Privacy Policy
How we handle your personal data.
Last updated: February 2026
Who we are
Skoleplan is a Norwegian-developed SaaS platform for substitute planning and school administration. We process personal data as data controller in accordance with the Norwegian Personal Data Act and the EU General Data Protection Regulation (GDPR).
Data we collect
We collect: contact information (name, email), organization data (school name, role), user-created data (schedules, absence records, substitute assignments), and technical data (IP address, browser type, login timestamps).
Legal basis
Processing is based on contract (GDPR Art. 6(1)(b)) for service delivery, legitimate interest (Art. 6(1)(f)) for security and improvement, and consent (Art. 6(1)(a)) where applicable.
How we use data
Data is used to deliver and improve the service, including substitute planning, conflict detection, absence analysis, statistics, and user authentication. We never sell your data to third parties.
Storage and security
All data is stored in the EU/EEA (primarily Norway via Supabase/AWS eu-north-1). Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Row-level security (RLS) isolates data between organizations.
Third parties and sub-processors
We use the following sub-processors: Clerk (authentication, EU), Supabase (database, AWS eu-north-1), Resend (email), Vercel (hosting, edge network). All have data processing agreements in compliance with GDPR.
Your rights
You have the right to access, rectification, erasure, data portability, restriction of processing, and to object to processing. Contact us at jacob@skoleplan.com to exercise your rights.
Retention
User data is retained as long as the account is active. Upon account deletion, all personal data is removed within 30 days. Anonymized aggregate data may be retained for analytics.
Cookies
We use essential cookies for authentication and session management. We do not use tracking cookies or third-party cookies for marketing.
Children's privacy
Skoleplan is designed for school administrators and teachers, not for children. We do not knowingly collect data from individuals under 16 without parental consent.
Changes
We may update this policy as needed. Material changes will be notified via email or in the app at least 30 days in advance.
Contact
For privacy inquiries, contact us at jacob@skoleplan.com. You may also file a complaint with the Norwegian Data Protection Authority (datatilsynet.no) if you believe we process personal data in violation of regulations.