Privacy policy

Who runs the service

The Zebrania service (zebrania.edu.pl) is run by its operator. For the data needed to run the service itself — accounts, sign-in, and technical records — the operator is the controller of that data.

For any personal-data matter, the fastest way to reach us is the "Report a problem" button in the app.

Whose data lives in the service

Information about a child — guardian contact details, the health statement, pickup authorizations, the religion or ethics signup, the position on image publication — originates with you and stays yours. The service establishes nothing about a child on its own and collects none of it for its own purposes.

Sharing it is your decision. By submitting a form, you pass a specific statement to a specific teacher — the one who runs your child's class.

The teacher receives it as the individual running the class — for the purpose you shared it for, and only that purpose.

Zebrania is the messenger: it carries, stores, and renders your statements on your behalf. We are not the recipient of this information and we do not decide what it is for.

The school as an institution is not a party to this exchange. The service signs no agreements with schools and gives the school no aggregate view of statements.

What data we process

The following kinds of data appear in the service:

• — Account data — email address, name, phone number (if you provide one), and language. Needed for sign-in, notifications, and running the account.
• — Children's data — name and class, entered by a guardian at enrolment.
• — Statements — the contents of the forms a guardian passes to the homeroom teacher: contact details, after-school care, self-return declarations, pickup authorizations, the religion or ethics signup, the health statement, and the position on image publication.
• — Third-party data — the name (and optionally surname, phone, or document number) of a person authorized to pick up a child, provided by the guardian.
• — Technical data — records of sign-ins, bookings, and errors, needed for security and maintenance.

Data we handle with the greatest care

The health statement (allergies, medication, diet) is health information, and the religion or ethics signup speaks to beliefs. Extra rules apply to both:

• — The health statement is always your own words. The service accepts no medical certificates and requires none.
• — The health statement is visible only to you and your child's homeroom teacher. Other parents, teachers of other classes, and school administrators cannot see it.
• — Religion and ethics work like a class signup: we store only the fact that a child is signed up. No "does not attend" record exists, and no trace of being asked — withdrawing the signup deletes it entirely.
• — The service never produces lists of children not signed up for religion or ethics — an absent signup means "nothing is known".

Image publication: we record your position, we publish nothing

The image-publication consent is the one statement that is a genuine consent. The service records your current position — granted or withdrawn, with a date — and relays it to the homeroom teacher.

• — Zebrania publishes no photos and is not a party to this consent. The school is responsible for keeping its publications lawful.
• — Withdrawing the consent is exactly as easy as granting it — the same screen, one button, no written requests.
• — The homeroom teacher always sees your current position.

Who can see your data

Access is decided per form, never "for the whole school":

• — A statement is visible to its author (the guardian) and the homeroom teacher it was passed to.
• — Other parents in the class see nothing you share about your child.
• — A teacher of another class sees no statements from outside their class.
• — No "school administrator view" of sensitive statements exists — we deliberately did not build one.

To operate the service itself, the people maintaining the system may have limited, logged access to data — only as far as needed to fix a fault or handle a report.

Data about people who do not use the service

When you list a person authorized to pick up your child, you provide data about someone who has no account and never acts in the service. Therefore:

• — Only a first name is required. Surname, phone, and document number are optional.
• — You are responsible for telling that person you are passing their details to the homeroom teacher. Zebrania never contacts them.
• — Removing an authorization erases the entry completely and immediately — third-party data is not kept longer than it is needed.
• — A document number is masked on screen; it appears in full only on the printed register for the homeroom teacher.

How long we keep data

• — Statements are valid for one school year — they are submitted anew each September.
• — Withdrawing the health statement deletes its contents irreversibly, with no copy and no history.
• — Removing an authorized pickup person erases the entry without a trace.
• — The image-publication position keeps a history: grants and withdrawals append dated entries, so it is always clear which position applied when.
• — Account data is kept for as long as the account exists.

Deleting your account

You can request the deletion of your account. Deletion is carried out by anonymization: the account's personal data — name, email, phone — is permanently scrubbed, and the account is marked as erased.

The account's technical identifier remains so that system records (for example the booking log) stay consistent — it cannot be used to reconstruct who you are.

Submit a deletion request through the "Report a problem" button in the app.

Who we entrust data to technically

The service runs on the infrastructure of specialized providers. They process data solely on our instructions, so the service can run:

• — Supabase — database and sign-in,
• — Railway — application servers,
• — Vercel — websites,
• — Resend — email delivery,
• — Sentry — error monitoring,
• — an SMS gateway provider — SMS reminder delivery.

We do not sell data and we share it with no one for advertising purposes.

Your rights

For the data controlled by the service operator, you have the right to:

• — access your data and receive a copy of it,
• — rectify your data,
• — have your data erased,
• — restrict processing and object to it,
• — data portability,
• — lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl).

Statements about your child are managed by you directly in the app: you can change and withdraw them at any time, exactly as easily as you submit them.

Cookies

The zebrania.edu.pl website uses no cookies for tracking or advertising. The app uses only essential cookies: they keep you signed in and remember your chosen language.

Changes to this policy

We will announce material changes to this policy in the service before they take effect. The date of the current version is stated at the top of the page.

Contact

For personal-data matters, write to us through the "Report a problem" button in the app. We answer every report.