Privacy at ClassCubes

Who we are

ClassCubes (classcubes.com) is a daily revision app for Sri Lankan exam students. It is run by its owner in Sri Lanka. Questions about this page go to privacy@classcubes.com.

Who this page is for

Students, who are usually 13 to 17, and their parents or guardians. If you are under 18, a parent or guardian should read this page with you and should know that you use ClassCubes.

What we collect

• An email address, or a Google account, to sign you in. If you use Google, Google also passes us the name and picture on that account; we do not use them. If you set a password, Supabase keeps it only in scrambled form; nobody, including us, can read it. An account made with a password confirms its email address with a code within 7 days.
• About the student (one account holds one student): a nickname (not a full name), the year they sit the exam, and the language they sit it in. The exam year tells us which grade's topics to ask.
• What the student does in the app: answers, which cubes have filled, streaks, Mystery Cubes and keys, and questions they flag as wrong.
• Which steps were reached and when (for example "finished a workout"), as a count, without names or free text.
• For one day only: a scrambled, one-way fingerprint of your network address, so that nobody can ask for sign-in codes or readiness tests, or send inquiries, at machine speed. It cannot be turned back into the address.
• If you join the waitlist: the email address you give, and whether you said you are a student, a parent or a teacher.
• If you send a franchise inquiry from the About page (adults only): your name, your company's name, your email address, your phone or WhatsApp number if you give one, the two countries you choose, your background and your message. They are used only to reply to you, and only the ClassCubes owner sees them.

What we do not collect

• A full name, except the name a student gives when joining a teacher's class (see Teachers' classes below); that name goes to that teacher and nobody else.
• A phone number from a student or a parent. The parent report is a link the student shares; no number is asked for. If a report sent to a parent's phone is added later, the number will be asked only from the parent, and this page will say so.
• School, address, photo, date of birth or location.
• Anything from advertising trackers or outside analytics services. There are none on ClassCubes.

Why we use it

• To sign you in.
• To choose the right questions and show progress.
• To send the parent report, when a parent asks for it.
• To keep the service safe from abuse.
• To see, as counts only, where students get stuck, so the product can be improved.

Where it is kept, and who else sees it

Your data is stored by Supabase, our database provider, in Mumbai, India. Sign-in emails are sent through Resend. If you sign in with Google, Google handles that sign-in. The website is served by Vercel, whose servers keep short-lived technical logs that include network addresses. Each of these companies acts on our instructions.

We do not sell data. We do not share student data with advertisers or advertising platforms. Student data is never used to train any artificial intelligence. Nobody outside ClassCubes sees a student's answers.

Friend challenges: a student can send a friend a link to a short set of questions. Whoever opens the link sees the nickname of the student who sent it. If the friend passes and signs in, the student who sent it is shown the friend's nickname, and nothing else: not the score, not the account.

Squads: if whoever holds the account allows it for a student, that student can join a squad of up to five friends. Members see each other's nickname, days trained in the last seven days, streak and cubes mastered, and nothing else: no answers, no scores, no messages. A squad's name and emblem are picked from fixed lists, never typed. Stopping the permission on Me takes the student out of their squad at once. If the student who made a squad lists it on the public board of its exam year, the squad's name, its emblem and its training days per member that week are public; nothing about its members is.

Teachers' classes: if whoever holds the account allows it for a student, that student can join a tuition teacher's class through the teacher's own link. On joining, the student gives the name the teacher knows them by; that name is seen only by this account and by the teachers of the classes the student is in. A teacher sees each student in their class by nickname and that name, and how the student did on the teacher's assignments (finished or not, the score, and the option chosen on each question): nothing else, no other subjects, and no messages either way. The teacher never sees the account's email address or the parent report. Leaving a class, or stopping the permission on Me, ends what that teacher sees. ClassCubes does not check who a teacher is; a class can be reached only through its teacher's own link, and ClassCubes can pause a teacher. A teacher may also share an Open Class link in public, for example on social media. Its check can be played before any account: the answers are marked one by one and kept only in that browser, and nothing about the visitor is stored except a one-way fingerprint of their network address, kept a day, to limit tries. Making an account and joining that Open Class keeps the result, under exactly the same rules as any class, and the teacher sees the same things (the nickname, the name given and the results), nothing more. ClassCubes never gives a teacher a student's or a parent's email address or phone number. A teacher may choose to show their own phone or WhatsApp number to the members of their Open Class; anything said by phone or WhatsApp happens outside ClassCubes, which cannot see it. Attendance: when a teacher starts a class, the students in it can check in from a page for that class day; the teacher sees which of their students checked in and at what time, and each student's record over the class days. Nothing else is kept: no place, no device, no network address. A call link the teacher adds (Zoom, Meet, Teams or WhatsApp) is shown only to students who have checked in; the call itself happens outside ClassCubes. A teacher may add a photo of their own face to their Open Class: ClassCubes checks every photo before anyone sees it, removes where it was taken and any other hidden details, and anyone can report one. An Open Class member can tap “I'm interested in this class”; the teacher then sees that student's nickname marked, and nothing more.

Cookies

ClassCubes uses a few small cookies of its own: one that keeps you signed in, one that remembers your app language, one that remembers which student is training on this device, and one that, for half an hour, brings you back to the page you were going to after you sign in.

If you arrive through one of our own campaign links (an advert, a post or a poster), one more cookie remembers that link's name for up to 30 days, and an account made on this device keeps it, so we can tell which campaigns work. It holds only the link's name, nothing about you, and it is never shared. There are no advertising cookies and nothing from other companies, so there is no cookie banner.

How long we keep it

• Account data: while the account exists.
• A removed student's nickname is replaced at once with "Removed". Their answers and cubes stay on the account's record, without a name.
• The fingerprints used for limits: one day.
• A campaign link's name: up to 30 days on this device; on an account made through it, while the account exists.
• A waitlist address: until you ask us to remove it, or the subjects it waits for open.
• A franchise inquiry: until you ask us to remove it.

Your choices

• Remove a student from the Me tab at any time.
• Change a student's exam year or exam medium.
• Ask us to delete the account and its email address from the Account page (Me, then Account), or by writing to privacy@classcubes.com.
• A parent or guardian may make any of these requests for a child.

Children

ClassCubes is made for school students. When an account is opened we ask the person to confirm that they are the parent or guardian, or the student with a parent's or guardian's knowledge. A parent or guardian can ask at any time to see, change or remove what we hold about their child.

Changes to this page

If this page changes, the date at the top changes with it. A change that affects what we collect is shown in the app.

Reporting a question

Under any question, a student or a visitor can report an inaccurate answer. We keep the question, the reason, the option they think is right, the medium, and a short note of up to 300 characters if they write one. The note is read only by the ClassCubes team, is never shown to any other student or to a teacher, and is used only to check and correct the question bank. On the public pages (the readiness test, a friend challenge, an Open Class check) a report is counted against a one-way fingerprint of the network address so that one visitor cannot flood it; the address itself is not kept.

Contact

privacy@classcubes.com