Privacy Policy

Accounts and eligibility

Only adults aged 18 or older may create an account, and registration requires acceptance of the terms and privacy notice. Registration records an adult declaration rather than collecting a date of birth. All paid subscriptions also require Didit identity verification and the applicable adult threshold for the government ID’s jurisdiction. Free features and invited learners do not require Didit verification.

We process account email, sign-in information, user and public IDs, nickname, country selection and acceptance records. Apple or Google sign-in uses information those services provide with your authorisation. ClientOSxc does not receive your Apple or Google password.

Information you provide and use

Depending on the features you use, information can include profile names, photos, introductions, qualifications, country or locality, teacher and learner contact records, and emergency contacts. Location fields are information you select or enter, rather than GPS tracking.

User content can include contracts and their fee, payment-method and teaching-location terms; schedules and attendance; direct messages; goals, measurements and training records; notes, documents and photos. Health and safety intake may include injuries, pain, medical advice or restrictions, allergies, medications and other health information. Provide only information you are authorised to use or share.

We process feature activity needed for the service, such as favourites and record history, reports and appeals, and feedback. Feedback includes the disclosed app version and interface language; it does not automatically attach contracts, chats or complete diagnostic logs.

Device storage, cloud services and visibility

Device-only drafts, notes and records remain on the device unless a feature sends or shares them. Enabled cloud synchronisation sends workspace documents and media to our Supabase-backed service. Accounts, shared records, chats, public profiles and minimum account, workspace and device records for online features also use cloud services independently of optional workspace synchronisation.

Other people can view public profiles. Shared teacher–learner records, private workspaces and signed contract documents follow participant, version and access permissions. Taking over a contract does not grant access to a previous participant’s private documents. Authorised personnel may access relevant data for support, safety, review or legal processes.

Identity verification with Didit

Didit processes government ID data, date of birth, document images, selfies, liveness captures and derived biometric information for identity, adult eligibility and fraud checks. ClientOSxc keeps minimal session, verification and adult-eligibility records; our backend does not retain raw identity-document images, selfies, document numbers or a full date of birth.

Didit’s current notice describes technical telemetry, automated and human review, service testing, quality assurance, fraud-model training and security improvement. It permits certain anonymised or pseudonymised secondary uses where lawful, and describes organisation opt-out controls. We do not represent that those optional uses are disabled. Its processing and retention follow its current verification notice and applicable requirements. Review the notice before verification, and contact us for verification-data rights or objections.

Read Didit’s Verification Privacy Notice

Subscriptions, notifications and providers

Apple processes App Store subscription payments. ClientOSxc processes purchase and entitlement history, product and transaction identifiers, renewal or expiry status and account association to provide paid features. We do not receive your App Store payment-card details. Lesson payment-method and fee terms entered into a contract remain user content; ClientOSxc does not collect or hold lesson payments.

Installation identifiers and push-registration data, including an APNs device token, support device association, synchronisation and notifications. You can control notification, camera and photo permissions in your device settings. Refusing permission may prevent the corresponding feature from working.

Supabase, Apple, Google, Didit, and hosting, email or other service providers process information needed for their services. This public website is hosted on Cloudflare; hosting providers may process technical request information to deliver and protect it. Processing may occur outside your country, subject to applicable safeguards. Information may also be shared when legally required or necessary for security, participant rights or disputes.

ClientOSxc does not use an advertising identifier or third-party advertising SDK, and does not request permission to track you across other companies’ apps or websites. Teacher discovery and recruitment features display user-provided profiles.

Retention and account deletion

Information is kept as needed for the purposes described above and applicable obligations. Account deletion begins through the in-app confirmation process. Necessary contract, participant, security, dispute or legally required records may be retained with restricted access under the relevant isolation and deletion processes. Retention does not make private information public.

Backups, device copies and third-party services can have different deletion processes and timing. Account deletion also requests erasure of Didit verification data; external completion can require confirmation and retries. We do not promise that all copies disappear immediately. Deleting an account does not cancel an Apple subscription.

Your choices, rights and contact

Use the app’s available settings to update information, manage permissions and request account deletion. Contact us to request access, correction, an export, deletion or other privacy rights available under applicable law. We may need to verify your authority to protect your account and other participants. Never email a password, one-time code or unnecessary identity or health documents.

We use access controls and security measures proportionate to the risks. Report suspected misuse or an access error through in-app feedback or the contact below. Material privacy changes will be made available clearly, with consent obtained where required by law.