Privacy Policy β edooview
Version 1.0 Β· Effective from 23-08-2026
Status: DRAFT β not yet approved for production use. Written 23-08-2026 from an audit of
what edooview actually stores. Not legal advice; a lawyer has not reviewed this text.
Three voices, one binding text: βοΈ Formal Β· π Clear Β· π¬ Human carry identical clause numbers,
and the Clear (plain) version is the only binding one.
1. Who is responsible
Data controller: We make AI work s.r.o., IΔO 29697115, NovΓ© sady 988/2, StarΓ© Brno, 602 00 Brno, contact
privacy@wemakeai.work. edooview is our product; this policy covers only it.
2. Our default: minimise
We collect as little as we can get away with, technically and legally (our internal rule:
minimise β hash β encrypt). We do not sell data. We do not run third-party advertising or
cross-site tracking. If you decline optional data, the service keeps working β with the honest
trade-offs listed in Β§7.
3. What we collect and exactly why
| What | Why (purpose) | Legal basis | Kept for | Where |
|---|---|---|---|---|
| Your email address | sending sign-in links, and nothing else β no newsletters | contract (Art. 6(1)(b)) | account lifetime | Neon (EU), Vercel (EU) |
| Sign-in tokens (stored only as a SHA-256 hash) and the IP that requested them | letting you sign in without a password; spotting abuse of the sign-in form | contract / legitimate interest (6(1)(f)) | 15 minutes to use, rows purged after 24 hours | Neon (EU) |
| Your Edookit school login (username + password, encrypted with a key unique to your family) | reading your own school portal on your behalf β the service cannot work without it | contract | until you disconnect the school or delete your account | Neon (EU); the master key lives only in the host's secret store, never in the database |
| Your children's names, class and school person-id, as shown in your portal | attributing messages, homework, exams and lessons to the right child | contract | until you disconnect or delete | Neon (EU) |
| The content of your school portal: messages, homework, exams, grades, records, timetable lessons, consents, payments β including sender and addressee names | showing it back to you, translated and sorted; that IS the service | contract | until you delete the item or your account | Neon (EU) |
| AI translations and summaries of that content | making a Czech portal readable for a parent who does not read Czech | contract | with the item | Neon (EU); generated by Anthropic (see Β§4) |
| Push subscription (browser endpoint + keys, browser user-agent string) | delivering the notifications you switched on | consent (6(1)(a)) | until you turn notifications off or the browser drops it | Neon (EU) + your browser's push service |
| Notification preferences (time of day, timezone) | sending the daily summary when you asked for it | consent | until changed or account deleted | Neon (EU) |
| Audit log: who changed what, and when | so no change to your data is silent, and problems can be traced | legal obligation / legitimate interest | 12 months | Neon (EU) |
| Error log: technical message, a run id, an account id | keeping the service working and diagnosing failures β never message content | legitimate interest | 90 days | Neon (EU) |
Not collected: no analytics, no advertising, no tracking cookies, no profiling, no
location, no payment card data. edooview has no ads and no third-party trackers.
4. Who else touches the data (processors)
Neon (PostgreSQL database, EU region) Β· Vercel (hosting, EU region) Β·
Anthropic (AI translation and categorisation β the subject and body of your school items are
sent for translation; they are not used to train models) Β· Resend (sending sign-in and alert
emails β receives your email address and the message) Β· your browser vendor's push service
(Google, Apple or Mozilla β receives an opaque endpoint and the notification text, which is why
notification text stays short and never contains grades or medical detail).
Each is bound by a data processing agreement; none may use the data for its own purposes.
5. Your rights
Access, rectification, erasure, restriction, portability, objection β write to
privacy@wemakeai.work, we act within 30 days. You can complain to the Czech supervisory authority:
ΓOOΓ, https://uoou.gov.cz. Erasure is real: our systems are built to delete (see Β§2).
6. Cookies and consent
Strictly necessary cookies/storage run always (session, security β consent-exempt). edooview
uses exactly one cookie: the sign-in session cookie, which is strictly necessary and set only
after you sign in. There is no analytics cookie, no advertising cookie and no third-party
cookie, so there is no cookie banner to click away β because there is nothing optional to
consent to.
The service worker stores the app's icons in your browser so it can be installed as an app;
it deliberately does not cache your inbox, so you can never be shown stale school data.
The one optional thing we ask for is push notifications, which your browser asks you to
allow explicitly and which you can switch off at any time under Settings β Notifications.
7. If you decline everything β the honest trade-off
Declining costs you no core functionality and we hold no grudge. edooview has no
analytics, no advertising and no tracking cookies to decline in the first place β the only
optional thing we ask for is push notifications, and refusing them changes nothing else.
What you give up: you will not be told about tomorrow's lessons or an urgent message; you will
see them the next time you open edooview.
We will not pretend we then hold nothing: to sign you in and read your school portal we still
need your email address and your encrypted Edookit login, plus the portal content itself β
exactly the rows in Β§3 and nothing beyond them. If that is not acceptable, the honest answer is
that edooview cannot work for you, and you can delete your account at any time.
8. Changes
Changes to the service that touch data (new feature, new cookie, new processor, new price flow)
update this policy in the same release β the version and date above always tell you where
you stand. Material changes are announced in the service.