigation, the text content on our behalf is passed on to a secure and calibrated moderation interface from OpenAI. The text content without information about the user is checked for hatred, threat, self-harm, sexualization or violence and provided with a corresponding note for scoolio support or the text completion is completely refused. All scores of your requests will be automatically deleted when you delete your account.

To implement our homework help AI function, we use the services of OpenAI OpCo, LLC, based in the USA. The USA is a third country under data protection law in which the level of data protection does not correspond to that within the European Union. We would like to point out any risks in this regard, such as extended access to personal data by investigating authorities and, if necessary, a lack of redress options. In order to ensure an appropriate level of data protection, we have concluded data protection contracts with OpenAI (data processing agreement, standard contractual clauses (Article 46(2)(c) GDPR). In addition, we have ensured that no personal usage data is transmitted to OpenAI. You can find more information about OpenAI's terms of use here, information about OpenAI's privacy policy can be found here.

NOTE: We would like to explicitly point out that OpenAI can process entered texts for training and research purposes. For this reason, the use of our homework help AI function is only permitted without providing personal data. Personal data are, for example, names of living persons, address data, telephone numbers, e-mail addresses or other information that can be clearly assigned to a living person.

More information for scoolio Premium
For the conclusion of a paid subscription (scoolio Premium) and the associated data processing, the following additional information applies:
The contract is concluded as an in-app purchase from the respective app store provider. With this or the service provider used by him, i.e. with Google Commerce Limited or Apple Distribution International Ltd., you conclude a temporary contract for the use of scoolio Premium (subscription) and through this also the payment of the fees takes place. As a result, he is himself responsible under data protection law for the processing of your personal data on the occasion of the fulfilment of the contract. In particular, we do not receive any account or credit card-related information. Further information on the data processing by the respective App Store provider as a result of the conclusion of the contract can be found for the Apple App Store here and for the Google Play Store here. In addition to the contract with the respective app store provider or the service provider used by this, the terms of the existing usage contract on the basis of our terms of use apply unchanged between you and us for the use of scoolio Premium. Therefore, when concluding a paid subscription, in addition to the data described above, we process your user name, your e-mail address, the time of conclusion of the contract and, in the event of termination, the time of termination of the contract. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b) GDPR. Your data will be stored for as long as is necessary for the execution of the contract and compliance with legal storage obligations.

The chat and group function allows you to communicate with individual users of the scoolio app or in groups with several users simultaneously via text, voice (see ‘Chat Voice Messages’) and image messages. Voice messages require app access to the microphone, picture messages require app access to the smartphone's gallery.

You can join various existing public or private chat groups or create new public or private chat groups. Depending on the particular characteristics of the chat group, we process certain profile information from you (Art. 6 (1) sentence 1 lit. b) GDPR): For example, to provide a school chat group, the scoolio app processes school affiliation. Please be careful what information you provide about yourself to others within chat and chat groups. Although you are generally free to decide what information you would like to provide about yourself as part of your use of the app from the age of 16, we recommend that you first talk to your parents about whether and what further information you would like to disclose about yourself.

In order to ensure that no inappropriate content is disseminated within chat messages in accordance with our terms of use (Art. 6 (1) sentence 1 lit. b) GDPR), we reserve the right not to transmit inappropriate images and documents (see "Inspection of images and documents") as well as message content with telephone numbers and e-mail addresses. Furthermore, all users have the possibility to report chat messages, which are then checked by the scoolio support.

Use the search function to search for existing chat groups. For the environment-relevant presentation of different chat groups (Art. 6 (1) sentence 1 lit. f) GDPR), we use the location of your school or alternatively the location of the ‘Welcome Campus’, based on your region, which you have indicated in the context of setting up the scoolio app. As a member of a chat group, you can also view the other members of the chat group and access their profiles.

You can leave chat groups at any time or delete them as the creator of a chat group. If you delete your profile, the messages will be kept in chats and chat groups, but the author will only be shown as "deleted user" and no longer your username.

Taking into account various functional and security aspects as well as existing risks when transferring personal data to third countries under data protection law, we have opted for the cloud solution from Google, a global company. We have concluded the necessary data protection contracts with Google (data processing agreement, contract for joint controllers). If personal data is transferred to the USA, this transfer is based on an adequacy decision (Art. 45(1) GDPR) and Google's certification under the EU-U.S. Data Privacy Framework. In addition, we ensure in the development that, if possible, only pseudonymized or anonymized data is processed by Google. Further information about data processing at Google can be found here.

You can also record a voice message and send it to a chat. For this purpose, we use a speech-to-text function from Google. The audio data, the IP address and the other usage data (e.g. data volumes, access times) are processed on our behalf. The processing of personal data takes place exclusively until the conversion to text has been completed. There is no storage of personal data or processing for analysis purposes. The described data processing is absolutely necessary for the use of the chat voice function (Art. 6 (1) sentence 1 lit. b) GDPR).

Taking into account various functional and security aspects as well as existing risks when transferring personal data to third countries under data protection law, we have opted for the cloud solution from Google, a global company. We have concluded the necessary data protection contracts with Google (data processing agreement, contract for joint controllers). If personal data is transferred to the USA, this transfer is based on an adequacy decision (Art. 45(1) GDPR) and Google's certification under the EU-U.S. Data Privacy Framework. In addition, we ensure in the development that, if possible, only pseudonymized or anonymized data is processed by Google. Further information about data processing at Google can be found here.

For more information about Google's Speech-to-Text feature, click here.

The cloud function of scoolio allows you to connect the scoolio app with the scoolio web. You can store various files, such as photos or documents, on it and retrieve them across devices. You can also share the files with your classmates, your class, or the whole school. The use of the cloud function of scoolio is subject to our terms of use (Art. 6 (1) sentence 1 lit. b) GDPR). To log in, you can scan the displayed QR code via a QR code reader. Depending on the application and your personal settings, the provider of the QR code reader may then receive information about you. The respective provider is then responsible for this data processing. If necessary, inform yourself in advance accordingly with this provider. Even if you are generally free to decide what information you would like to provide about yourself as part of your use of the app from the age of 16, we recommend that you talk to your parents about it beforehand.

To use the cloud, you can create different folders ("boxes"). Please note that there are different boxes with different access permissions. The school box can be accessed by all users of the scoolio app who have specified your school when registering. On the other hand, only you can access the Favorites or Done box. You can always create, change or delete your own boxes as well as share them with your classmates and friends, assign and revoke permissions.

Taking into account various functional and security aspects as well as existing risks when transferring personal data to third countries under data protection law, we have opted for the cloud solution from Google, a global company. We have concluded the necessary data protection contracts with Google (data processing agreement, contract for joint controllers). If personal data is transferred to the USA, this transfer is based on an adequacy decision (Art. 45(1) GDPR) and Google's certification under the EU-U.S. Data Privacy Framework. In addition, we ensure in the development that, if possible, only pseudonymized or anonymized data is processed by Google. Further information about data processing at Google can be found here.

If you decide to upload a profile picture of yourself, provide an offer with an image or provide pictures or documents in groups and chats, we would of course like to ensure that this does not contain nudity, racist, sexist or violence-glorifying elements and complies with our terms of use (Art. 6 (1) sentence 1 lit. b) GDPR). For the analysis of the uploaded images, we use the Azure Cognitive Services of Microsoft Ireland Operations Limited with server location in Ireland or the Google Vision API from Google. The image and document data without information about the user are checked by the respective service and provided with a corresponding note for scoolio support or the upload is completely denied. The stored image is usually deleted immediately after processing by Google.

Taking into account various functional and security aspects as well as existing risks when transferring personal data to third countries under data protection law, we have opted for Microsoft's Azure Cognitive Services and Google's Google Vision API, two global companies. We have concluded the necessary data protection contracts with Microsoft and Google (data processing agreement, contract for joint controller). As far as a transfer of personal data to the USA takes place, this transfer is based on an adequacy decision (Art. 45 (1) GDPR) as well as the certification of Microsoft and Google under the EU-U.S. Data Privacy Framework. In addition, we ensure in the development that, if possible, only pseudonymized or anonymized data is processed by Google and Microsoft. You can find more information about data processing at Microsoft here, about Google here and here.