Privacy Policy

1Who we are and what this policy covers

In this policy, “Kablam”, “we” and “us” mean the Kablam service and the people who run it. “You” means anyone who visits Kablam and, in particular, teachers who sign in.

This policy covers the Kablam website, the public game library, the classroom app, shared game links and the emails we send about your account. We decide why and how the personal data described here is used, so we are responsible for it as the data controller.

Kablam is made for teachers and schools. If you use it on behalf of a school, your school may have its own rules about online tools, so please follow them as well.

2Pupils and children

Kablam is designed so that children can take part without giving us any personal data:

• Pupils don’t create accounts, sign in or use their own devices. The class plays together on one screen that the teacher controls.
• A class is identified only by its year group and a section letter, such as “Year 3 B”. We never ask for pupils’ names, photos, voices or other details.
• We keep only class-level game results, such as how many questions were answered correctly. We don’t record who answered what.
• We don’t use the microphone or the camera. Questions can be read aloud by the device’s own voice, without sending anything to us.

Teachers must not enter pupils’ personal data into Kablam, whether in lesson text, uploaded materials, class names or the display name shown on shared games. If we find that a child’s personal data has reached us, we delete it.

Because children don’t give us personal information, we don’t knowingly collect personal data from children. If you think a child has given us personal data, contact us and we will delete it.

3What we collect

Your account

When you ask for a sign-in code, we collect your email address, and when you first sign in we create an account ID. We email you a six-digit code: we store only a scrambled, one-way version of it (a hash), and it expires after 10 minutes. After you sign in, a secure cookie keeps you signed in for up to 7 days. We also save your preferred language.

Your lessons and classes

When you are signed in, we save what you create or change so that you can find it on any device: lessons and edits, class settings (school system, year group and section letter), your interface and lesson languages, the class sticker album and progress through learning paths. Sound and motion settings stay in your browser. Kablam also keeps a copy of this classroom data in your browser, so the classroom works without an account too. In that case, it stays on your device.

Shared games

When you create a link to share a game, we store a copy of the game as it is at that moment, its play settings, its cover picture and the display name you choose to show to the people who open it. If you are not signed in, we set a cookie with a random identifier so that this browser can manage the links it created. Anyone with the link can open the game until you switch the link off.

The display name is also saved to your account. Copies that other teachers save from your link keep showing it as the name of the game’s original creator, even after you switch the link off or delete your account.

AI lesson drafts

If you ask Kablam to draft a lesson with AI, we send your request (school system, year group, subject, topic, difficulty and number of questions) and any material you choose to include to our AI provider: the text you paste and the pages you select from your documents. Documents are prepared in your browser, and only the text and pictures of the pages you select are sent. We don’t keep your original files.

We send these requests with storage switched off, and our provider does not use them to train its models. It may keep them for a limited time only to detect misuse, as its own terms require. We keep a basic record of each request (when it was made and whether it worked) to apply fair-use limits.

Payments and subscriptions

If you subscribe to a paid plan, payment is handled by our payment provider. You give your card or other payment details directly to them: we never see or store your full card number. We receive and keep what we need to manage your subscription: your plan, its status and renewal dates, the amounts charged, your billing country and, where tax rules require it, your billing name, address and tax or VAT number. We also keep invoices and receipts.

When you contact us

If you write to us, we keep your message and our reply so that we can help you.

Technical information

Like any website, our servers receive technical information when your browser connects, such as your IP address, browser type and the pages requested. We use it to deliver pages, keep Kablam secure and prevent abuse. For example, we limit how many sign-in codes can be requested using a scrambled, one-way version of your IP address rather than the address itself.

We also use the country your connection comes from to suggest the right school system and to choose your analytics default. We don’t store that country.

Optional analytics

With your permission, we collect usage statistics to learn which features teachers use, how games perform and what goes wrong. This includes the pages you visit, the features you use, whether actions such as saving or sharing succeed, page performance, technical error reports and class-level game summaries (for example, how many questions were answered and how long the game lasted).

Analytics never include pupils’ answers, the text of your lessons or materials, file names or anything you type into forms. Before anything is sent, we remove query strings and private link codes from web addresses. We don’t record your screen.

If you are signed in, analytics are linked to your teacher account, including your email address, so that we can understand how teachers use Kablam over time. Analytics data is stored in the European Union. Now and then, signed-in teachers may see a one-tap survey after a game; it has fixed answers and no free-text field.

4Why we use your data, and our legal basis

We don’t use your data for advertising, we don’t sell it, and we don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. We don’t send newsletters or promotional emails unless you ask for them.

5Cookies and browser storage

We use a small number of cookies and some browser storage. The necessary ones make Kablam work and are always on. The analytics ones are optional.

You can change your mind at any time with the Privacy & analytics button at the bottom of the page. If you withdraw consent, we stop collecting analytics; if you allow them again later, you get a new identifier. We respect Global Privacy Control and Do Not Track: when your browser sends either signal, analytics stay off.

If you visit from the United States, analytics are on by default and we don’t show a banner. You can switch them off in the same way, and browser privacy signals still apply. Everywhere else, we ask you first.

6Who we share data with

We share personal data only with the service providers that help us run Kablam, and only what each of them needs:

• Hosting and infrastructure, to serve the website, run our servers and store account data.
• Email delivery, to send sign-in codes and service emails.
• Analytics, to process optional usage statistics, stored in the EU.
• Artificial intelligence, to generate lesson drafts when you ask for one.
• Payments, to take payments, manage subscriptions and prevent fraud.

These providers process data on our behalf, under contracts that require them to protect it and to use it only to provide their services to us. Where the law requires it, for example to prevent fraud or to meet financial regulations, our payment provider may also act as an independent controller.

We also share data:

• with the people you choose, when you share a game link (they see the game and the display name you chose);
• when the law requires it, or to protect the rights, safety and security of the people who use Kablam, of others or of Kablam itself;
• with whoever takes over Kablam if it is restructured, merged or sold, in which case this policy will keep protecting your data.

We never sell or rent personal data, and we don’t share it for targeted advertising.

7International transfers

Some of our providers are based in, or use servers in, countries outside the European Economic Area and the United Kingdom, including the United States. When personal data is transferred, we rely on safeguards provided by law, such as adequacy decisions (including the EU–US Data Privacy Framework, where the provider takes part) or the European Commission’s standard contractual clauses and their UK equivalent. You can contact us for more information about these safeguards.

8How long we keep data

• Sign-in codes expire after 10 minutes, and each sign-in request, including the email address the code was sent to, is deleted automatically after a day. Sessions end after 7 days or when you sign out.
• Your account, lessons and classes are kept while your account is active. When you delete a lesson, we remove it from your account straight away (any copy in your browser stays until you clear your browser data). If you ask us to delete your account, we delete it and its content within 30 days.
• Shared games: switching a link off stops it working straight away, but we keep the stored copy (so the link stays in your list) until you delete your account. Links created without an account are kept until you ask us to delete them. Copies that other teachers saved from your link belong to their accounts.
• AI drafts: we don’t keep your original materials, and a draft is kept only if you save it. The basic record of each request is kept while your account is active.
• Billing records are kept for as long as tax and accounting law requires, usually 10 years.
• Analytics are kept for up to 24 months. After that, we delete them or keep them only in anonymous, aggregated form.
• Messages are kept for as long as we need to help you, and then for up to 2 years in case you get back in touch.

Security records, such as limits on repeated sign-in attempts, contain only scrambled identifiers, never your IP address.

9Your rights

Wherever you live, you can ask us to:

• give you access to the personal data we hold about you, and a copy of it;
• correct it;
• delete it, including your whole account;
• send it to you in a portable format;
• stop or restrict certain uses of it;
• stop analytics, by withdrawing your consent at any time (this doesn’t affect the lawfulness of what we did before).

Some of this you can do yourself in the classroom: delete lessons, switch shared links off, change your analytics choice and sign out. For anything else, email us at hello@playkablam.com. We may ask you to confirm the request from the email address linked to your account. We reply within one month.

EU and UK. You also have the right to complain to a data protection authority, in particular where you live or work. In Italy, this is the Garante per la protezione dei dati personali; in the United Kingdom, the Information Commissioner’s Office (ICO). We would appreciate the chance to put things right first.

United States. Depending on your state (for example California, Colorado, Connecticut or Virginia), you may have the right to know, access, correct and delete your personal information, and to opt out of its sale, of its sharing or of targeted advertising. We don’t sell personal information, we don’t share it for advertising based on your activity on other websites, and we will never treat you differently for using your rights. Someone else can make a request for you; if so, we may ask for proof that they are allowed to.

10Security

We protect data with encrypted connections (HTTPS), secure cookies that scripts on the page cannot read, one-way hashing of sign-in codes and session keys, strict limits on repeated attempts, and access restricted to the people who need it. No online service can be completely secure: if a breach affects your data, we will tell you and the authorities as the law requires.

11Changes to this policy

If we change this policy, we update the date at the top. If the changes are significant, we let signed-in teachers know in the app or by email before they take effect.

12Contact

For questions, requests or concerns about privacy, write to hello@playkablam.com. Please don’t include pupils’ personal data in your message.

You can also read our Terms of Service.