Privacy in plain language
Draft – this summary does not replace the privacy policy or the data processing agreement.
What we store
The teacher's account (name, email, encrypted password) and what the teacher creates: projects, boards and uploaded images.
What we don't store
Student names, name lists, groups and seating stay on the teacher's device. The student link never shows student data and needs no login.
Sharing with colleagues
When you share a project, colleagues see your name and email address, and the lessons in the project. The invitation goes to the email address you enter. Class lists and groups are never shared. Images a colleague added to your project stay with the project if they stop sharing or delete their account. Images in your image library are shared only if you choose to, one image at a time: with the colleagues you share projects with, or with a link you send to a teacher and can close at any time. Never share pictures of students.
Embedded presentations
If a teacher puts a Canva, PowerPoint or Google Slides presentation on a board, it loads from that service on the teacher's computer and the projector. It is never sent to students' own devices through the student link.
Where data lives
On servers in Stockholm with a Swedish hosting company. Boards and images are never stored with US cloud services.
No tracking
No ads, no third-party analytics and no tracking cookies. That's why there is no cookie banner.
Error reports
If the app crashes, the browser sends an error report to our own server: the error message, where in the code it happened, which kind of page and browser. No name, account, IP address, student codes or lesson content. The reports are kept in the server log and only used to fix bugs.
Schools and municipalities
When a school takes out a licence, the school is the data controller and Pekpinne the processor. We sign data processing agreements free of charge.
Providers
Servers and backups: GleSYS (Sweden). Emails (confirmation, new password and invitations from colleagues) are sent through Resend, which only sees the recipient address and the email itself.
Data controller
Pekpinne is run by RJ Tech & Ventures AB (reg. no. 559594-3894), Umeå, Sweden, the data controller for teacher accounts not covered by an agreement with a school.
Your rights
You can export or delete your account and all content. If you have questions, contact us.
Questions about privacy? hej@pekpinne.se