Privacy policy
Last updated: 24 October 2026
This explains what information SKRM Learn keeps about you, why, who else sees it, and your rights. We have written it to be read by teachers, parents and older students alike.
Who we are
SKRM Learn is provided by Mykhailo Skrypkin, a sole trader, Ground Floor Flat, 11 Mattison Road, London N4 1BG, United Kingdom. Email: custom.solutions.sk@gmail.com.
- For teachers' and parents' accounts, and for running the service, we decide how information is used: we are the controller.
- When a school or tutor uses SKRM Learn with their students, the school or tutor decides what their students do in it; for that information we act on their instructions (a processor). Schools can ask us for a data processing agreement.
What we keep, and why
| What | Why | Kept for |
|---|---|---|
| Your account: username, display name, your password (only in a scrambled form we can't read back), whether you are a teacher, student or parent | To let you sign in and to run the service | Until the account is deleted; a student in no class, or a parent with no child linked, is deleted after a year without signing in (told 30 days before, if they gave an email address) |
| Class work: code, task results, homework, marks and feedback, boards, files you add, your library | So teachers and students can teach and learn; it is what SKRM Learn is for | Until it is deleted, the student leaves the group, or the group is deleted; a student's own code, writing and boards are then kept in their library. A deleted task or homework, with the students' work in it, stays 30 days in Recently deleted (for the teacher to put back), then goes |
| Messages between a group, a student and their teacher, and a student's parents and their teacher | To let them talk inside SKRM Learn | Until the student leaves the group or the group is deleted |
| Sessions: booked and planned times, who they are with, and who came | Booking and holding sessions | Until the group is deleted |
| Parents: which child a parent account is linked to | So parents see only their own child | Until the teacher unlinks them or the child leaves the group |
| Video calls: sound and video pass through our call server live | To hold the call | We record nothing. A teacher can record a call in their own browser (everyone is asked first, and sees "Recording" while it records): the file is saved on the teacher's computer, never on SKRM Learn. Only connection logs (when someone joined) are kept, a few days |
| Neat writing: the shape of handwriting on a board (the lines drawn, nothing else) | To turn handwriting into typed text or formulas, when someone uses this tool | Sent to MyScript to be read (see below); not kept by us |
| Notifications on a device (only if you turn them on, in Preferences › This device): the address the browser gives for sending them to that device | To tell you of new messages, homework and sessions there, as you chose | Until you turn them off on that device, the browser stops them, or the account is deleted |
| Invitations (when a teacher joins through another teacher's link): who invited whom | To give both the days of Pro the invitation offers | Until either account is deleted |
| Email address (teachers, parents; only if you add one) | To sign in with it, to send you a link if you forget your password, and messages about your account | Until you remove it or the account is deleted |
| Subscriptions: your plan, whether a subscription is active, and Paddle's reference for you | To give paid features to those who pay | While you have a subscription, and as tax law requires |
| Technical logs: IP address, the page asked for and the browser, when you visit; errors | Security, stopping abuse (e.g. too many sign-in attempts), and fixing faults | Up to 90 days |
| Visits to our public pages (front page, pricing, help, these pages): the page, the day and the site you came from; a fingerprint of your address and browser that lives in memory for the day only, to count each person once | To see how many people find SKRM Learn, and from where | Counts by day (nothing about you) for 400 days; the fingerprint is gone by the next day |
We do not ask for students' email addresses, dates of birth or addresses, and we don't need them.
Our legal reasons (UK GDPR)
- To provide the service you signed up for (contract): accounts, class work, messages, lessons, calls, subscriptions.
- Our legitimate interests in keeping SKRM Learn safe and working: technical logs, backups, stopping abuse.
- Legal obligation: records of payments that tax law requires (kept by Paddle).
- For students, their school or tutor decides the legal reason for their class work.
Children
SKRM Learn is used by children. We follow the ICO's Children's Code:
- no advertising, no tracking, no profiling and no selling of information;
- nothing loads from other companies' websites in the classroom (fonts and tools come from our own server), so they can't follow students;
- private messages are only between a student and their teacher, never between students;
- in video calls, students join with their camera and microphone off; SKRM Learn records nothing, and a teacher who records a call in their own browser asks first, with "Recording" shown to everyone while it records;
- students join only through their teacher's class code; for children under 13, the teacher or school is responsible for having a parent's or carer's permission.
Who else sees it
- Inside SKRM Learn: teachers see their own groups' work; students see their own work and what their teacher shares; parents see only their own child's. We (the people running SKRM Learn) can see information when we need to look after the service, fix a problem or answer a request; we don't look otherwise.
- Kamatera hosts our servers, in London. It stores the information but does not use it.
- Backblaze (in the Netherlands) keeps our backups, encrypted before they leave our server: Backblaze can't read them.
- Paddle takes payments as the seller of Pro: it receives your name, email, payment and billing details at checkout, under its own privacy notice (https://www.paddle.com/legal/privacy). We never see your card details.
- Google, only if you choose "Continue with Google": Google tells us your Google account's id, name and email address so you can sign in; we get nothing else (no password, contacts or files). Google's own privacy policy covers what Google keeps (https://policies.google.com/privacy).
- Brevo (France) delivers the emails SKRM Learn sends (confirming an address, "Forgot password?"): it receives the address and the email, under its data processing terms.
- Amazon Web Services (Amazon SES, in Sweden) delivers those emails instead when Brevo can't: it receives the same, under its data processing terms.
- MyScript (France) reads handwriting when someone uses neat writing: it receives only the lines drawn, with no names or accounts, under its data processing terms.
- Your browser's push service (Google for Chrome, Apple for Safari, Mozilla for Firefox, Microsoft for Edge), only if you turn notifications on for a device: it passes each notification on to that device. Notifications are encrypted before they leave our server, so the push service can't read them.
- Nobody else, unless the law requires it (for example, a court order) or to protect someone from harm.
Information stays in the UK, except handwriting sent to MyScript, emails delivered by Brevo or Amazon SES, and the files you upload (pictures, documents) and encrypted backups, kept by Backblaze (European Union, covered by UK adequacy rules) and payment details handled by Paddle under its own safeguards.
Cookies
We use one cookie, to keep you signed in (until you close your browser and 12 hours at most, or 30 days if you tick "Keep me signed in"). It is strictly necessary, so we don't ask for consent. Your browser also remembers some choices you make (such as light or dark theme) on your own device. We use no advertising or analytics cookies. We count visits to our public pages ourselves, without cookies and without sending anything to anyone else (see the table above); your browser's "do not track" setting is respected. The pricing page loads Paddle's checkout, which may use its own cookies when you pay (see Paddle's notice).
Keeping it safe
Connections are encrypted (HTTPS), passwords are stored scrambled, and you can turn on 2-step sign-in (we keep your authenticator app's key encrypted, and backup codes only scrambled; nothing is sent to anyone else). Servers accept only key-based logins and install security updates automatically, and we keep backups (a copy every hour for two days, nightly copies for 14 days) on the server. Copies made just before an update to the site are kept up to 30 days. An encrypted copy also goes to Backblaze every hour (kept two days) and every night, kept for a day each for two weeks, a week each for two months and a month each for a year; something deleted in SKRM Learn leaves these backups within 13 months.
Your rights
You can ask us to: see the information we hold about you; correct it; delete it; limit how it is used; give it to you in a form you can take elsewhere; or stop using it where we rely on our legitimate interests. You can do two of these yourself at any time, under Preferences › Your data: download a copy of everything we hold about you, and delete your account. For the rest, email custom.solutions.sk@gmail.com; we will answer within a month. Students' work belongs to their school or tutor's class: we may pass a student's request to their teacher. A parent can ask on behalf of their child.
If you are unhappy with how we handle your information, please tell us first. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Changes
We will update this policy when SKRM Learn changes how it uses information, show the date above, and tell you in SKRM Learn about important changes.