Privacy Policy – Schola Ludus

1. Introduction

This Privacy Policy explains how personal data is collected, used, and protected when using the web-based application Schola Ludus (the “Service”).

The Service is intended as a support tool for educators and educational professionals. We place a strong emphasis on data protection, transparency, and compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Data Controllers and Processors

The data controller for the educational and content-related aspects of the Service is:

Česká pedagogická komora
(Czech Republic)

The technical operation and infrastructure, including hosting and software development, are provided by:

Thowt LLC
(United States of America)

Where applicable, Thowt LLC acts as a data processor on behalf of the data controller.

3. Who the Service Is Intended For

The Service is intended exclusively for adults, in particular teachers, educators, lecturers, and other professionals working in education.

The Service is not intended for children or students, and users must not enter personal data relating to pupils or minors.

4. Personal Data We Process

Depending on how the Service is used, we may process the following categories of personal data:

account and identification data (e.g. email address, username),
technical data (e.g. IP address, browser type, device information),
usage data related to interaction with the Service,
content entered by users for the purpose of generating outputs.

We do not intentionally collect special categories of personal data (sensitive data).

5. Prohibited Content and Student Data

Users are strictly prohibited from entering:

personal data of students or pupils,
sensitive personal data within the meaning of GDPR,
confidential or internal school documents.

The Service is not designed to process such data.

6. Purpose and Legal Basis of Processing

Personal data is processed for the following purposes:

providing and operating the Service,
user authentication and account management,
improving functionality and user experience,
ensuring security and preventing misuse.

Processing is based on:

performance of a contract (use of the Service),
legitimate interests (security, service improvement),
compliance with legal obligations.

7. Use of Artificial Intelligence Services

The Service uses external AI technologies to generate text-based outputs.

User inputs may be transmitted to third-party AI service providers solely for the purpose of generating outputs.
We do not use user inputs to identify individuals, students, or specific schools.

Where possible, data is processed in a way that minimizes the amount of personal information.

8. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

Users may request deletion of their account and associated personal data at any time, subject to legal obligations.

9. Data Sharing and Transfers

Personal data may be shared with:

technical service providers (hosting, infrastructure),
AI service providers strictly for content generation,
payment providers (if applicable).

Where data is transferred outside the European Union, appropriate safeguards are applied in accordance with GDPR.

10. User Rights

Under applicable data protection laws, users have the right to:

access their personal data,
request correction or deletion,
restrict or object to processing,
request data portability,
lodge a complaint with a supervisory authority.

Requests can be submitted via the contact details provided below.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

However, no online service can guarantee absolute security.

12. Cookies and Analytics

The Service may use cookies and similar technologies for basic functionality and analytics.

Details about cookies and user choices are provided in a separate Cookie Policy, where applicable.

13. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time.
The current version is always available on the Service website.

Continued use of the Service constitutes acceptance of the updated policy.

14. Contact

For questions regarding personal data protection or to exercise your rights, please contact:

Česká pedagogická komora, z. s.
Email: info@scholaludus.com

In case of discrepancies between language versions, the English version of this Privacy Policy shall prevail.