ClassMallow policies

ClassMallow Privacy Policy

Effective date: 15 October 2026.

About this policy

ClassMallow is the trading brand of the learning service at classmallow.com. Contact classmallow@gmail.com with questions or requests about personal information. This policy describes the current application; it does not announce a new child-account or payment system.

Information handled and why

Account sign-in: the current Studio receives a ChatGPT account identifier and email address and may receive a full name. The account identifier links saved materials to their creator. The application displays the supplied name or, if absent, the email address.

Learning materials: the service stores quiz drafts, published versions, source materials, questions, answer keys, explanations, settings, favourites and bookmarks to provide creation, saving and teaching features.

Quiz preview: the signed-in quiz preview is limited to the quiz owner. Its attempt records can include entered name/class, answers, confidence choices, marks, scores, timestamps and a hashed access token.

Classroom rooms: participants enter a nickname and select an avatar. The service handles participant and team identifiers, answers, scores, progress and room snapshots to run activities and provide results. This flow does not require a participant email address or account.

AI generation: when an available AI feature is requested, the service processes lesson text, year group, difficulty, question count and relevant lesson options, section or refinement instructions. Generated results and usage records can be saved in the database. The refinement builder excludes teacher identity, student responses and historical marks or notes, but personal information can still be present in lesson text that someone submits.

Operations and support: hashed rate-limit identifiers derived from a teacher identifier or IP-address/time-period combination help prevent misuse. Operational errors may be logged. Support messages contain the information you send us. Hosting and sign-in providers also process technical information needed to operate their services.

We use this information for account access, requested learning and classroom features, support, usage limits and security. Avoid unnecessary personal or sensitive information in source materials, prompts and participant names.

Visibility and sharing

The host can see individual classroom responses and results. Participants in a lobby can see others' nicknames, avatars and team assignments. Depending on activity settings, participants may also see nickname game-point leaderboards or team results.

ClassMallow runs on ChatGPT Sites with Cloudflare Workers and a D1 database. Account access uses ChatGPT authentication. AI generation uses OpenAI's Responses API. The application sets the API response-storage option to false; this does not establish zero retention for all provider records. Provider processing is governed by the applicable service arrangements and may involve infrastructure outside your country.

Paid checkout is not currently available. Paddle is the intended future merchant of record; it does not currently receive application-user information through an active ClassMallow payment integration. We will update this policy with the information received and shared before enabling payments. Paddle's privacy notice is at https://www.paddle.com/legal/privacy.

We may disclose information where required by law or necessary to respond to a valid legal request or protect people and the service. The reviewed application has no separate advertising or analytics SDK.

Browser storage

The application stores a quiz-attempt identity/token, classroom rejoin identity/token and appearance preference in local browser storage. It assigns no expiry time to those entries. They remain until removed by the application, browser or user.

Use the available switch-player/student controls on shared devices. Clearing browser storage can prevent rejoining an activity but does not delete records saved for the host. The application does not set its own cookies; sign-in and hosting providers may use their own cookies or storage under their applicable notices.

Retention and requests

Saved learning and classroom records remain stored unless deleted using the available controls or otherwise removed. The application has no automatic age-based deletion schedule for these records or AI results/usage records. Classroom rooms expire after 24 hours, but expiry does not delete their saved records.

Hosts can delete individual quiz attempts, a quiz with its attempts, and ended or expired rooms with their participant/answer records. There is no verified self-service account-deletion feature. Contact classmallow@gmail.com to request access, correction or deletion of information, including records that cannot be removed through available controls. We may need proportionate verification and enough detail to identify the records. School-managed activities may require coordination with the responsible host or school.

Provider-managed logs and backups can have separate retention arrangements. This policy does not promise an unverified fixed erasure deadline. Applicable legal requirements may affect retention and requests.

Children and families

Classroom activities may involve children. The current application has account-free room participation, but no independent under-13 signup or implemented parental-consent verification flow. ChatGPT-authenticated users must satisfy that provider's age and permission requirements.

Hosts should minimise student information and obtain the authority and permissions required for their activity. This does not mean ClassMallow has verified those permissions. Parents or guardians can contact classmallow@gmail.com about a child's participation, access to information, deletion or suspected improper collection. Providing a contact address does not replace any legally required consent or child-privacy safeguards.

Security, rights and updates

Account checks and access tokens restrict access to private records. No online service can guarantee complete security. Report suspected exposure to classmallow@gmail.com.

Depending on applicable law, you may have rights to access, correct, delete or receive your information, restrict or object to processing, withdraw consent where relied on, or complain to a privacy authority. Contact us to make a request.

We will update this policy when practices change and provide additional notice where required.