Version 1.0 · Effective 20/10/2026

In short

• Edubox collects data about teachers only. It never collects data about learners.
• We use your data to run your account, store your progress and send you your lesson plans and session reports. We do not use it for advertising, we do not sell it, and we do not track you across other apps or websites.
• Your star ratings and remarks are your own records. They are not used to assess your performance.
• We do not share your personal data with the Ministry of Education, Youth and Sport, Teacher Education Institutes or any other body without your explicit consent, unless the law requires it.
• You can delete your account and all its data at any time, in the app or by email (section 11).

1. Who we are

Edubox is an app that helps primary school teachers prepare and deliver lessons. It is published on the App Store and Google Play by TDSO vzw (Teacher Development Support Organisation), a non-profit association registered in Belgium, enterprise number 0642 700 026, Donkst.

Edubox is developed and run in Cambodia by TDSO, the Teacher Development Support Organisation, a Cambodian non-governmental organisation. In this policy, “TDSO”, “we” and “us” refer to both organisations.

TDSO vzw in Belgum is legally responsible for your personal data.

2. What this policy covers

This policy covers the Edubox app for Android and iPhone, and the Edubox server operated by TDSO at edubox.tdso.ngo.

Other organisations may run their own Edubox server. When you first open the app, you enter the address of a server. If you enter the address of a server run by another organisation, your account and data are held by that organisation, and its privacy policy applies. The app collects the same data whichever server you use and sends it only to the server whose address you entered. TDSO does not receive any data from servers run by other organisations.

3. Data we collect

We collect only the data listed below. “Required” means you cannot use Edubox without it.

Account details

Required

Family name, first name, how you would like to be addressed, email address, phone number and password. Your password is stored only in a protected (hashed) form; we cannot read it.

Purpose: To create your account, let you log in, reset your password, address you correctly in messages and contact you about your account.

Teacher ID

Optional

This allows us to quickly and efficiently identify the user that has been taking part in TDSO training programmes

Settings and enrolment

Required

Interface language, the subjects you request and are approved for, the tracks you set up, your classroom resources profile and how often you expect to have internet access.

Purpose: To give you access to the right courses and to download content that suits your classroom and your connection.

Lesson preparation and delivery

Created by you as you use the app

Preparation status, the activities you select, preparation notes, delivery status, start and completion times, which activities you completed, star ratings, remarks and sessions you skip. With your lesson plans, we keep a copy of the lesson content they were based on.

Purpose: To keep your progress safe, restore it if you change phone, and produce your lesson plans and session reports.

Device registration

Required

First, we retrieve the device_id from the phone via the native APIs provided by the Android and iOS systems: Application.getAndroidId() on Android and Application.getIosIdForVendorAsync() on iOS, both from expo-application. if we can’t retrieve that identifier,
only then we generated a unique random identifier for the device.

Second, after we retrieved the value, we stored them into the SecureStore which encrypted the value and will be deleted when the application is uninstalled.

Purpose: Each account can be used on one phone at a time. This protects your account if someone else learns your password.

Administrative records

Created by administrators

Dates of your registration and subject requests, decisions to approve or reject them, the reason given for a rejection, and which administrator made each change.

Purpose: To manage access to courses and keep a record of who changed what.

Server records

Created automatically

When the app connects to the server, or when you open a link to a video or file, the server records the internet (IP) address, the date and time, the type of request and any error.

Purpose: To keep the service secure and to find and fix faults. We do not use these records to find out where you are.

Support messages

Only if you contact us

Your messages to the Edubox helpdesk and our replies.

Purpose: To answer your question or solve your problem.

Please do not write learners’ names or other information about learners in your remarks or notes. Edubox is designed to hold information about teachers only.

4. Data we do not collect

• Any data about learners.
• Your location.
• Your contacts, photos, videos, camera or microphone.
• Your phone’s advertising identifier.
• Payment or financial information.
• Health, religious, political or other sensitive information.
• Data about how you use other apps or websites.

Edubox contains no advertising and no third-party analytics, tracking or crash-reporting tools. 

5. How we use your data

We use your data only for the purposes in section 3. In particular:

• To provide Edubox to you. This covers your account, your progress, your lesson plans and session reports, and support. We process this data because it is needed to provide the service you signed up for.
• To keep Edubox secure and working. This covers device registration and server records. We process this data because we have a legitimate interest in protecting the service and its users.
• To improve courses and report on the programme. We may combine data from many teachers into statistics, for example how many sessions were delivered in a subject or the average rating of an activity. These statistics do not identify any teacher. We may share them with partners and funders. We do this on the basis of our legitimate interest in improving courses and accounting for our work.

We do not use Edubox data to monitor or assess individual teachers. Your star ratings and remarks are your own records. They appear in your own session reports and are not extracted for performance evaluation, inspection or reporting.

6. Who can see your data

You

You can see all your data in the app. Other teachers cannot see your data.

Edubox administrators

Administrators for the subjects you have requested can see your account details, your subject requests and enrolments, and whether a phone is registered to your account. They cannot see your phone model or its identifier, and they cannot change your personal details. Global administrators can see this information for all teachers and can export a list of teachers. Exports of delivered sessions and ratings do not contain names or contact details.

TDSO staff who maintain the server have technical access to all data held on it. They use this access only to maintain the service and to provide support.

Service providers

We use a small number of companies to run Edubox. They handle data only on our instructions and are not allowed to use it for their own purposes:

• Server hosting: Hetzner Online GmbH, Germany. Data on these servers are not subject to the US Cloud Act.
• Email delivery: Brevo, France. Data on these servers are not subject to the US Cloud Act.

Government and partner organisations

We do not share your personal data with the Ministry of Education, Youth and Sport, Teacher Education Institutes, schools or any other organisation without your explicit consent. The only exception is where we are required to do so by law; in that case we disclose only what the law requires.

Apple and Google

Edubox does not send your data to Apple or Google. Apple and Google may collect data about app downloads under their own privacy policies.

We never sell your data.

7. Offline use and uploading

Edubox is designed to work without internet. Lesson content and your progress are stored on your phone, so you can prepare and deliver lessons offline.

Your progress, ratings and remarks are sent to the server so that they are not lost if your phone is lost or reset:

• during an Update, which you start yourself; and
• automatically, when your phone has a connection.

Automatic uploads contain text only. Lesson files are downloaded only when you run an Update. Edubox respects the data saving settings on your phone.

Video is not stored on your phone. When you play a video, it is downloaded from the Edubox server to your device. Links to course videos and files can be opened by anyone who has the link; they contain no personal data.

8. Lesson plan and report emails

Edubox can email you a copy of each lesson plan and session report, so that you can keep your own record. Each email contains one PDF and links to the activity files. Your session report includes your remarks. You can switch each type of email off in the app.

Once an email reaches your inbox, the copy there is held by your email provider and is under your control. Deleting your Edubox account does not delete emails you have already received.

9. Where data is stored and how it is protected

The TDSO Edubox server is located in Germany, in the European Union. TDSO staff in Cambodia access the server to manage accounts and provide support.

We protect your data as follows:

• All data sent between the app and the server is encrypted in transit (TLS).
• Passwords are stored only in hashed form.
• Administrator access is protected by individual accounts and limited by role and subject.
• Each account can be used on only one registered phone at a time.

Data on your phone is stored inside the app. Anyone who can unlock your phone may be able to open Edubox, so please protect your phone with a screen lock. If you lose your phone, contact the helpdesk so that we can unregister it from your account.

10. How long we keep data

• Account and progress data: for as long as your account exists. If your access to a subject is withdrawn, your data for that subject is kept so that it can be restored if you are enrolled again.
• After you delete your account: all your data is removed from the server within 30 days. We do not keep an anonymised copy. Backup copies are overwritten within a further 15 days.
• Server records: 2 years.
• Support messages: 180 after your request is closed.
• Statistics that do not identify any teacher may be kept after your account is deleted.

Data stored on your phone is removed when you uninstall the app. Uninstalling the app does not delete your account or the data on the server. 

11. Deleting your account

You can delete your Edubox account and all data linked to it at any time.

In the app

1. Open the menu on the My Tracks screen and go to Account settings.
2. Tap Delete account.
3. Enter your password and confirm.

Without the app

If you no longer have the app or cannot log in, send an email to support.edubox@tdso.ngo from the email address registered to your account, with the subject “Delete my Edubox account”. If you no longer have access to that email address, tell us your full name and phone number so that we can confirm the account is yours. We will delete the account within 30 days and confirm by email.

What is deleted

Your account details, settings, enrolments, tracks, progress, ratings, remarks, lesson plan records, device registration and administrative records about you. Deletion is permanent and cannot be undone. Statistics already produced that do not identify you are not affected.

12. Your rights

You have the right to:

• ask for a copy of the personal data we hold about you;
• correct your data (you can change most details yourself in Account settings);
• have your data deleted (section 11);
• ask us to limit how we use your data, or object to a use based on our legitimate interests;
• receive your data in a commonly used electronic format;
• withdraw any consent you have given, at any time.

To use these rights, contact us at the address in section 15. We reply within one month.

If you are not satisfied with our answer, you can complain to the Belgian Data Protection Authority :

Gegevensbeschermingsautoriteit
Drukpersstraat 35, 1000 Brussel
+32 (0)2 274 48 00
contact@apd-gba.be

13. Age

Edubox is for teachers and teacher trainees aged 18 or over. It is not intended for children, and we do not knowingly collect data from anyone under 18.

14. Changes to this policy

If we change this policy, we will publish the new version on this page with a new effective date. If a change affects how we use your data, we will tell you in the app or by email before it takes effect.

15. Contact

For questions about this policy or your data:

Email: support.edubox@tdso.ngo

Post: TDSO vzw, Donkstraat 61, 3150 Belgium