Privacy
How Ecolia handles personal data — on this website and in the app that schools use.
This website
This website sets no tracking or advertising cookies and uses no analytics. Its fonts and pictures come from our own server, so your visit is not reported to anyone else.
If you choose a language, a small cookie remembers it for one year. When you sign in, a cookie keeps you signed in. Nothing else is stored in your browser.
Like any web server, ours records technical data (time, page, IP address) to keep the service secure.
Who is responsible for school data
Each school decides what is entered in Ecolia and why: the school is the controller. Ecolia processes this data only on the school’s behalf, under a written data processing agreement.
For questions about your child’s or your own data in a school, contact the school first. You can also write to us (see the legal notice).
Where the data is stored
On servers in the European Union (Germany). E-mails are sent through a provider in the European Union. Backups stay in the European Union too.
Who sees what
Each person sees only what their role needs: parents their own children, teachers their classes, the canteen and bus teams only what they need for the day (no grades). Schools can never see each other’s data.
Messages between a teacher and a parent are read only by the two of them — not by the school’s administration and not by us. The activity log records that something happened, never the content.
These rules are enforced in the database itself and checked by automatic tests before every change.
How long data is kept
The school decides. Past school years are kept read-only. When a child leaves, the family keeps read access for the time the school chose, then it ends automatically. Health certificates are deleted when they are no longer needed.
Anyone can download their own data and delete their account from the app (Privacy). A school can export all its data at any time.
No advertising, no selling
There is no advertising in Ecolia and data is never sold or used to build profiles. Children’s data is never used for marketing.
Your rights
You have the right to access, correct and delete your data, to restrict or object to its use, to receive it in a portable format, and to complain to a data protection authority.
Last updated: 31 October 2026