1. Introduction
Welcome to Insphere Classroom ("we", "our", or "us"), a school management and communication
platform operated by Insphere Pte. Ltd. We are committed to protecting the personal
information of all users — including school administrators, teachers, staff, students, and parents.
This Privacy Policy explains what data we collect, why we collect it, how it is used, and your rights
regarding your information. By using Insphere Classroom, you agree to the practices described herein.
2. Information We Collect
We collect the following categories of data:
- Account information: Name, email address, role (admin, teacher, staff, student, parent)
- School information: School name, country, academic year, class assignments
- Attendance records: Check-in/check-out times, attendance status
- Calendar and schedule data: School events, class schedules, exam dates, holidays
- Announcements: School notices and communications
- Device information: Device identifiers for kiosk and attendance tablet registration
- Google account data: Only when you voluntarily connect Google Calendar (see Section 5)
3. How We Use Your Information
We use collected information to:
- Operate and deliver core school management features (attendance, scheduling, rosters)
- Send school announcements and notifications to relevant users
- Sync school calendar events to users' personal Google Calendars (only when authorised)
- Generate attendance and academic reports for school administrators
- Authenticate users and maintain account security
- Improve platform performance and reliability
4. Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes.
Data may be shared only in the following circumstances:
- Within your school: Relevant data is visible to authorised staff of your school only
- Service providers: Hosting infrastructure (server) and email delivery providers, who are
contractually bound to confidentiality
- Google APIs: Only when you connect Google Calendar (see Section 5)
- Legal requirements: If required by applicable law or court order
5. Google Calendar Integration
Insphere Classroom offers an optional feature to sync your school's calendar events to your personal
Google Calendar account. This integration uses the Google Calendar API via OAuth 2.0.
When you connect your Google Account, we:
- Request permission to read and write to your Google Calendar
- Create a dedicated "📚 School Calendar" calendar in your Google account
- Sync school events (title, date, time, location, category) to that calendar only
- Store an encrypted OAuth refresh token on our server to enable automatic background sync
- Do not access any other calendars, contacts, emails, or Google data
- Do not share your Google data with any third party
You are in control. You can disconnect Google Calendar at any time from the Calendar
page in Insphere Classroom. Upon disconnection, we immediately delete your stored OAuth token from
our servers and revoke access.
Our use of information received from Google APIs adheres to the
Google API Services User Data Policy,
including the Limited Use requirements.
6. Data Security
We implement industry-standard security measures including:
- All data transmitted over HTTPS/TLS encryption
- OAuth tokens stored using AES-256 encryption at rest
- Passwords hashed using bcrypt — never stored in plain text
- Role-based access controls — users only see data relevant to their school and role
- Regular automated backups with secure off-site storage
7. Data Retention
We retain your data for as long as your school's account is active. If a school account is closed,
data is deleted within 90 days. Google OAuth tokens are deleted immediately upon
disconnection or account closure.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data held by us
- Correct inaccurate or incomplete data
- Delete your account and associated data
- Withdraw consent for optional features (e.g. Google Calendar sync)
- Data portability — export your data in a common format
To exercise any of these rights, contact us at the email below.
9. Children's Privacy
Insphere Classroom is used in school environments and may contain records of students who are minors.
Student data is managed by the school (as data controller). We do not collect personal data from
students directly — all student records are entered by authorised school staff. Parents may contact
their school administrator for information about student data.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated"
date at the top of this page and notify school administrators via email. Continued use of the platform
after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Insphere Classroom