Privacy notice

Last updated 27 September 2026

In short

The EduBoard app keeps everything on the teacher's own computer. We, the people who make EduBoard, never receive students' names, grades or anything else from it.
The Portal (the website where students and families sign in) holds only what the teacher publishes to it and what students and families add. Whoever runs it, the school or us, keeps it for the school and uses it for nothing else.
No advertising, no selling of data, no tracking or analytics. The only cookie keeps you signed in to the Portal.

1. Who is responsible

The school, or the teacher when they use EduBoard on their own, decides what information about students goes into EduBoard and is responsible for it (the "controller"; 个人信息处理者 under China's Personal Information Protection Law).

EduBoard is made by an independent developer ("we", "us"). We run edu-board.com and the Portal at portal.edu-board.com. When a school uses portal.edu-board.com, we keep its data on its behalf and follow its instructions (we are its "processor"; 受托人). Schools can sign our data processing terms. A school that runs the Portal on its own server is responsible for that server, and we have no access to it.

Questions: privacy@edu-board.com. For anything about a particular student, ask their teacher or school first: they hold the records.

2. The EduBoard app (for teachers)

What it keeps: what the teacher enters. That is classes; students (names, student numbers, date of birth, guardians' names and contact details, notes, and the teacher's own extra fields such as allergies); grades; attendance; class points; log notes; lesson plans; report card comments; letters and messages. It is kept in a file on the teacher's computer and in any backups the teacher makes. With password protection turned on, the file and its backups are encrypted (256-bit ChaCha20-Poly1305).

What leaves the computer. Only the following, and only once the teacher has set it up:

Publishing to the Portal: class names, students' names, student numbers and dates of birth (used to check a family's invite code), grades and attendance rates, each marked assessment's score (with the teacher's comment and the class average only if the teacher turns those on), homework, materials the teacher chooses to share, Class Story posts and the teacher's messages. It goes over an encrypted connection (HTTPS) to the Portal address the teacher enters. Guardians' contact details, notes, log notes and extra fields are never sent.
AI suggestions (they need internet): when the teacher asks for one, the text it needs goes to the AI provider the teacher chose (DeepSeek, Qwen, Zhipu, Anthropic, or one the teacher enters, which can run on their own computer) with the teacher's own key. For report comment phrases that is the student's name, class, grade, trend, attendance and the teacher's recent notes. Nothing is sent until the teacher clicks, and the teacher checks every suggestion.
Group chats: a Class Story post or newsletter the teacher chooses to send to a DingTalk or WeCom group.
Updates: the app asks the Portal or GitHub for the newest version and downloads it. Like any website, the server sees the computer's internet address. Nothing about students is sent.
Help improve EduBoard (off unless the teacher turns it on): once a week, a random ID, the app version, operating system, language and rough class and student counts (such as "10–29"). No names, school or internet address are kept. Settings shows exactly what is sent.
Exit tickets and check-in: students' phones connect to the teacher's computer over the classroom Wi-Fi. This stays on the local network.

Of all this, we receive only update checks and, if turned on, the weekly count.

3. The Portal (for students and families)

What it keeps:

From the teacher: what is listed under "Publishing to the Portal" above; each child's report card (a PDF) when the teacher sends report cards, and when a family opened it; and, if the teacher turns it on, each child's class points for the past week.
Accounts: a username, the password (stored only in scrambled form, as a bcrypt hash), an email address if the family adds one for the weekly digest, which children the account belongs to, and a record of agreeing to the terms at first sign-in (who agreed: a parent or guardian by name, or a student aged 14 or over; when; and to which version), which the school can download for its records. If the family makes a private calendar link, only a fingerprint of it is kept, and turning it off deletes that.
What students and families add: homework answers and uploaded files; messages with the teacher; a profile (preferred name, pronouns, photo, goals, birthday, which the teacher sees only as a day and month and only if the student chooses; "private notes" are never shown to the teacher); questions asked to the Study Helper and its answers, which the teacher can see (students are told this); which Class Story posts were seen, and replies to notices that ask for one; and requests to reset a password.

Why: so students and families can see their own classwork, grades and messages, and the teacher can see what was handed in and read. For nothing else.

Who sees it: a student or family sees only their own children and their classes' shared material. The teacher sees their own classes. Whoever runs the server can reach the database to keep it working and to make backups, and does not otherwise look at it.

AI on the Portal: the Study Helper and translations of messages and classwork use the AI provider and key the teacher chose (Zhipu unless the teacher picks another). The question, and the class material it is about, are sent to that provider.

Email: the weekly digest goes through the teacher's own email account to families who gave an email address.

Cookies: one, which keeps you signed in. No analytics, advertising or third-party scripts; the pages load nothing from other websites.

How long: grades, homework and posts are replaced each time the teacher publishes. A student the teacher removes is removed from the Portal with their work, and so is their account with its messages unless it also belongs to a brother or sister. On portal.edu-board.com, backups are kept on the same server and the oldest is deleted once there are 14.

4. edu-board.com

The homepage sets no cookies and has no analytics. It remembers your language in your own browser. Downloads come from GitHub through our server. The server keeps no log of visits.

5. Where the data is

The app: on the teacher's computer.
portal.edu-board.com and edu-board.com: a server in Hong Kong (VPS.do). Cloudflare answers which server the addresses point to; no data passes through it.
AI providers are where they are based: DeepSeek, Qwen (Alibaba Cloud) and Zhipu in mainland China; Anthropic in the United States.

For schools in mainland China: under the Personal Information Protection Law, Hong Kong is outside the mainland. A school whose data must stay in the mainland can run the Portal on its own mainland server (it is free and open source) and use DeepSeek, Qwen, Zhipu or an AI model on its own computer.

6. Children

Most of this information is about children. The school decides what is kept and gets any consent that is needed from parents or guardians. (China's law requires a guardian's consent for a child under 14, and similar laws elsewhere have similar rules.) The Portal asks a child for nothing beyond what it needs to sign in; everything else in a profile is optional.

7. Keeping it safe

The Portal uses HTTPS only, stores passwords as bcrypt hashes, limits sign-in attempts, and signs an account out everywhere when its password is reset. Invite and QR sign-in links can be cancelled.
The app can encrypt its database and backups, lock itself when left idle, and hide private details while the screen is shown to a class.
If something goes wrong with a school's data on portal.edu-board.com, we tell the school without delay (within 48 hours of finding out) and help it inform families and the authorities.

8. Your rights

You can ask to see, correct, download or delete information about you or your child, and to know how it is used. Because the school holds the records, ask the teacher or school; they can do all of this in EduBoard. You can also write to privacy@edu-board.com about portal.edu-board.com, and we will work with the school to answer. Under Account on the Portal you can change your password yourself, and Download my data gives you a copy of everything the Portal holds about you and your children.

9. Changes

When this notice changes, the date at the top changes. Before an important change to how portal.edu-board.com handles data, we tell the schools that use it.

隐私说明

最后更新：2026 年 9 月 27 日

简要说明

EduBoard 应用把所有内容都保存在老师自己的电脑上。我们（EduBoard 的开发者）从不从中收到学生姓名、成绩或任何其他信息。
学生门户（学生和家长登录的网站）只保存老师发布的内容，以及学生和家长自己添加的内容。无论由学校还是由我们运行，它都只为学校保存这些信息，不作他用。
不投放广告，不出售数据，不做跟踪或统计分析。唯一的 Cookie 用于保持你在学生门户的登录状态。

1. 谁负责

学校（或独自使用 EduBoard 的老师）决定把哪些学生信息放进 EduBoard，并对这些信息负责（即《个人信息保护法》中的“个人信息处理者”）。

EduBoard 由一位独立开发者制作（下称“我们”）。我们运营 edu-board.com 和位于 portal.edu-board.com 的学生门户。学校使用 portal.edu-board.com 时，我们代表学校保存其数据并按学校的指示处理（即“受托人”）。学校可以签署我们的数据处理条款。在自己服务器上运行学生门户的学校自行负责该服务器，我们无法访问。

如有疑问：privacy@edu-board.com。涉及某个学生的事项，请先联系其老师或学校：记录由他们保管。

2. EduBoard 应用（老师使用）

保存的内容：老师录入的内容，包括班级；学生（姓名、学号、出生日期、监护人姓名和联系方式、备注，以及老师自建的字段，如过敏信息）；成绩；考勤；课堂积分；记录；教案；成绩单评语；信件和消息。这些内容保存在老师电脑上的一个文件中，以及老师自己做的备份里。开启密码保护后，该文件及其备份都会加密（256 位 ChaCha20-Poly1305）。

哪些内容会离开电脑：只有以下几项，并且只有在老师设置之后：

发布到学生门户：班级名称、学生姓名、学号和出生日期（用于核对家长的邀请码）、成绩和出勤率、每项已评分测评的得分（老师开启后才包括老师的评语和班级平均分）、作业、老师选择分享的资料、班级动态以及老师的消息。通过加密连接（HTTPS）发送到老师填写的学生门户地址。监护人的联系方式、备注、记录和自建字段从不发送。
AI 建议（需要联网）：老师请求建议时，所需文字会用老师自己的密钥发送给老师选择的 AI 服务商（DeepSeek、通义千问、智谱，Anthropic，或老师填写的服务，可以运行在老师自己的电脑上）。成绩单评语短语需要学生姓名、班级、成绩、趋势、出勤和老师最近的记录。老师点击之前不会发送任何内容，每条建议都由老师检查。
群聊：老师选择发送到钉钉或企业微信群的班级动态或简报。
更新：应用向学生门户或 GitHub 查询最新版本并下载。和任何网站一样，服务器能看到这台电脑的网络地址。不会发送任何学生信息。
帮助改进 EduBoard（除非老师开启，否则关闭）：每周一次，发送一个随机编号、应用版本、操作系统、语言，以及大致的班级数和学生数（例如“10–29”）。不保存姓名、学校或网络地址。设置中会准确显示发送的内容。
出门条和签到：学生的手机通过教室 Wi-Fi 连接到老师的电脑，数据只在本地网络中传输。

以上内容中，我们只会收到更新查询，以及（开启时）每周一次的计数。

3. 学生门户（学生和家长使用）

保存的内容：

来自老师的：上面“发布到学生门户”中列出的内容；老师发送成绩单时，每个孩子的成绩单（PDF）以及家长打开它的时间；如果老师开启，还包括每个孩子过去一周的课堂积分。
账号：用户名、密码（只以加密散列形式保存，即 bcrypt 散列）、家长为接收每周周报而填写的邮箱（如有）、该账号对应哪些孩子，以及首次登录时同意条款的记录（由谁同意：家长或监护人的姓名，或已满十四周岁的学生本人；何时同意；同意的版本），学校可以下载留档。如果家长生成了私人日历链接，只保存该链接的指纹，关闭链接后即删除。
学生和家长添加的：作业答案和上传的文件；与老师的消息；个人资料（常用名、代词、照片、目标、生日：老师只能看到月和日，且只有学生选择分享时才能看到；“私人笔记”永远不会给老师看）；向学习助手提出的问题及其回答，老师可以查看（学生会被告知这一点）；看过哪些班级动态，以及对需要回复的通知的回复；以及重置密码的请求。

用途：让学生和家长看到自己的作业、成绩和消息，让老师看到哪些作业已交、哪些内容已读。不作其他用途。

谁能看到：学生或家长只能看到自己的孩子及其班级分享的资料。老师只能看到自己的班级。服务器的运营者为维持运行和备份可以访问数据库，除此之外不会查看。

学生门户中的 AI：学习助手以及消息和课业内容的翻译，使用老师选择的 AI 服务商和密钥（默认智谱，老师可以另选）。问题及其相关的班级资料会发送给该服务商。

邮件：每周周报通过老师自己的邮箱账号，发送给填写了邮箱的家长。

Cookie：只有一个，用于保持登录状态。没有统计分析、广告或第三方脚本；页面不会从其他网站加载任何内容。

保存多久：每次老师发布时，成绩、作业和动态都会被替换。老师删除某个学生后，该学生及其作业会从学生门户删除；其账号和消息也会删除，除非该账号还属于兄弟姐妹。在 portal.edu-board.com 上，备份保存在同一台服务器上，超过 14 份时删除最旧的一份。

4. edu-board.com

主页不设置 Cookie，也没有统计分析。它只在你自己的浏览器里记住你选择的语言。下载文件通过我们的服务器从 GitHub 获取。服务器不保存访问记录。

5. 数据存放在哪里

应用：在老师的电脑上。
portal.edu-board.com 和 edu-board.com：位于香港的服务器（VPS.do）。Cloudflare 只负责告诉浏览器这些地址指向哪台服务器，数据不经过它。
AI 服务商在其所在地：DeepSeek、通义千问（阿里云）和智谱在中国大陆；Anthropic 在美国。

中国大陆的学校请注意：根据《个人信息保护法》，香港属于境外。数据必须留在境内的学校，可以在自己的境内服务器上运行学生门户（免费且开源），并使用 DeepSeek、通义千问、智谱或自己电脑上的 AI 模型。

6. 儿童

这些信息大多与儿童有关。由学校决定保存哪些信息，并向家长或监护人取得所需的同意。（中国法律规定，处理不满十四周岁未成年人的个人信息需取得其监护人同意，其他地区的法律也有类似规定。）学生门户只要求孩子提供登录所需的信息，个人资料中的其他内容都是可选的。

7. 安全保护

学生门户只使用 HTTPS，以 bcrypt 散列保存密码，限制登录尝试次数，并在重置密码时让该账号在所有设备上退出登录。邀请链接和二维码登录链接可以撤销。
应用可以加密数据库和备份，闲置时自动锁定，并在向全班展示屏幕时隐藏私密信息。
如果学校在 portal.edu-board.com 上的数据出现问题，我们会及时告知学校（在发现后 48 小时内），并协助学校通知家长和主管部门。

8. 你的权利

你可以要求查阅、更正、下载或删除与你或你孩子有关的信息，也可以了解这些信息的用途。由于记录由学校保管，请联系老师或学校，他们可以在 EduBoard 中完成这些操作。关于 portal.edu-board.com，你也可以写信至 privacy@edu-board.com，我们会与学校一起答复。在学生门户的“账号”中，你可以自行修改密码，也可以用“下载我的数据”获取学生门户保存的关于你和你孩子的全部信息。

9. 变更

本说明变更时，顶部的日期会随之更新。portal.edu-board.com 处理数据的方式发生重要变化之前，我们会告知使用它的学校。