Legal

Privacy Policy for Classly: Attendance Tracker

Last updated: October 19, 2026

This Privacy Policy explains how Classly: Attendance Tracker ("Classly," "the Application," "we," "us," or "our") handles information when you use the Application.

Classly is designed to provide an offline-first attendance and timetable experience. You do not need to create an account or provide your name, email address, or phone number to use the Application. Core attendance data is stored locally on your device. Limited technical and usage information may be processed through Firebase Analytics and Firebase Crashlytics to help us understand Application usage and improve stability.

1. Information Stored Locally on Your Device

The following information is created by you or generated through your use of Classly and is stored locally on your device:

Classly does not require this information to be uploaded to a Classly account or server. We do not operate a cloud account system for attendance records.

This locally stored information remains on your device until you delete it within the Application, delete exported files or backups, clear the Application's storage, or uninstall the Application. Files that you export or share are handled by the destination you choose and may remain outside the Application.

2. Analytics and Crash Diagnostics

Classly uses the following Google Firebase services:

Firebase Analytics

Firebase Analytics helps us understand general Application usage, such as feature interactions, navigation events, Application version, device and operating system information, and review-related actions. Depending on the platform and Firebase configuration, Firebase may process device or installation identifiers, approximate technical location derived from an IP address, and other usage information.

We use this information to understand which features are useful, diagnose broad usage issues, and improve the Application. We do not intentionally send subject names (including subjects you save to your suggestion list), attendance records, classroom names, notes, timetable contents, exams, assignments, or backup contents as Analytics events.

Your optional study profile (your answer to “Which describes you?”, the study programs you choose and the subjects you save to your suggestion list) is never sent to Firebase Analytics, to us, or to any other third party. It stays on your device and in your own backups.

Firebase Crashlytics

Firebase Crashlytics helps us identify crashes and technical failures. Crash reports may include crash stack traces, device model, operating system version, Application version, installation identifiers, memory or execution state, and other diagnostic information associated with a failure.

We use this information to investigate crashes, improve reliability, and prevent repeated technical problems. We do not intentionally attach attendance records, timetable contents, classroom coordinates, or backup contents to Crashlytics reports.

Firebase information is processed by Google in accordance with Google's terms and privacy practices. For more information, see:

Firebase data may be processed on servers located outside your country or region. Retention of Analytics and Crashlytics information is controlled by Firebase settings and Google's applicable retention practices.

3. Location Information

Classly does not request access to your device location, does not use background location, and does not perform location-based attendance checks. Classrooms are saved as text you enter. Earlier versions of the Application offered optional location features; any classroom coordinates they saved remain only on your device, are not used by the current version, and are not sent to Firebase or Google Calendar.

Optional Google Calendar Sync is described in Section 15.

4. Notifications

Classly may request permission to send local attendance, exam, and assignment reminders. These notifications are generated and scheduled on your device.

Classly also uses Firebase Cloud Messaging to deliver occasional service notices, such as an app update notice or a link to an Application-related page. To receive them, the Application registers a device token with Firebase. These notices are not marketing or advertising messages, and they do not include your attendance records, timetable contents, or backup files.

You can disable notification permission through your device settings. Disabling notifications does not prevent you from recording attendance manually.

5. Backup, Import, Export, and Sharing

Classly can create and restore local semester backups and can import or export timetable information in supported formats such as JSON or CSV. It may also create PDF timetable summaries.

Backup and export files remain under your control. When you choose to save, share, or open a file using another application or storage provider, that third party may process the file under its own privacy policy. Review the destination carefully before sharing a file because it may contain timetable or attendance information.

Classly keeps manual backups until you delete them, the five most recent automatic backups, and up to three pre-restore snapshots in local Application storage. Deleting a backup inside Classly does not automatically delete copies you previously exported to another location.

If you turn on the optional Google Drive backup, copies of your backups are also stored in your own Google Drive account, as described in Section 15.

If you share your timetable with classmates, Classly creates a link (also shown as a QR code) that contains your subject names, short names, colors, weekly class times, and rooms — never attendance, notes, or targets. The timetable is stored in the part of the link after “#”, which browsers do not send to our website, and Classly does not keep a copy on any server. Anyone who receives the link can read the timetable in it.

6. In-App Reviews and External Links

Classly may use the official Apple App Store or Google Play in-app review interface. The operating system and the relevant store control whether a review prompt is shown and process any rating or review you submit. Classly does not receive the identity of the person submitting a store review through the in-app review interface.

The Application may also open external pages, including App Store, Google Play, support, or informational pages. Your interaction with those services is governed by their respective privacy policies.

7. How We Use Information

We use information processed through the Application and our service providers to:

We do not sell your personal information. Classly does not use attendance records or other Application data for advertising. We do not use information collected through the Application to track you across applications or websites owned by other companies for targeted advertising.

8. Service Providers and Disclosure

We may allow service providers to process limited information only as needed to provide their services. Our current relevant service provider is Google LLC through Firebase Analytics, Firebase Crashlytics, Firebase Cloud Messaging, Cloud Functions for Firebase, Google Cloud Firestore, and, where you choose to connect them, Google Sign-In, Google Calendar, and Google Drive. Purchases made in earlier versions of the Application were processed by Apple or Google through their app stores.

We may disclose information when reasonably necessary to:

Because core attendance data is stored locally and we do not operate a Classly account server, we generally do not possess a server-side copy of your attendance records to disclose or retrieve.

9. Data Retention and Deletion

Local data

You can remove individual records using available delete controls in Classly. You can remove all local Application data by clearing Application storage where supported or uninstalling the Application. Exported files must be deleted separately from every location where you saved or shared them. Backups copied to Google Drive are not removed by uninstalling Classly; see Section 15.

Firebase and diagnostic data

Analytics and Crashlytics information is retained according to our Firebase configuration and Google's retention practices. Because Classly does not provide user accounts and Firebase data may be associated with technical installation identifiers rather than your contact information, we may not be able to identify or retrieve a particular record based only on your name or email address.

User-submitted diagnostic reports are retained only for as long as reasonably necessary for support, debugging, security, and legal purposes, as described in Section 18. Where the Application displays a diagnostic report reference, include that reference in a deletion request so that we can attempt to locate the report.

You may contact us using the details below if you have a privacy request. We may ask for enough information to understand and respond to the request, but we will not ask for information that is unnecessary to process it.

10. Data Security

We use reasonable technical and organizational measures to protect information handled by Classly. Local information is also protected by the security controls of your device and operating system.

No method of electronic storage or transmission is completely secure. You are responsible for protecting access to your device and for choosing secure destinations when exporting or sharing backups, timetable files, or PDF summaries.

11. Children's Privacy

Classly is intended as a general attendance-management utility for students and is not specifically directed to children under 13. We do not knowingly request names, contact details, or account registration information from children.

If you are a parent or guardian and believe that a child has provided personal information to us in a way that is not described in this Policy, contact us. If we learn that personal information from a child was processed in violation of applicable law, we will take reasonable steps to address the issue.

12. International Data Processing

Google and its service infrastructure may process Analytics, Crashlytics, Cloud Messaging, diagnostic report, and Google Calendar information in countries other than the country where you live. Those countries may have different data-protection laws. Google describes its safeguards and international data practices in its privacy and Firebase documentation.

Core attendance, timetable, classroom, note, and local backup data remains on your device unless you choose to export or share it.

13. Your Choices and Rights

Depending on where you live, you may have rights regarding personal information, including rights to access, correct, delete, restrict, or object to certain processing.

You can also control many Application permissions directly:

To submit a privacy request, contact us at the email address below. These rights may be subject to applicable exceptions and verification requirements.

14. Changes to This Privacy Policy

We may update this Privacy Policy when Classly's features, service providers, legal requirements, or data practices change. We will update the Last updated date and publish the revised Policy at the same location. Where required, we may provide an additional notice in the Application or through the relevant app store.

We encourage you to review this Policy periodically.

15. Google Sign-In, Google Calendar Sync, and Google Drive Backup

Classly offers an optional Google Calendar synchronization feature, available to all users at no charge. You may use the Application without connecting a Google account.

When you connect Google Calendar, Google may provide Classly with information associated with the selected account, such as your account identifier and email address. Classly uses this information only to establish and maintain the Calendar connection.

Classly requests the Google Calendar calendar.app.created authorization scope. This allows the Application to create and manage a dedicated "Classly" calendar. It does not give Classly access to read or modify unrelated Google calendars or events.

When you synchronize, subject names, class dates and times, optional room or building descriptions, and exam and assignment titles and times are transmitted to Google and stored as events in the dedicated Classly calendar. Attendance records and backup contents are not intentionally uploaded to Google Calendar.

Google authorization credentials are handled by Google's authentication libraries and device-secure storage. Disconnecting Google revokes the Application's authorization but does not automatically delete calendar events previously created in Google Calendar.

Google Drive backup

Classly offers an optional Google Drive backup so that your backups survive uninstalling the Application or changing devices. It is off until you connect it.

Classly requests only the Google Drive drive.appdata authorization scope. This gives the Application a hidden folder in your Google Drive that only Classly can access. It does not give Classly access to read, list, or modify any of your other Google Drive files.

When Drive backup is on, each backup file Classly creates (the same contents as a local backup: semester dates, subjects and timetable, attendance records, notes, days off, exams and assignments, and to-dos) is uploaded to that hidden folder in your account. Classly keeps your manual and end-of-semester backups there and the ten most recent automatic backups, and deletes older automatic copies. Backups are stored by Google under your account; Classly does not operate its own server for them and the developer cannot read them.

Turning off Drive backup in Classly stops new uploads but keeps the copies already in Drive, so you can still restore them later. To delete them, remove Classly's access and hidden app data from your Google account (Google Drive → Settings → Manage apps → Classly → Delete hidden app data), or disconnect the Application at https://myaccount.google.com/permissions.

Google processes account, Calendar, and Drive information according to the Google Privacy Policy.

16. In-App Purchases

The current version of Classly does not offer any purchases. All features, including those previously sold as a Pro upgrade, are available free of charge.

If you bought the former Pro Lifetime upgrade in an earlier version, purchases were processed by Apple through the App Store or by Google through Google Play. Classly never received or stored your payment card number, bank account information, or other payment credentials. A local entitlement value from that purchase may remain on your device, and the Application may still receive purchase status information from the applicable app store if you restore purchases. Purchase transactions are governed by the terms and privacy practices of Apple or Google.

17. Developer Announcements

Classly may contact a Firebase-hosted service to retrieve developer announcements and Application-related notices. These requests may expose standard network and request information, such as your IP address, request timestamp, device network information, and Application request metadata, to Google's hosting infrastructure.

The announcement request does not intentionally include your attendance records, timetable contents, notes, backup files, Google Calendar events, or payment information.

Developer announcements are retrieved only when the Application requests the currently published announcements.

18. Voluntary Diagnostic Reports

Classly provides an optional feature that allows you to submit a diagnostic report when you want to report a problem or request technical support. The Application does not submit these user-initiated diagnostic reports unless you choose to send them.

A submitted diagnostic report may include:

Submitted reports are transmitted to a Firebase-hosted service and stored in Google Cloud Firestore so that we can investigate the reported problem, provide support, improve Application reliability, prevent abuse, and protect the diagnostic service.

The diagnostic service also processes your IP address for security and rate-limiting purposes. The current rate-limiting mechanism retains request timestamps associated with an address temporarily in server memory for approximately ten minutes. Hosting providers may separately process standard network logs according to their applicable security and retention practices.

Classly applies automated redaction intended to remove common email addresses, credential-like values, precise coordinate patterns, and local user-directory paths before a submitted report is stored. However, automated redaction cannot guarantee that every item of personal or sensitive information will be detected. You should review any diagnostic content presented by the Application and avoid including passwords, authentication tokens, private timetable information, personal contact details, or other information that is not necessary to describe the problem.

Diagnostic reports are accessible only for Application support, debugging, security, and maintenance purposes. We do not sell diagnostic reports or use their contents for advertising.

Diagnostic reports are retained only for as long as reasonably necessary to investigate the report, maintain service security, and improve the Application, unless a longer period is required by law or necessary to establish, exercise, or defend legal claims. You may request deletion of a submitted report by contacting us and providing the diagnostic report reference shown after submission, if available. We may be unable to locate a report using only your name or email address because Classly does not require an account and submitted reports may not include those details.

19. Legal, Licensing, and Acknowledgements

Classly is free software, copyright (c) 2026 Nguyen Cao Thiem, and is licensed under the GNU Affero General Public License, version 3 (AGPL-3.0). Copyright notices, license texts, and third-party acknowledgements are provided in the Application's Licenses section and in the project's LICENSE, NOTICE.md, and LICENSES/ files.

Classly began from a historical snapshot of an open-source project that was made available under the MIT License with the following notice:

Copyright (c) 2026 YTFL

The MIT License permits use, copying, modification, distribution, sublicensing, and sale subject to preservation of its copyright and permission notice. That notice and the complete MIT License text are preserved in the Application and in the project's LICENSES/MIT-YTFL.txt file. Classly has since been independently redesigned and extended, and it is not affiliated with or endorsed by the original author.

Open-source notices describe the licensing and attribution of software components. They do not change how personal information is handled under this Privacy Policy.

Product names, icons, logos, and other branding of third parties belong to their respective owners. References to Apple, App Store, Google, Google Play, Firebase, Google Calendar, GitHub, or other third-party products and services do not imply sponsorship, endorsement, or ownership by those third parties.

Your use of third-party services is also subject to their respective terms, licenses, and privacy policies. Nothing in this Privacy Policy grants rights to use third-party trademarks, copyrighted materials, or other intellectual property except as permitted by the applicable license or law.

Questions specifically concerning software licensing, copyright notices, or other legal matters may be sent to the contact address below. Privacy requests should clearly state that they concern personal information or data rights so they can be handled appropriately.

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or Classly's privacy practices, contact us:

Email: thiemnc.work@gmail.com

Developer location: Vietnam