Privacy policy
In short
Skolkoll stores no readable data about you or your children with us. Everything you fetch and do in the app stays on your phone. If you switch on sharing between the family’s phones, the data is encrypted on the phone before it is sent, so that we cannot read it. We have no accounts, no adverts and no tracking.
Who publishes Skolkoll
Uddens Sjögård AB, org. no. 556940-4659, Udden 2, 197 92 Bro publishes Skolkoll. We are the data controller for the few pieces of data we actually receive, for example when you e-mail us. You can reach us at info@uddenssjogard.se.
What is stored on your phone
- The children’s school data: first name, class, the school’s name, timetable, attendance, homework, tests, results, school news and lunch menu from SchoolSoft, or what you enter yourself.
- The family’s data: points, rewards, chores, grades and amounts for grade money, school, municipality, holiday dates and chosen stops for bus and train.
- Letters from the school that you add yourself (PDF or image) are stored in the app’s own folder on the phone, together with the summary if you have chosen to get one (see below).
- The PIN is stored protected in the phone’s keychain.
The data is not sent to us, except encrypted if you switch on sharing (see below). If you have iCloud backup on the phone, it may be included in your own backup with Apple.
How fetching from SchoolSoft works
You log in with your own BankID directly with SchoolSoft, in a browser inside the app. The app reads only what you yourself are entitled to see and stores it on the phone. We never receive your BankID, your login details or the children’s school data. Skolkoll is an independent service and is not affiliated with SchoolSoft AB.
The week’s summary
On an iPhone with Apple Intelligence, the summary is written by Apple’s AI directly on the phone. Nothing is sent to us or to any other AI service. On other phones the app shows a simple list instead.
Summary of letters from the school
If you add a letter from the school, you can choose to have it summarised, with the most important points and the dates mentioned in the letter. The letter is then sent to our server, which reads it with the help of an AI service and sends the summary back to your phone. The letter is processed only to write the summary: it is not stored on the server, and nothing about your family is sent with it, only the file and the day it was added. The server keeps the IP address of the request for at most two hours to stop abuse. You are asked the first time you add a letter, and can switch the summary off or on at any time in the app under Settings, Apple Intelligence. If you do not want to send a letter, you can still save it in the app without a summary.
Sharing between the family’s phones
Sharing is optional and is done for one child at a time, in the app under Settings, Sharing. That child’s data is then sent via our server to the phones you connect: another adult, the child’s own phone and the child’s other home if the child lives alternately in two homes. The person you share with receives only the children you share, and only guardians can share a child onwards. Once sharing is running, children who are not shared are also stored encrypted on the server, so that they can be retrieved if the app is deleted. Only your own phone can read them.
The data is encrypted on the phone with keys that exist only on the family’s phones. The server stores only encrypted data, which we cannot read, and when it was last changed. The school’s data is shared between all the phones in the family. Rewards, chores, points and PIN are kept separately by each home. Teachers’ assessments and grades are shared only between the adults, and the children’s phones receive them only if an adult has chosen that.
A new phone is connected with a code, or with a link where the code comes after the # character. That part of the link is never sent to our server. The invitation is stored encrypted on the server until the code is used, for at most two days. To stop abuse, the server keeps the IP address of certain requests for at most two hours. Encrypted data that no phone has used for 18 months is deleted automatically.
The team’s calendar from laget.se
If you add a team’s calendar from laget.se, the phone fetches it directly from laget.se, in the same way a calendar app does. laget.se then sees the phone’s IP address, as with an ordinary visit. None of this is sent to us. If you share the child, the team’s address is sent encrypted to the phones the child is shared with, and each phone fetches the calendar itself.
Bus times
If you choose a stop for the child’s journey to or from school, the app fetches the departures from our server, which in turn fetches them from Trafiklab (Samtrafiken’s open public transport data for SL, UL and the rest of Sweden). What is sent is the stop’s number and the time, not who is asking or which child it concerns. The server keeps the replies for a short while so that the family’s phones do not have to ask again and again; nothing is linked to you. Times from Trafiklab.se.
Challenges in the games
When you challenge each other in a game, a QR code is shown on the screen, which the other phone reads with its camera. The challenge then goes directly between the phones and is not sent over the internet.
Reminders, calendar and notifications
Reminders and notifications are created on the phone. If you switch on calendar or reminders in the app, tests, meetings and homework are saved in the phone’s own calendar and in Reminders. None of this is sent to us.
App updates
When the app looks for new versions, it contacts our provider of app updates. Only the technical information needed to deliver the update is sent, such as the app version and IP address. No data about you or your children is sent.
Buying the subscription
The subscription is bought and paid for in the App Store. Apple handles the payment and your payment details. The app asks the App Store on the phone whether the subscription is active. We do not find out who you are or how you pay, only the aggregated sales statistics that Apple gives everyone who publishes apps.
The website
The website uses no cookies and loads nothing from other websites. Like most websites, the web host keeps technical logs, such as IP addresses, for operation and security.
When you e-mail us
If you e-mail us, we keep the e-mail for as long as we need to help you. We do not use it for anything else.
Deleting
You delete everything on the phone under Settings, Delete all data, or by deleting the app. If the family shares between phones, the data remains on the family’s other phones. The encrypted data on the server is deleted automatically when no phone in the family has used it for 18 months.
Your rights
You have the right to know what data we hold about you, to have errors corrected and to have data deleted. Since the app’s data exists only on the phones, and on the server only encrypted so that we cannot read it, in practice this applies to e-mails you have sent us. Contact us at the address above. If you are unhappy with how we handle data, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
Changes
If we change the policy, we announce it in the app before the change applies.