Privacy policy

DarasaCloud is an online classroom for universities, schools and study groups. This policy explains what we collect when you use the DarasaCloud app (app.darasacloud.com) and this website, why, who we share it with, and the choices you have. If anything here is unclear, write to hello@darasacloud.com.

Who is responsible for your data

When you use DarasaCloud through an institution (a university, a school or a group that runs its classes on DarasaCloud), that institution decides how its classes and records are used, and we process the data on its behalf. For your account itself, and for this website, DarasaCloud is responsible. Questions about your institution's records can go to the institution or to us; we will pass them on where needed.

What we collect

• Account details: your name, email address and password (stored only as a secure hash), your role (student or staff), the institution you belong to and, if you give one, your student number.
• Google sign-in: if you sign in with Google, Google shares your name, email address and profile photo with us. We use them to create or find your account. We do not get your Google password or access to your Gmail, Drive or other Google data.
• Your profile: the avatar you make, and a headline if you add one.
• Learning activity: the classes you join, lessons you open and finish, quiz answers and results, assignments and files you submit, marks and feedback, discussion posts, comments and favourites.
• Content staff create: lessons, quizzes, assignments, rubrics and the files attached to them.
• Technical data: the IP address and browser details sent with each request, kept in server logs for security and troubleshooting.

How we use it

• To run the service: sign you in, show you your classes and coursework, mark quizzes and send notifications.
• To let your teachers and institution see your work and progress in the classes you are in.
• To keep DarasaCloud secure, prevent abuse and fix problems.
• To provide the ✦ AI features your institution has switched on (below).

We do not sell your data, show you ads, or use your data to build advertising profiles.

✦ AI features

Some institutions use DarasaCloud Plus, which adds AI help such as explaining a quiz answer, summarising a lesson or drafting feedback. When you use one, the text it needs (for example the question and your answer, or the lesson) is sent to an AI model through OpenRouter, an AI gateway. We send only what the feature needs, and we ask OpenRouter to route requests only to model providers that do not keep or train on the data. AI features are off unless your institution turns them on, and teachers can switch them off for their class.

Who we share it with

• Your institution and the staff of the classes you are in, as described above.
• Other members of your classes see what you choose to share there, such as discussion posts and your name and avatar.
• Service providers that run DarasaCloud for us: Contabo (the server that stores the data), Render (hosting for the app and this website), OpenRouter and the AI model providers it routes to (only for ✦ AI features), and Google (only if you choose Google sign-in).
• When the law requires it, or to protect the safety of people or the service.

Where it is stored and how long we keep it

Your data is stored on a server run by Contabo in the European Union and is sent over encrypted (HTTPS) connections. We keep it while your account or your institution's subscription is active. Daily backups are kept for seven days. When an account is deleted, its data is removed from the live system and drops out of the backups within those seven days, except where your institution must keep academic records for longer.

Cookies and storage

The app stores your sign-in session in your browser's local storage so you stay signed in. We do not use advertising or tracking cookies, and this website does not use analytics.

Your choices and rights

You can see and change your name and avatar in the app. You can ask us for a copy of your data, to correct it, or to delete your account, and you can object to how we use it, by writing to hello@darasacloud.com. Some records (such as marks) belong to your institution, so we may need to involve it. These rights apply under data protection laws including Uganda's Data Protection and Privacy Act 2019 and Kenya's Data Protection Act 2019, and you can also complain to your country's data protection authority.

Children

Schools that use DarasaCloud for learners under 18 sign them up through the school, which is responsible for getting any consent the law requires from parents or guardians.

Changes to this policy

If we change this policy we will update the date at the top, and tell you in the app if the change is significant.