Data Processing Addendum for Schools

Yaylo is provided by TechBridge Software Co., Ltd., 8/41 Slingkanpattana Rd., Pak Nam, Muaeng Krabi, Krabi 81000, Thailand. For data-protection questions, contact us at support@yaylo.life.

For sponsored families, the parent remains the controller of their child's personal data within the Yaylo app. The school acts as a sponsor and receives only aggregate, anonymized engagement information — never individual child data. Yaylo processes data on behalf of parents and, where applicable, provides aggregate reporting to the school.

• Aggregate engagement (e.g. number of active families, lessons completed).
• License and seat usage for the school's plan.
• Optional roster metadata that the school itself provides (class labels, grades).
• Never per-child names, activity, messages, or performance data.

We use a small number of vetted service providers to host the application, send transactional emails, and process payments. A current list is available on request via Contact.

• Data is encrypted in transit and at rest by our infrastructure providers.
• Access to production data is restricted to authorized Yaylo personnel.
• Data is retained only as long as needed to provide the service; parents can request deletion at any time.
• Incidents are handled through our documented response process; see Trust & Security.

To request a signed DPA, standard contractual clauses, or a security review pack, contact our schools team with your organization's details.