TeachersFlow (accessible via the TeachersFlow web app)
Last updated: April 6, 2026
Effective date: April 6, 2026
Consent Form
By using TeachersFlow, I confirm the following:
1. Data Controller
Service: TeachersFlow
Data Controller: Individual Entrepreneur Eduard Abdullin (Georgia)
Operating as: TeachersFlow
Registered address: Tbilisi, Georgia
Website: https://teachersflow.app
Contact: [email protected]
2. Consent
I hereby give my informed and voluntary consent to the processing of my personal data by TeachersFlow under the conditions described in this document, in accordance with:
- General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679
- Law of Georgia on Personal Data Protection
3. Categories of Personal Data
I consent to the processing of the following categories of my personal data:
Data provided during registration and authentication:
- Account ID (unique identifier)
- Email address
- First name and last name
- Language preference
- Currency preference
- Timezone
Data I voluntarily provide while using the Service:
- Student names and notes (for teachers)
- Lesson schedules and attendance records
- Payment tracking information (lesson counts and statuses)
- Group names and membership
- Student contact identifiers (optional)
Technical data generated during use:
- Authentication tokens
- Session identifiers
- Usage analytics (page views, feature interactions)
- Error reports (without personally identifiable information)
4. Purposes of Processing
My personal data is processed for the following purposes:
- Providing the Service — managing lessons, students, schedules, and payments
- Authentication — verifying my identity through account credentials (email/password)
- Notifications — sending lesson reminders and payment notifications via in-app and email channels
- Subscription management — processing paid plan subscriptions (Starter and Pro) through a third-party payment provider
- Service improvement — analyzing anonymized usage patterns and fixing errors
- Security — preventing unauthorized access, fraud, and abuse
5. Methods of Processing
Personal data is processed through:
- Automated collection upon authentication in the web app
- Manual data entry by the user (teacher entering student information)
- Automated storage in a secure database
- Automated analytics event recording
- Automated error reporting (with PII disabled)
- Automated data retention and deletion after 180 days of inactivity
6. Data Sharing
My personal data may be shared with the following third parties, strictly for the purposes described:
| Third Party | Purpose | Data Shared |
|---|---|---|
| Email delivery providers (SMTP) | Notification routing and delivery | Email address, message metadata |
| Google Sign-In (GSI) | OAuth authentication | Email address, name, profile picture, Google user ID |
| Google Calendar API | Optional calendar synchronization | Calendar events, OAuth tokens |
| Paddle | Subscription payment processing (merchant of record) | User ID, email, payment amounts, subscription status |
| Telegram Bot API | Account linking and Tribute payments | Telegram user ID, username |
| Sentry | Error monitoring (PII disabled) | Technical error data only |
| Google Ads | Conversion tracking on landing page (opt-in only) | Anonymized page visit data, conversion events |
My data is NOT shared with data brokers or any third parties for marketing purposes. Google Ads conversion tracking on the landing page is loaded only after explicit cookie consent.
7. Data Storage and Protection
- Data is stored on a server hosted by Hetzner (Germany, EU)
- All data transfers are encrypted via TLS/SSL
- Database access is restricted to the local server
- Server is protected by a firewall and intrusion prevention system
- Rate limiting is applied to prevent abuse
8. Data Retention Period
- Active accounts: Data is retained for the duration of the account's active use
- Inactive accounts: Data is automatically deleted after 180 days (6 months) of inactivity
- Upon withdrawal of consent: Data is deleted within 30 days of the request
9. My Rights
I understand that I have the following rights regarding my personal data:
Under GDPR:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent at any time (Art. 7(3))
- Right to lodge a complaint with a supervisory authority (Art. 77)
Under the Law of Georgia on Personal Data Protection:
- Right to access my personal data and information about its processing
- Right to request correction, updating, blocking, or deletion of my data where required by law
- Right to withdraw consent at any time (when processing is based on consent)
- Right to lodge a complaint with the competent supervisory authority in Georgia
10. Withdrawal of Consent
I understand that:
- I may withdraw my consent at any time by contacting [email protected] or using in-app functionality
- Withdrawal of consent does not affect the lawfulness of processing performed prior to withdrawal
- Upon withdrawal of consent, my account and all associated data will be deleted within 30 days
- Some data processing is based on legal grounds other than consent (contract performance, legitimate interest) and may continue as described in the Privacy Policy
11. Consent for Processing Student Data (Teachers)
As a teacher using TeachersFlow, I additionally acknowledge that:
- I am a data controller for the personal data of my students that I enter into the Service
- I am responsible for obtaining appropriate consent from my students (or their legal guardians, in case of minors) before entering their data
- TeachersFlow acts as a data processor on my behalf for student data
- I will comply with applicable data protection laws when processing student information through the Service
12. Consent Declaration
By continuing to use TeachersFlow, I confirm that:
- I have read and understood this Consent document, the Privacy Policy, and the Terms of Service
- I voluntarily consent to the processing of my personal data as described above
- I understand my rights and how to exercise them
- I am at least 16 years of age
How consent is given: Consent is given implicitly by using the Service (accessing TeachersFlow through the web app). The first use of the Service after these documents are published constitutes acceptance.
How to withdraw consent: Send an email to [email protected] with the subject "Withdrawal of Consent" or use the account deletion feature in the application.