Last updated: June, 8th 2026
At Scoolinary, we are committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what your rights are. We recommend that you read it carefully and follow these recommendations:
(i) Keep your device equipped with duly updated antivirus software against malicious software and spyware applications that may put your Internet browsing and the information stored on your device at risk.
(ii) Read and review this Privacy Policy and all legal texts made available by Scoolinary on the Website.
Scoolinary complies with Regulation EU 2016/679 on Data Protection GDPR, Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights LOPDGDD, and Law 34/2002 on Information Society Services LSSI.
1. – Data controller
Controller: Scoolinary S.L. “Scoolinary”
NIF: B-16671653
Address: Calle Batle Carbonell 3 casa 17, Bendinat, CP 07181, Illes Balears, España
Email address: support@scoolinary.com
2. – Scope of application
This Privacy Policy applies to the processing of personal data of users who access and use the Scoolinary platform through:
The website www.scoolinary.com and its subdomains.
The mobile application for iOS, Apple App Store.
The mobile application for Android, Google Play.
Any communication channel with Scoolinary, email, contact forms, social media.
Acceptance of this Privacy Policy is a necessary condition for using the Service. If you do not agree with its content, you must refrain from using the platform.
3. – Personal data we collect
3.1. – Data you provide directly
When you register, make a purchase, or interact with us, we collect the following data:
Account registration: first name, last name, email address, encrypted password.
User profile: country of residence, profile photo, username or nickname, optional.
Contracting: billing data, name, postal address, NIF/NIE when an invoice is requested, and payment method data, managed directly by the secure payment processor. Scoolinary does not store full card details.
Communications: data provided when contacting support or participating in surveys, giveaways, or contests.
Phone number: when you voluntarily provide it in the registration form, for SMS communications, with prior consent.
As a user, you guarantee the accuracy of the personal data you have provided to us. To ensure that your data is always true and accurate, you undertake to keep it updated and to communicate any changes to Scoolinary.
3.2. – Data collected automatically
When you use our platform, we automatically collect technical and browsing information:
IP address, internet service provider ISP and country of access.
Browser or device type and version, operating system.
Device identifiers in the mobile app.
Pages visited, content viewed, session duration and usage patterns.
Transaction data: amount, date and time of purchase.
Cookies and similar technologies, see the Cookie Policy at www.scoolinary.com/cookies.
3.3. – Data provided by third parties
If you register through a social network, for example Google or Facebook, we will receive the data that you have authorized that platform to share.
Data from payment processors, Stripe, PayPal: transaction confirmation, amount and date. Scoolinary does not receive full bank details.
4. – Purposes and legal bases for processing
Below are the purposes for which we process your data, together with the legal basis that legitimizes each processing activity in accordance with art. 6 GDPR:
Management of registration and user account: create and manage your user account and allow you to access the content. Legal basis: art. 6.1.b GDPR, performance of the contract.
Provision of the service and access to educational content: provide access to the contracted educational content, courses and subscriptions. Legal basis: art. 6.1.b GDPR, performance of the contract.
Payment and billing management: process payments, issue invoices and manage payment claims. Legal basis: art. 6.1.b GDPR, performance of the contract; art. 6.1.c GDPR, legal obligation, tax and fiscal regulations.
Sending service communications: send purchase confirmations, renewal notices, account updates and transactional communications. Legal basis: art. 6.1.b GDPR, performance of the contract.
Commercial communications by email: send you newsletters and offers about Scoolinary products and services. Legal basis: art. 6.1.a GDPR, consent revocable at any time.
Commercial communications by SMS: send you commercial communications to the phone number provided. Legal basis: art. 6.1.a GDPR, explicit and specific consent for SMS.
Push notifications, mobile app: send you notifications on your device about news, content and offers. Legal basis: art. 6.1.a GDPR, consent configurable from the device settings.
Service analysis and improvement: analyze the use of the platform to improve the user experience and content. Legal basis: art. 6.1.f GDPR, Scoolinary’s legitimate interest in improving the service.
Security and fraud prevention: detect and prevent fraudulent or unauthorized use of the platform. Legal basis: art. 6.1.f GDPR, Scoolinary’s legitimate interest.
Compliance with legal obligations: retain invoices, transaction data and contractual documents in accordance with applicable legal regulations. Legal basis: art. 6.1.c GDPR, legal obligation.
Management of claims and customer service: respond to your inquiries, complaints or requests to exercise rights. Legal basis: art. 6.1.b GDPR, performance of the contract; art. 6.1.c GDPR, legal obligation.
Social media management: manage Scoolinary’s presence on social media and interactions with users. Legal basis: art. 6.1.f GDPR, Scoolinary’s legitimate interest.
5. – Recipients and international transfers
5.1. – Categories of recipients
Scoolinary may share your personal data with the following categories of third parties, to the extent necessary for the stated purposes:
Payment processors: Stripe, PayPal and other payment processors to manage transactions. Status: processors. DPA signed.
Analytics services: tools for analyzing platform usage, for example Google Analytics. Status: processors. DPA signed.
Email and communications services: providers for sending emails and SMS, for example Mailchimp, Freshdesk or Metorik. Status: processors. DPA signed.
Cloud infrastructure providers: web hosting and cloud storage services. Status: processors. DPA signed.
App stores: Apple, App Store, and Google, Google Play, in relation to in-app purchases. Status: independent controllers. Their own policies apply.
Competent authorities: public administrations, courts or regulatory authorities when required by law. Status: legal obligation, art. 6.1.c GDPR.
We do not sell or transfer your personal data to third parties for their own commercial purposes.
5.2. – International data transfers
Some of our service providers may be located outside the European Economic Area EEA. In these cases, we ensure that appropriate safeguards are in place for the transfer with regard to the protection of your privacy, your fundamental rights and freedoms, and the exercise of your rights. Such appropriate safeguards may include, among others, and depending on each specific case, the use of:
Binding corporate rules.
Standard data protection clauses adopted by the European Commission.
Standard data protection clauses adopted by a supervisory authority.
Contractual clauses authorized by a competent supervisory authority.
Other appropriate safeguards pursuant to art. 46 GDPR.
You may request information about international transfers and the applicable safeguards by contacting us at support@scoolinary.com.
6. – Data retention periods
We retain your personal data for the time necessary for the purposes for which it was collected and to comply with applicable legal obligations. The main periods are indicated below:
User account data: while the account remains active for the processing purposes for which it was provided, provided that you have not requested the cancellation of your account or the deletion of certain personal data. After cancellation, up to 12 months to handle possible claims.
Billing and contract data: minimum 5 years from the transaction date, General Tax Law and applicable tax legislation.
Support communications data: up to 3 years from the last communication, or until any pending claim is resolved.
Analytics and browsing data: maximum 25 months from collection, AEPD criterion for analytics cookies.
Marketing data, email/SMS: while consent remains valid. After withdrawal, blocked to comply with the Robinson list and advertising exclusion regulations for the legally required period.
Fraud prevention data: up to 5 years from the transaction or detected incident.
Once the indicated periods have elapsed, we will delete or anonymize the data. If necessary, Scoolinary will keep the information blocked during the legally established periods.
7. – Your rights
As a data subject, you have the following data protection rights recognized under the GDPR and LOPDGDD:
Right of access, art. 15 GDPR: obtain confirmation as to whether we process your data and, where applicable, access it and obtain a copy.
Right to rectification, art. 16 GDPR: request the correction of inaccurate data or the completion of incomplete data.
Right to erasure, art. 17 GDPR, right to be forgotten: request the deletion of your data when, among other cases, it is no longer necessary for the purpose for which it was collected or you withdraw consent.
Right to restriction of processing, art. 18 GDPR: request that the processing of your data be restricted in certain circumstances.
Right to data portability, art. 20 GDPR: receive your data in a structured, commonly used and machine-readable format, and transmit it to another controller.
Right to object, art. 21 GDPR: object to the processing of your data at any time, especially when the processing is based on legitimate interest or carried out for direct marketing purposes.
Right relating to automated decisions, art. 22 GDPR: not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you.
Right to withdraw consent: withdraw at any time the consent given for purposes based on it, without affecting the lawfulness of processing carried out before withdrawal.
7.1. – How to exercise your rights
You can exercise any of these rights by sending a request to:
Email address: support@scoolinary.com, subject: «Exercise of GDPR rights».
Postal address: Scoolinary S.L., Calle Batle Carbonell 3 casa 17, Bendinat, CP 07181, Illes Balears, España.
To protect your privacy, we may ask you to prove your identity before processing the request. We will respond within a maximum period of one month from receipt, extendable by two additional months in complex cases. We will notify you if necessary.
7.2. – Complaint before the AEPD
If you consider that the processing of your personal data infringes data protection regulations, you have the right to lodge a complaint with the competent supervisory authority, which may be the supervisory authority in your country of residence, place of work, or place of an alleged violation of data protection laws.
8. – Commercial communications and SMS
Scoolinary may send you commercial communications about its services, news and offers through the channels for which you have given us your consent. Consent for each channel is voluntary, independent of acceptance of this Policy, and you can withdraw it at any time:
Email: consent obtained through a specific checkbox during registration or in your account settings. Unsubscribe: link in each communication or by writing to support@scoolinary.com.
SMS: consent obtained through a specific and independent checkbox in the registration form. Unsubscribe: by replying STOP to the message or by writing to support@scoolinary.com.
Push notifications, app: consent granted when accepting notification permissions on your device. Unsubscribe: notification settings on your device, iOS or Android.
Consent for sending commercial communications by SMS is specific to that purpose and cannot be obtained implicitly or included in the general acceptance of these conditions.
If you provide us with your phone number but do not check the SMS consent box, we will not use that number to send you commercial communications.
9. – Cookies and similar technologies
Scoolinary uses cookies and similar technologies for the operation of the platform, usage analysis and personalization of the experience. You can obtain detailed information about which cookies we use, their purpose and how to manage them in our Cookie Policy:
www.scoolinary.com/cookies
10. – Data security
The protection of users’ privacy and personal data is fundamental to Scoolinary. For this reason, it has taken all measures within its reach to prevent the misuse of such data, allowing access only to authorized personnel.
Scoolinary applies technical and organizational measures appropriate to the risk to guarantee the security, integrity and confidentiality of your personal data in accordance with applicable regulations, including:
Encryption of communications through TLS/HTTPS protocol.
Restricted access to data by authorized personnel.
Periodic security audits.
Confidentiality and data processing agreements with all providers that access personal data.
At no time will Scoolinary or its staff have access to the full bank details, card number, CVV, that the user enters into the secure payment gateway. This data is managed exclusively by certified payment processors PCI-DSS.
Scoolinary undertakes to respect the right to secrecy and confidentiality of the personal data processed, in accordance with applicable legislation. Scoolinary shall not be liable for damages that may arise from users’ breach of this obligation.
If you detect a security incident related to your account, notify us immediately at support@scoolinary.com. In the event of a security breach affecting your data, we will inform you in accordance with art. 34 GDPR.
11. – Minors
Scoolinary’s services are aimed at persons over 18 years of age. Scoolinary does not knowingly collect personal data from minors. If you become aware that a minor has created an account or provided us with their data without parental consent, please notify us at support@scoolinary.com so that we can proceed to delete that information.
12. – Social media
Scoolinary maintains active profiles on various social media platforms. When you interact with us on social media, we process the data you provide, comments, private messages, mentions, for the purpose of managing our online presence and responding to your communications.
Scoolinary is responsible for processing the data published directly on its profiles, for example photos published by Scoolinary in which people appear. The data processing carried out by the social network itself is subject to its own privacy policies, over which Scoolinary has no control.
13. – Changes to the Privacy Policy
Scoolinary may periodically update this Privacy Policy to reflect regulatory changes, new processing purposes or modifications to our services. When the changes are relevant, we will inform you sufficiently in advance through:
An email to your account address.
A prominent notice on the platform when you log in.
The date of the last update will always appear in the header of this document. We recommend reviewing it periodically.
14. – Contact
For any questions about this Privacy Policy or the processing of your personal data, you can contact us at:
Email address: support@scoolinary.com
Postal address: Scoolinary S.L., Calle Batle Carbonell 3 casa 17, Bendinat, CP 07181, Illes Balears, España
Website: www.scoolinary.com/privacidad

© 2026 Scoolinary S.L. | Calle Batle Carbonell 3 casa 17, Bendinat, 07181 Illes Balears, España
support@scoolinary.com | www.scoolinary.com