Last updated: July 30, 2026
When you sign in with Google, we collect your name, email address, and profile picture provided by Google. We do not collect any additional personal information beyond what is necessary to operate the service.
We request the following Google OAuth scopes: basic profile and email for sign-in; drive.file to let you select files via the Google Drive Picker and create per-student copies of exam materials; forms.body.readonly and forms.responses.readonly to read the structure and responses of a Google Form you attach as a student exam; youtube.upload and youtube.force-ssl to upload lesson recordings to your own YouTube channel when you explicitly choose to do so. youtube.force-ssl is automatically included by Google alongside youtube.upload for all YouTube Data API write operations. We do not access Gmail or any other Google service.
Google account data is used solely to: authenticate you and maintain your session; display your name and profile image; associate lesson materials and recordings with your account; display Google Drive files you explicitly select via the Picker; create per-student copies of exam files you designate; read the structure and responses of a Google Form you attach as a student exam; and upload a video to your own YouTube channel only when you explicitly initiate that action. We do not sell, share, transfer, or disclose Google user data to any third parties. Google user data is never used for advertising, profiling, or any purpose beyond operating the features described above.
Your account data is stored securely in a hosted PostgreSQL database. We do not sell, rent, share, transfer, or disclose your personal information or Google user data to any third parties for any purpose.
Your data is retained as long as your account is active. When you request account deletion, all personal data including your profile, recordings, lesson materials, and associated metadata is permanently deleted within 30 days. Google OAuth tokens are revoked immediately upon deletion request. You may request deletion at any time by contacting us.
If you are located in the European Economic Area, we process your personal data under the following legal bases: Contractual necessity (Article 6(1)(b)) — processing your name, email, and session data is required to provide the service you signed up for. Legitimate interests (Article 6(1)(f)) — storing lesson recordings and materials associated with your account to deliver core app functionality. Consent (Article 6(1)(a)) — for optional features such as YouTube upload and Google Drive access, which are only triggered when you explicitly choose to connect those services.
Depending on your location, you may have the following rights: Right to access — request a copy of the data we hold about you. Right to rectification — request correction of inaccurate data. Right to erasure — request deletion of your account and all associated data. Right to data portability — request your data in a structured, machine-readable format. Right to object — object to processing based on legitimate interests. Right to withdraw consent — disconnect Google Drive or YouTube access at any time via your Google Account permissions page. CCPA (California residents) — you have the right to know what data we collect, request deletion, and opt out of sale (we do not sell your data). To exercise any of these rights, contact us at mohamedsallam223v@gmail.com.
We use the following third-party services to operate Teacher Studio: Amazon Web Services (AWS) — cloud infrastructure and file storage (S3). Google LLC — authentication (OAuth 2.0), Drive Picker, Forms API, and YouTube Data API. Neon — hosted PostgreSQL database for account and session data. Vercel — application hosting and deployment. These subprocessors are bound by their own privacy policies and data processing agreements. We do not share your personal data with any other third parties.
We implement industry-standard security measures: all data is transmitted over HTTPS/TLS; database access is restricted to authenticated server-side processes only; Google OAuth tokens are stored server-side and never exposed to the client; AWS S3 recordings are private with time-limited signed URLs; and we conduct regular dependency audits. No method of transmission or storage is 100% secure.
Teacher Studio is intended for use by teachers and students under the supervision of an educational institution. We do not knowingly collect personal data from children under 13 without verifiable parental or institutional consent. If you believe a child's data has been collected without appropriate consent, contact us immediately and we will delete it.
For any privacy-related questions, contact us at mohamedsallam223v@gmail.com.