Privacy Policy
Last Updated: September 6, 2025
Introduction
This Privacy Policy explains how Swift Teach (referred to as “Swift Teach,” “we,” “us,” or “our”) collects, uses, stores, and protects personal information when you use the Swift Teach website and related services (the “Services”). It also outlines your rights regarding your personal data. We are committed to protecting your privacy and handling your personal information responsibly, in compliance with applicable data protection laws such as the General Data Protection Regulation (GDPR) and relevant education privacy laws like the Family Educational Rights and Privacy Act (FERPA).
Our Services are primarily designed for teachers and adult educators. Swift Teach will never use student data for commercial purposes. If you represent a school, district, or other organization using Swift Teach, and require a Data Processing Agreement (DPA) to comply with GDPR, FERPA, or other regulations, please contact us at privacy@swiftteach.com. We can provide a signed agreement and address any questions to ensure compliance and transparency.
Note: This Privacy Policy mainly covers situations where Swift Teach acts as a data controller (for example, managing teacher account information). In cases where our platform is used by a school to process student data, the school will generally act as the data controller and Swift Teach will act as a data processor on the school’s behalf. In those instances, the school’s own privacy policy and our data processing agreement with the school will govern how student personal data is handled.
Information We Collect
We strive to collect only the personal information necessary to provide and improve our Services. The types of information we collect include:
-
Personal Information: When you create an account or use our Services, we collect basic identifiers such as your name, email address, and country/region. This information is provided directly by you and is used for registration, login, and account management (e.g., to set up your account and communicate service-related matters).
-
Account and Subscription Details: If you subscribe to a paid plan, we (through our payment processor) collect information necessary to process your subscription (e.g., payment details). Swift Teach does not store full payment card information—payments are handled securely by providers such as Stripe (PCI-DSS compliant). We may retain basic transaction records (e.g., plan, payment dates) for accounting and support.
-
Usage Data: We collect certain information automatically about how you use our site and tools (e.g., IP address, browser type, device info, pages/features accessed, timestamps). We use this to monitor performance, ensure reliability and security, and analyze aggregate usage to improve the Services.
-
Optional Information (Support/Contact): If you contact us (e.g., via email or a form), we will receive any personal information you include (name, email, message content) and use it to respond.
-
Student Data (Future Features): Currently, Swift Teach is aimed at teachers and does not collect student data. If we introduce student-facing features (e.g., student logins or stored student work), any student personal data will be provided and managed by the school/educator, not collected from children directly without consent. Examples may include student names or coursework submitted for educational use. Such data will be used only for the intended educational purposes and never for marketing or other commercial use. Schools will be responsible for obtaining any necessary parental consent before providing student data to Swift Teach (e.g., under FERPA/COPPA in the U.S., GDPR in the EU/UK, or equivalent laws). Swift Teach will process student data solely as instructed by the school.
How We Use Your Information
We use the collected information for the following purposes:
-
Providing and Maintaining the Service: Create/manage accounts, authenticate logins, and provide access to tools and features.
-
Processing Transactions: Handle billing and payments via our secure payment processor (e.g., receipts, renewals, resolving payment issues).
-
Communication: Send essential service-related communications (e.g., password resets, critical updates, policy changes, support responses).
-
Service Improvements and Analytics: Review aggregated usage patterns to debug performance, plan features, and enhance user experience. (We do not use third-party analytics or tracking cookies without consent—see “Cookies.”)
-
Security and Fraud Prevention: Monitor for suspicious activity, verify identity, and protect against unauthorized access, fraud, or abuse.
-
Legal Compliance: Comply with laws, regulations, legal processes, and enforceable requests (e.g., retaining transaction records for tax compliance).
-
Optional Marketing (with Consent): We do not currently send promotional emails. If this changes, we will obtain opt-in consent and provide opt-out options. We never sell your personal information.
We will not use your personal data for purposes other than those described above unless we obtain your consent or have a lawful basis.
Legal Bases for Processing (GDPR Notice)
Where GDPR or similar laws apply, we rely on:
-
Consent: For activities requiring consent (e.g., optional communications). You may withdraw consent at any time by contacting privacy@swiftteach.com.
-
Contractual Necessity: To perform our contract with you (e.g., provide the Services, process subscription fees).
-
Legal Obligation: To comply with legal requirements (e.g., accounting/tax records, lawful requests).
-
Legitimate Interests: To improve Services, ensure IT security, prevent fraud, and support customers—balanced against your rights and freedoms.
Cookies and Tracking Technologies
-
Current Practice: We do not use non-essential cookies or third-party tracking. We may use minimal essential cookies/local storage for core functions (e.g., session authentication).
-
Future Analytics/Non-Essential Cookies: If introduced, we will update this Policy and, where required (e.g., EU/UK), present a consent banner. You will be able to accept or reject non-essential cookies.
-
Your Choices: Browsers let you block/delete cookies. Disabling essential cookies may impair functionality (e.g., staying logged in).
Data Sharing and Disclosure
We do not sell, rent, or trade your personal data. We share information only as follows:
-
Service Providers: Trusted vendors supporting hosting, storage, payments, support, email (e.g., AWS, Stripe). They access data only to perform services for us under confidentiality and data protection obligations.
-
Academic Institutions (School Use): When a school uses Swift Teach and provides student data, we may share relevant data back with the school/authorized educators for educational purposes, under the school’s control.
-
Legal Requirements & Protection: To comply with law/enforceable requests; protect the rights, property, or safety of Swift Teach, users, or others; investigate fraud/security issues.
-
Business Transfers: In a merger, acquisition, or asset sale, user data may transfer to the new owner under privacy obligations consistent with this Policy, with notice provided.
International Data Transfers
Swift Teach is based in the United Arab Emirates, serving users globally. Personal data may be processed on servers in countries different from yours (e.g., EEA, U.S., or other AWS regions). Where required, we use safeguards such as Standard Contractual Clauses (SCCs) or recognized frameworks to ensure lawful, secure transfers and protection equivalent to your home jurisdiction’s standards.
For questions about our partners or transfer mechanisms, contact privacy@swiftteach.com.
Data Security
We employ technical and organizational measures to protect personal data:
-
Secure Hosting (AWS): Modern physical/network security, firewalls, DDoS protections, continuous monitoring.
-
Encryption in Transit: SSL/TLS (HTTPS) for all communications between your device and our servers.
-
Database Security (PostgreSQL):
-
Network-Level: Private networking, firewall rules, Unix domain sockets for local connections; tightly restricted remote access.
-
Transport-Level: Encrypted DB connections via SSL/TLS.
-
Access Controls: Least-privilege roles and permissions; no public data access.
-
Row-Level Security (RLS): Enforces per-record access limits where applicable.
-
Auditing & Monitoring: Regular audits of DB activity; alerts for unusual access; timely patches and updates.
-
-
Continuous Monitoring & Governance: Ongoing vulnerability monitoring, secure coding, periodic testing, and real-time data governance/monitoring (e.g., Satori) to detect anomalous access patterns.
-
Organizational Measures: Staff privacy/security training; strict, logged, need-to-know access; confidentiality obligations.
While no method is 100% secure, we continuously improve our defenses. If you suspect account compromise or a security issue, contact us immediately.
Data Retention and Deletion
-
Account Information: Retained while your account is active (e.g., profile data, saved content).
-
Subscription/Transaction Data: Retained during the subscription and for periods required by accounting/tax laws; stored securely and not used for other purposes.
-
Inactive Accounts: We may reach out to confirm continued need; prolonged inactivity may lead to removal after notice.
-
Deletion on Request: You may request deletion of your account and personal data. We will delete or anonymize data promptly, except where retention is required by law or legitimate business purposes. We aim to complete verified deletions within 30 days and will confirm completion.
-
Backups: Residual copies may persist in backups for a limited cycle; they are protected, inaccessible for routine use, and overwritten per retention schedules.
Your Data Protection Rights
Depending on your jurisdiction (e.g., EU/UK), you may have rights to:
-
Access your personal data;
-
Rectify inaccurate or incomplete data;
-
Erase data in certain circumstances (“right to be forgotten”);
-
Restrict processing in certain cases;
-
Object to processing based on legitimate interests or for direct marketing;
-
Data Portability in a machine-readable format;
-
Withdraw Consent at any time where processing is based on consent.
To exercise rights (or authorize an agent), contact privacy@swiftteach.com. We may request information to verify your identity/authority. We respond as soon as possible and within one month (extendable by two months for complex/volume cases, with notice). We do not charge fees unless a request is manifestly unfounded or excessive.
Children’s Privacy (Student Data Protection)
Swift Teach is primarily intended for teachers and educational professionals. Our Services are not directed to children for direct sign-up or use at this time. We do not knowingly collect personal information from children under 13 (or the applicable age of digital consent) except through school-managed use as described below.
-
School-Managed Access: When student-facing features are introduced, schools (or educators acting for the school) will fully control student access. The school is responsible for creating, adding, and removing student accounts. Swift Teach does not permit children to self-register.
-
Ownership of Student Data: Student data belongs to the school and/or the parents/guardians. Swift Teach does not claim ownership of student data and will only process it per the school’s documented instructions.
-
Our Role: Swift Teach acts as a data processor; the school is the data controller. We process student data solely to provide the educational services requested by the school.
-
Parental Consent: The school is responsible for obtaining and managing any required parental consent before sharing student data with Swift Teach (e.g., FERPA/COPPA in the U.S., GDPR in the EU/UK, and other applicable laws).
-
Use of Student Data: Student information will be used only for educational purposes (e.g., assignments, collaboration tools, grading) and never sold, shared for advertising, or used for commercial purposes. Swift Teach will never use student data for commercial purposes.
-
Parent/Guardian Inquiries: Parents/guardians should contact their child’s school to exercise rights (access, correction, deletion) regarding student data. We will support the school in fulfilling such requests. Parents may also contact privacy@swiftteach.com; upon verifying identity/authority, we will coordinate with the school as required by law.
Changes to This Privacy Policy
We may update this Policy from time to time to reflect changes in practices, technologies, legal requirements, or other reasons. When we make changes, we will post the updated Policy here and update the “Last Updated” date. For material changes, we will provide additional notice (e.g., email to registered users or a prominent in-product notice).
Your continued use of Swift Teach after changes become effective signifies your acceptance. If you do not agree to updates, you should stop using the Services and request data deletion.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or how Swift Teach handles your personal data, please contact us:
-
Email: privacy@swiftteach.com (our preferred and primary method for privacy communications)
Complaints: We encourage you to contact us first at privacy@swiftteach.com so we can resolve your concern. If you are in a jurisdiction with a data protection authority (e.g., an EU member state or the UK), you may also lodge a complaint with your local supervisory authority. We can provide details for contacting the relevant authority upon request.