Privacy policy

The data controller is Albert Alvarez Estelles, tax ID ES44519666S, with business address at calle 207 nº31-8, 46182 Paterna, España.

For privacy questions or to exercise your rights, email [email protected].

• Account data: email address, password hash, email verification, account status, language or region, and sign-in dates.
• Authentication and security data: session and token records, security events, request identifiers, IP address processed temporarily for rate limiting, and technical request logs where necessary.
• Device and license data: public key, optional device name, platform, architecture, app version, activations, license validity and revocation status. We do not use hardware fingerprinting.
• Subscription data: Stripe customer, subscription, checkout and payment identifiers, amount, currency, status, tax or billing metadata and webhook records. Kaselles does not receive or store full card numbers.
• Support data: your email and the information you choose to include when contacting us.

The desktop app stores your school's data — subjects, teachers, groups, classrooms, constraints and generated timetables — together with your account session and settings, in its local database. These data are used to generate and display schedules and are not sent to Kaselles servers.

You can export or delete this data at any time from the app. Removing a dataset removes it from the local database, subject to backups or files you created outside the app.

• To create and secure your account, provide the software license, devices, downloads and support, and perform our contract with you.
• To process payments, refunds, invoices and taxes, and comply with accounting and legal obligations.
• To prevent abuse, investigate security incidents and protect the service, based on our legitimate interests and legal duties.
• Where consent is the appropriate basis, you may withdraw it at any time without affecting earlier processing.

We use Stripe for checkout, subscriptions, payments and tax-related processing; Amazon SES to deliver transactional email; Google when you choose Google sign-in; and GitHub to distribute signed application releases.

These providers process data under their own terms and may operate outside your country. Where required, transfers are protected by an adequacy decision, standard contractual clauses or another lawful safeguard.

We use essential session storage to keep you signed in, protect forms, remember language, infer a download platform and, where available, hold an approximate country code for price display. We do not use advertising cookies or third-party analytics on this website.

We keep account and license records while your account or license is active and afterwards only as needed for security, disputes and legal obligations. Payment and invoice records may be retained for statutory accounting periods. Expired or revoked security records and operational logs are kept only for as long as reasonably necessary. Local desktop data remains until you remove it or uninstall the app.

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may complain to your data protection authority. You may also revoke active devices and sessions from your account. Email [email protected]; we may need to verify your identity.

We use access controls, encryption in transit, hashed passwords and signed device licenses. No system is completely secure, so please report suspected abuse promptly. Kaselles is not directed to children under 16. We will publish material policy changes here and update the effective date.