Privacy Policy for Klassens

Effective date: April 29, 2026

1. Introduction

This Privacy Policy explains how Kappish AB ('we', 'us', 'our') processes personal data when you use Klassens.

Klassens is built with data minimization as a core principle and is intended for school communities.

We process only the information needed to deliver secure school access, core app functionality, and service reliability.

Data Controller: Kappish AB, Org. nr: 559514-7983.

2. Information We Process

Klassens does not request invasive permissions such as camera, microphone, contact list, or GPS access for normal operation.

Authentication Data: school private code, encrypted account identifier, and account metadata needed to provide access.

Service Data: compliments and interactions needed to deliver notifications and sentiment-matched AI visuals.

Technical Data: limited connection data (such as IP routing, device type, and crash telemetry) used for security and stability.

3. How We Use Your Information

We process data under GDPR legal bases including contractual necessity and legitimate interests in platform security.

Purposes include: granting school access, operating core app features, maintaining security, preventing abuse, and handling support requests.

4. Information Sharing

We do not sell, rent, or trade your personal data.

We only use trusted infrastructure sub-processors bound by data processing agreements, and disclose data to authorities only when legally required.

No third party may use Klassens user data for independent marketing or brokerage purposes.

5. Data Retention

We retain personal data only for as long as necessary for service delivery and legal obligations.

Account links and school access data are removed from active systems after account deletion, subject to secure backup overwrite cycles.

Certain administrative records may be retained longer where required by law or for legal defense.

6. Children's Privacy

Klassens is intended for students in school communities.

Where required by law, users under 13 may only use the service with verified parental or guardian consent.

7. Your Rights Under GDPR

If you are in the EEA, you have rights under GDPR.

These include rights to access, rectification, erasure, restriction, objection, and data portability, subject to legal limitations.

Requests can be submitted to hej@kappish.se and are handled within applicable legal deadlines.

8. How to Delete Your Data

You can request account deletion through app settings or by contacting us at hej@kappish.se.

After deletion, access credentials and school linkage are removed from active systems within our deletion timelines.

Some records may be retained where required by law or for security and dispute handling.

9. Contact Us

For privacy questions or GDPR requests, contact us:

Email: hej@kappish.se

Company: Kappish AB, Org. nr: 559514-7983

You also have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY), the Swedish supervisory authority.

NOTE: The app is for creating friends & spreading joy