Privacy policy

1. Who we are

mimimi is a lesson management system for private teachers, operated by Webshuk ("we"). This policy explains what information we collect, how we use it and who we share it with.

It applies to teachers who open an account, and to students who book lessons and sign in to their area through a teacher's booking page.

2. What we collect

Teachers: name, email, password (stored hashed), mobile number, subjects, availability and pricing settings, and payment details the teacher chooses to show students (such as a Bit number or bank details).

Students: name, phone number, and whatever the teacher enters — additional contacts, lessons, lesson summaries, recordings, files and payments.

Technical: cookies needed to keep you signed in, and basic usage logs for security and operation.

Product usage: which screens are opened and which actions are taken (such as "lesson added"), so we can see what helps and what needs work. This carries an internal id only — no names, phone numbers, amounts or content. For teachers we also keep recordings of screen use, with all text and fields hidden. IP addresses are not stored.

3. Google Calendar

A teacher can connect their Google Calendar. If they do, we get access to the Google account's email address, read access to the list of their calendars and to calendar events, and the ability to create and edit a separate calendar the app creates for lessons.

From the calendars the teacher shows in Google (the primary one and any other calendar they have switched on) we read and store only each event's start and end time and its title. They are used for two things only: blocking busy times on the booking page, and showing those events next to lessons in the teacher's mimimi agenda.

Calendar events are visible only to the teacher who connected the calendar. Students see only that a time is taken, with no details. Other teachers and administrators cannot see them.

Lessons are written only to the separate calendar the app creates. We do not change or delete events in any other calendar.

We do not sell this data, use it for advertising, share it with others except as needed to run the service, or use it to train artificial intelligence or machine learning models.

mimimi's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect the calendar at any time in Settings or in your Google account's security settings. When you disconnect, stored calendar events are deleted immediately and access to Google is revoked.

4. How we use it

To run the service: booking lessons, reminders, managing students and payments, and sharing material between teacher and student.

To send service SMS and email, such as sign-in codes, lesson confirmations and reminders.

To bill teachers for their subscription, for support, for security and to prevent abuse.

5. Student information

Student information is entered and managed by the teacher. The teacher is responsible for having consent to keep it and to message students. We process it on the teacher's behalf and according to their instructions.

A student who wants to see, correct or delete their information can contact the teacher, or us at the address at the end of this policy.

6. Service providers

Information is stored and processed by providers that help us run the service: Lovable Cloud (hosting and database), sms4free (SMS), Lovable Emails (email), SUMIT (teacher subscription billing), PostHog (product usage data, on EU servers) and Google (calendar, for teachers who connect it).

Some providers store data outside Israel. They receive only what they need to provide their service.

We do not sell personal information. We disclose information to authorities only when the law requires it.

7. Retention and deletion

Information is kept while the account is active. After an account is closed it is deleted within 90 days, except what the law requires us to keep (such as billing records).

SMS and email messages already sent are not removed from the recipient's device.

8. Security

Access is restricted: each teacher sees only their own data, and a student sees only their own data with their teacher. Traffic is encrypted (HTTPS). No method is completely secure, but we take reasonable measures to protect your information.

9. Your rights

You can ask to see, correct or delete your information, under the Israeli Privacy Protection Law. Teachers can update most details directly in Settings.

Send requests to the email address at the end of this policy. We reply within 30 days.

10. Changes

If we change this policy, the date at the top of the page changes. We tell teachers about material changes by email.

11. Contact

Webshuk · contact@webshuk.com