Privacy Policy
Thank you for using Verilo Learn! Approachly Labs ("we," "us," "our") attaches great importance to protecting the personal data and privacy of our users ("you"). When you register, sign in, and use Verilo Learn, we collect, use, and store your personal data as described in this Privacy Policy.
We are the "controller" for the account, billing, and operational data we collect directly from you. Where a school, tutoring practice, or individual teacher (an "Educator") uses Verilo Learn to run classes and uses our roster, homework, test, and reporting features on their students' behalf, we act as a "processor" carrying out that Educator's instructions, and the Educator is the "controller" of their students' data for that purpose.
By creating an account and using Verilo Learn, you agree to this Privacy Policy. If you do not agree, please do not provide your information and do not use the Service. This Privacy Policy may be updated from time to time — see Section XI below.
I. Personal Data We Collect
Personal data is any information that identifies or could identify you. We collect it directly from you, automatically as you use the Service, and — for student accounts — from the Educator who sets up your class. The tables below describe each category, why we collect it, and (for users in the EEA/UK) the GDPR legal basis we rely on.
Account Data
- Name and email address
- Password (stored encrypted via our authentication provider)
- Role (teacher, student, or organization admin)
- Profile photo (optional)
Necessary for the performance of our contract with you, to create and operate your account.
Provided directly by you at sign-up. For student accounts, an Educator may create the account on a student's behalf and invite the student to join.
Create and secure your account; identify your role and permissions; enable communication between teachers and students within a class.
Classroom & Scheduling Data
- Class schedules, recurrence, and invite codes
- Roster membership (which students are in which class)
- Attendance records (who joined a session and when)
- Booking requests (Standard Plus and Organization plans)
Necessary for the performance of our contract, to provide scheduling and classroom-management features.
Collected automatically as teachers and students use the Service.
Run classes on schedule, send reminders, and give teachers an accurate roster and attendance record.
Live Video, Audio & In-Class Chat
- Live video and audio streams while you are in a class
- Text chat messages sent during a live class
- Session recordings, only if a teacher chooses to record a specific class
Necessary for the performance of our contract, to deliver the live classroom feature itself.
Collected automatically through our real-time video infrastructure (LiveKit) only while you are actively in a class, and only with your device's own camera/microphone permission. Live video and audio are transmitted between participants and are not stored by default.
Power the live classroom; allow a teacher to make a recording available to that class's own students, when the teacher chooses to record.
Homework, Tests & Learning Records
- Homework assignments and student submissions
- Test questions, student answers, scores, and grades
- Progress data and leaderboard standings computed from the above
Necessary for the performance of our contract, to provide homework, testing, and progress-tracking features.
Collected automatically as teachers and students use these features.
Let teachers assign and grade work, and let students and teachers track progress over time.
Materials & Resource Center Content
- Files you upload as class materials (worksheets, slides, documents)
- Files uploaded to the Resource Center (available on Standard and higher plans), including subject/grade/type metadata
Necessary for the performance of our contract, to provide file-sharing and resource-library features.
Provided directly by you when you upload a file.
Share teaching materials within a class; let teachers browse and reuse resources.
Reports
Student report content (a summary built from a student's test and homework performance) that a teacher creates and sends. Available on Standard Plus and Organization plans.
Necessary for the performance of our contract, at the Educator's direction.
Generated from Learning Records above, at a teacher's request, and delivered by email.
Let teachers share a student's progress with the student or their parent/guardian.
Payment Data
Subscription plan and billing status. Paddle, as merchant of record, separately collects your billing name, address, and card or other payment details directly from you — we never see, collect, or store your full card number or other payment credentials.
Necessary for the performance of our contract, to manage your subscription.
Payments are processed by Paddle, our merchant of record, who shares with us only what's needed to manage your subscription (plan tier and billing status).
Bill your subscription and grant access to the features included in your plan.
Customer Service Data
Information you provide when you contact us for support, such as your email and the content of your message.
Necessary for the performance of our contract, and our legitimate interest in providing and improving customer support.
Provided directly by you.
Respond to and resolve your support requests.
Operation & Technical Data
IP address, browser/app version, device type, and error/performance logs.
Our legitimate interest in keeping the Service secure, stable, and working correctly.
Collected automatically as you use the Service.
Diagnose problems, maintain security, and improve reliability.
II. How We Share or Disclose Your Data
1. Service providers who process data on our behalf
We share the minimum data necessary with the service providers who help us run Verilo Learn, each bound by a data processing agreement limiting their use of your information to what we instruct:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage (S3-compatible cloud object storage) |
| LiveKit | Real-time video, audio, and in-class chat infrastructure |
| Paddle | Subscription billing and payment processing (merchant of record) |
| Resend | Transactional email delivery (reminders, reports) |
| Cloudflare (R2 object storage) | Hosts our downloadable desktop app installers on our website -- this does not involve any account or personal data, only serving the installer file itself |
We do not share your data with any sub-processor beyond these providers, and we do not sell your personal information.
2. Sharing within a classroom
A student's teacher (and, on the Organization plan, that organization's admins) can see the student's roster information, attendance, homework, test results, uploaded materials, and progress data — this is a core, expected part of how the Service works. If a teacher records a class, that recording is visible only to the students and teacher of that specific class.
3. Other disclosures
We may disclose personal information where required by law, to protect the rights, safety, or property of Verilo Learn or our users, or with your consent. We do not use student data for advertising.
III. International Data Transfers
Verilo Learn's infrastructure is hosted with Supabase in Singapore. Our other service providers (LiveKit, Paddle, Resend) may process data in other countries where they operate. Where we transfer personal data of users in the EEA/UK outside those regions, we rely on appropriate safeguards required under the GDPR, such as Standard Contractual Clauses where applicable.
IV. How We Protect Your Data
We use technical and organizational measures to protect your information, including:
- Encrypted connections (HTTPS/TLS) between your device and our servers
- Access controls and authenticated access to our databases and administrative systems
- Row-level security policies restricting who can query which records
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and any applicable regulator as required by law, describing the incident, our response, and steps you can take to protect yourself.
V. How We Retain Your Data
Where information is retained
Your data is retained in Supabase's Singapore region, and, for the categories noted above, with our other named service providers.
How long we retain it
We retain your personal information for as long as your account is active, and for a reasonable period afterward to allow account recovery or as required for legal, accounting, or security purposes. When information is no longer needed, we delete or anonymize it, unless we're required to preserve it for longer by law.
Account cancellation
You can request deletion of your account and associated data at any time by contacting us at support@verilolearn.com. We will verify your identity and confirm the request before deleting your account data, except where retention is required by law. We do not currently offer automatic, immediate self-service account deletion inside the app — requests are handled by our team.
VI. Your GDPR Rights and Choices
If you are located in the EEA, UK, or Switzerland, you have the following rights over your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — have inaccurate data corrected
- Right to erasure — request deletion of some or all of your data
- Right to restriction of processing — ask us to pause processing your data in certain circumstances
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on our legitimate interest
- Right to withdraw consent — where processing is based on consent, withdraw it at any time, without affecting processing that already happened
- Right to complain — lodge a complaint with your local data protection authority
To exercise any of these rights, see Section VIII below or email support@verilolearn.com. We will respond within one month, or two months for complex requests.
VII. Notice to California Residents
The California Consumer Privacy Act ("CCPA") gives California residents specific rights over their personal information. To exercise any of these, email support@verilolearn.com.
- Right to know and data portability — request the categories of personal information we've collected, its sources, our purposes for processing it, and any categories of third parties we've shared it with
- Right to delete or correct — request deletion or correction of your personal information, subject to certain exceptions
- Right to opt-out of sale — we do not sell your personal information
- Right to non-discrimination — we will not deny you service, charge you differently, or provide a different level of service for exercising your CCPA rights
VIII. How to Exercise Your Rights
You can access and update most of your own information directly inside Verilo Learn:
- Account and profile information — your Profile page
- Classes, schedule, and roster — your Dashboard and Roster page
- Homework and test submissions — the Homework and Tests panels within a class
- Uploaded materials and resources — the Materials panel and Resource Center
- Reports — the Reports page (Standard Plus and Organization plans)
For anything you can't access or correct directly in the app — including a full copy of your data, correction of information you can't edit yourself, or account deletion — email us at support@verilolearn.com. We will verify your identity before acting on the request and respond within a reasonable time (no more than one month, or two for complex requests). We may be unable to fulfill a request where it conflicts with a legal obligation, or where it would seriously harm the rights of others.
IX. Children's Data Privacy
We define "children" as individuals under 16 residing in Europe, or under 13 residing outside Europe. Verilo Learn is built for use in tutoring and classroom settings that may include children. We protect children's privacy as follows:
- Student accounts are created by a teacher, tutor, or educational organization — not signed up for directly by a child.
- We rely on that Educator to have obtained any consent required from a parent or guardian before creating a student's account, consistent with applicable law (including COPPA in the United States).
- We only collect the information reasonably necessary for a student to participate in their classes, described in Section I above.
- A parent or guardian who wants to review, correct, or delete their child's information should contact the child's teacher or school first, or reach us directly at support@verilolearn.com.
X. Schools and Education Records (FERPA)
Where a school or educational organization uses Verilo Learn, we act as a service provider handling education records on that organization's behalf, consistent with the Family Educational Rights and Privacy Act ("FERPA") and similar laws. The school or organization remains responsible for obtaining any consents required to share student records with us, and we use that data only to provide the Service to them.
XI. Changes to This Notice
We may update this Privacy Policy from time to time. We'll update the "Last updated" date above, and where a change is significant — such as a change to what data we collect, how we share it, or your rights — we'll provide additional notice, such as an email or in-app notice, before it takes effect. Continuing to use Verilo Learn after a change takes effect means you accept the updated policy.
XII. YouTube API Services
Verilo Learn uses YouTube API Services to upload videos created by Verilo Learn to our own YouTube channel (@VeriloLearn). We access only the YouTube account that we own and authorise; we do not access, collect, or store YouTube data belonging to users of the Verilo Learn app.
By using our YouTube-related features or viewing our content on YouTube, you also agree to the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy. You can revoke Verilo Learn's access to a Google account at any time via the Google security settings page.
For questions, contact support@verilolearn.com.
XIII. How to Contact Us
If you have questions, comments, or a request relating to this Privacy Policy or your personal data, contact us at:
Approachly Labs
Email: support@verilolearn.com
We aim to respond within 15 business days.