Privacy Policy

The data controller (responsable del tratamiento) is Pablo Ortiz, who runs Grammify, based in Medellín, Colombia.

For any question or request about your personal data, write to portiz4@gmail.com.

Teachers who use Grammify with their classes decide which students to enrol and what to record about their work. If your school has its own rules about learning platforms, those rules also apply to your teacher.

Your account. Your email address, your given and family names, a short username taken from your email address, your password (stored only as a salted hash that cannot be turned back into the password), when the account was created and set up, when you last signed in, and your role (student, teacher or administrator). If your sign-in address is changed, the earlier addresses and the date of each change are kept so the change can be undone.

Sign in with Google. If you use it, Google tells us your Google account's identifier, its email address, whether Google verified that address, your school's Google Workspace domain if there is one, and your name. We keep the identifier, the address and the domain, and when the link was made and last used. We never receive your Google password, and we ask for no access to your Gmail, Drive, contacts or anything else in your Google account.

Your courses. The courses you belong to, when you joined, whether your enrolment is active, and the spelling of your name on the course's class list, which your teacher may set to match the school's records.

Attendance. For each class date: whether you were present, absent or excused, and how it was recorded (a QR code scan, the “I'm here” button, or your teacher).

Your work. For assigned exercises: your answers in progress, attempts, correct answers, time spent, and whether you finished or revealed the answers. For quizzes: your answers, your scores and any correction your teacher makes. For work graded outside Grammify: the score your teacher enters.

Teachers' notes. A teacher may keep short, dated private notes about a student in a course (for example, “arrived late”). Students do not see them in Grammify, but you can ask for a copy (section 9).

Content teachers create. Sentences, their grammatical analysis, questions and pictures, with who created or changed them and when.

Technical data. Two cookies keep you signed in and protect forms against forgery (a session cookie, valid for two weeks, and a security token). Your browser also stores your preferences (such as the theme and display options) and, for 14 days, your progress on public practice exercises; signing out removes the practice progress kept for your account. Our hosting providers record each request's IP address and time in their logs, and Grammify uses your IP address for a short time to limit repeated requests. We use no advertising or analytics trackers.

We do not ask for sensitive data (such as health, religion, political opinions or biometric data). Teachers must not record it in notes or anywhere else in Grammify.

• To create your account, let you sign in, and keep it secure.
• To run courses: rosters, assignments, exercises, quizzes, grades and attendance.
• To let your teacher see and export your work, attendance and grades for their course.
• To help your teacher notice a student listed twice in a course: when your teacher imports a class list, the names on it are compared with the names of the students already in the course, and your teacher sees any that look like the same person under another address.
• To send account emails: set-up and invitation links, password resets, and notices about changes to your sign-in address or sign-in methods. We send no marketing email.
• To answer your requests and fix problems.

• Your teacher sees, for their own courses only, your name, email address, enrolment, attendance, work and grades, and the notes they wrote. They can download this as a spreadsheet.
• Grammify's administrator (Pablo Ortiz) can see accounts in order to manage and support them.
• Other students see nothing about you. Sentences published in the public gallery and on the Learn pages contain no personal data.
• We do not sell or rent personal data, and we share it with no one else except when the law requires it.

These companies host or deliver parts of Grammify and process data only on our behalf (encargados del tratamiento):

• Render (United States) — runs Grammify's server and database, where all the data above is stored.
• Vercel (United States) — serves the website.
• Resend (United States) — sends Grammify's emails, so it receives your email address and the message.
• Google (United States) — Sign in with Google, if you choose it.
• Cloudinary (United States) — stores the pictures that illustrate sentences.
• Anthropic and OpenAI (United States) — help teachers draft practice questions and draw sentence illustrations from grammar example sentences. They never receive students' account data, grades, attendance or notes.

Because these services are in the United States, your data is transferred and stored outside Colombia. By using Grammify you authorize this transfer (Ley 1581, article 26).

Grammify's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use it only to sign you in.

We keep your account and course records while your account exists and your teachers need them for their courses: a course's grades and attendance are part of its record, so they stay with the course. A teacher's notes about you are deleted with the course or with your enrolment in it.

When you ask us to delete your account, we delete or anonymize your personal data within 15 business days, except what we must keep by law or to resolve a pending claim. Browser data stays on your device until it expires (practice progress after 14 days) or you clear it.

Connections to Grammify are encrypted (HTTPS). Passwords are stored only as salted hashes. Access to data is limited by role: a teacher reaches only their own courses, and administrator tools are restricted to the administrator. Sign-in links expire and work once. No system is perfectly secure; if a breach affects your data, we will tell you and the Superintendencia de Industria y Comercio as the law requires.

Grammify is meant for school and university courses. A student under 18 may use it only with the authorization of a parent or legal guardian, given to the school or teacher who enrols them. We process minors' data only for their education and in their best interest, and a parent or guardian can exercise the rights in section 9 on the student's behalf.

Under Ley 1581 you have the right to:

• know and get a copy of the personal data we hold about you, teachers' notes included;
• correct or update it;
• ask for proof of the authorization you gave, and withdraw it;
• be told how your data has been used;
• ask us to delete it, when there is no legal or contractual duty to keep it;
• complain to the Superintendencia de Industria y Comercio (SIC) once you have made your request to us.

You can correct your own name on your account page. For anything else, email portiz4@gmail.com from the address on your account (or tell us how to confirm it is you), say what you are asking for, and include your name.

We answer questions within 10 business days and claims (a correction, deletion or complaint) within 15 business days. If we need more time we will tell you why, and answer within 5 more business days for a question or 8 more for a claim.

If we change this policy, we will update the date at the top of the page and, for a change that affects how your data is used, tell account holders by email before it takes effect. Data is kept for as long as section 6 says, for as long as Grammify operates.