GENERAL   |   FOR TEACHERS

Talk to us

GIVE LAPTOPS
DONATE

Teacher Digital Toolkit (TDT)
 Privacy Policy

Effective Date: March 01, 2022
Last Updated: September 13, 2026

1. Introduction

The Teacher Digital Toolkit (“TDT”) is an online educational service provided through a website and mobile applications for Android and iOS. TDT gives teachers access to courses, educational videos, lesson plans, assessments, surveys, and certificates.

This Privacy Policy explains how TDT collects, uses, stores, and shares personal data when you use the TDT website or mobile applications.

This Privacy Policy applies specifically to TDT. It does not apply to other Thaki websites, applications, donation services, or programmes unless they expressly refer to this Policy.

2. Who Is Responsible for Your Data?

The data controller responsible for TDT is:

Thaki Nederland
James Wattstraat 100-8
1097 DM Amsterdam
The Netherlands

Dutch Chamber of Commerce registration number: 65713834
RSIN: 8562.29.490

Privacy contact: info@thaki.org
For questions about this Privacy Policy or to exercise your privacy rights, contact us using the email address above.

3. Age Eligibility

TDT accounts are intended only for teachers and other users who are at least 18 years old.

TDT is not intended for children, and we do not knowingly allow anyone under 18 to create an account. If you believe that a person under 18 has provided personal data through TDT, contact us at info@thaki.org.

4. Features Available Without an Account

You may access certain TDT features without creating an account, including:

  • Filtering courses, videos, and lesson plans by category or resource type;
  • Watching publicly available standalone videos; and
  • Browsing the courses and Lesson plans.

Even when you use TDT without an account, limited technical and analytics information may be processed as described in this Policy.

An account is required to access courses, complete assessments, access surveys, and request certificates.

5. Personal Data We Collect

5.1 Account information

When you register for TDT, we collect:

  • Email address; and
  • Password.

Your password is processed using salted cryptographic hashing. We do not store it in readable form.

We use your email address to create and manage your account, authenticate you, communicate about your account, and send password-reset messages.

5.2 Optional profile information

You may choose to provide:

  • Date of birth;
  • Gender;
  • Country; and
  • First and last name.

Your date of birth, gender, and country are optional. We use this information to understand the teacher audience, personalize the service where applicable, and prepare aggregated program reports for donors or partners.

We do not provide donors or partners with directly identifying profile information unless we inform you separately and have an appropriate legal basis.

Your first and last name are required only if you request a certificate bearing your name.

5.3 Assessments and course progress

Assessment answers and results are processed temporarily to determine whether you passed an assessment and qualify for a certificate.

TDT does not retain:

  • Assessment answers;
  • Assessment scores;
  • Pass or fail records;
  • Assessment attempt dates; or
  • Records tracking your course attendance or progress.

5.4 Certificates

If you pass an assessment and request a certificate, we process your first and last name to generate a personalized PDF certificate.

The certificate is associated with your authenticated account and is not made publicly searchable or publicly listed. Only the logged-in account holder may access it through TDT.

5.5 Surveys

TDT may provide authenticated users with links to surveys hosted through Google Forms.

Thaki configures these surveys not to request names, email addresses, or other directly identifying information. Survey responses are treated as anonymous by Thaki.

Google may independently process technical information when you access Google Forms, such as your IP address, device or browser information, cookies, and information connected to your Google account, depending on your Google settings. Google’s processing is governed by the Google Privacy Policy.

Do not include your name, email address, or other identifying information in an open-text survey response unless the survey clearly asks you to do so and explains why.

5.6 Analytics and technical information

With your consent, we use Google Analytics 4 on the TDT website and Firebase Analytics in the Android and iOS applications.

Depending on the service and configuration, analytics information may include:

  • Pages or application screens viewed;
  • Session information;
  • Interactions with TDT;
  • Browser, device, operating-system, and application-version information;
  • Approximate geographic information;
  • Referring pages;
  • A website client identifier; and
  • A mobile app-instance identifier.

TDT does not intentionally send your password or assessment answers to Google Analytics or Firebase Analytics.

We use analytics information to understand how TDT is used, identify technical or usability problems, evaluate content, and improve the service.

5.7 YouTube videos

TDT uses YouTube embedded players to display educational videos.

On the website, YouTube content is loaded only after you choose to activate the video or consent to the relevant non-essential technologies. We use YouTube’s privacy-enhanced embedding option where technically available.

When a YouTube player is loaded or used, Google and YouTube may receive technical information such as your IP address, browser or device information, referring page, cookies or similar identifiers, and information about your interaction with the video.

If you are signed in to Google or YouTube, your viewing activity may be associated with your Google account according to your Google account settings and Google’s Privacy Policy.

5.8 Hosting, security, and email information

TDT’s backend, database, PDF files, and email service are hosted through SiteGround using a European data center.

When you connect to TDT or communicate with us, the hosting and email infrastructure may process technical information necessary to deliver and secure the service, such as IP addresses, request times, requested resources, browser information, and email-delivery metadata.

6. Mobile Application Permissions

The Android application uses the following permissions:

  • Internet: Required to register, log in, reset passwords, load online content, stream videos, complete assessments, access surveys, and download PDF lesson plans.
  • Foreground service: Used while performing visible operations such as video playback or file downloads. Android may display a notification while such an operation is active.

The application does not request Android permissions to read images, videos, audio, or general files stored on your device. Media and legacy external-storage permissions introduced by dependencies are explicitly removed from the Android application configuration.

Downloaded PDF files are stored using the operating system’s permitted download mechanism.

If application permissions or features change, we will update this Policy and the relevant app-store disclosures.

7. Why We Process Personal Data and Our Legal Bases

We process personal data for the following purposes and legal bases:

Providing the TDT service

We process your email address, authentication information, and necessary account information to create and manage your account and provide requested account-based features.

Legal basis: Performance of a contract or taking steps at your request before entering into a contract.

Certificates

We process your name and temporary assessment result to determine eligibility and generate a certificate at your request.

Legal basis: Performance of the service requested by you.

Optional profile information

We process optional date of birth, gender, and country information to understand the TDT audience, personalize the service, and support aggregated program reporting.

Legal basis: Your consent.

You may withdraw this consent by removing the optional information from your profile or contacting us.

Analytics

We process analytics information to measure usage and improve TDT.

Legal basis: Your consent where required by applicable law.

You may refuse analytics without losing access to TDT’s essential functions. You may also withdraw your consent through the website’s cookie settings or the application’s privacy settings.

Security and service integrity

We may process limited technical information to secure accounts, prevent misuse, diagnose failures, and maintain the reliability of TDT.

Legal basis: Our legitimate interests in operating and protecting TDT, provided those interests do not override your rights and freedoms.

Legal requirements

We may process or disclose information where necessary to comply with applicable law, respond to lawful requests, establish or defend legal claims, or protect users and the service.

Legal basis: Compliance with a legal obligation or our legitimate interests, depending on the circumstances.

8. Cookies and Similar Technologies

The TDT website may use:

  • Strictly necessary cookies required for security, authentication, and basic operation;
  • Google Analytics cookies, subject to your consent; and
  • YouTube cookies or similar technologies when you activate an embedded video.

Strictly necessary cookies do not require consent where applicable law permits their use.

Google Analytics and YouTube content remain disabled until you provide the required consent. Rejecting analytics or YouTube-related technologies does not prevent access to the rest of the TDT website, although videos may not play until you choose to activate them.

You can change or withdraw your choices at any time through the Cookie Settings link on the website.

The mobile applications request your consent before enabling Firebase Analytics. You can later disable analytics through Settings → Privacy → Analytics.

9. Service Providers and Data Sharing

We do not sell or rent your personal data.

We may share or make data available to the following service providers where necessary:

  • SiteGround: Website, backend, database, PDF, and email hosting;
  • Google Analytics 4: Website analytics;
  • Firebase Analytics: Mobile application analytics;
  • YouTube: Embedded educational videos; and
  • Google Forms: Anonymous surveys.

These providers process information under their own terms, contractual arrangements, or privacy policies, depending on their role.

Personal data may also be accessed by authorized Thaki personnel who need it to operate, maintain, support, or secure TDT.

We may disclose information when required by law, a court order, or another valid legal process, or when reasonably necessary to protect TDT, Thaki, our users, or others.

For information about Google’s practices, see:

For information about SiteGround’s practices, see:

10. International Data Transfers

TDT’s backend and database are hosted in a SiteGround European data centre.

Some third-party providers, particularly Google services, may process information in countries outside the European Economic Area, including countries whose data-protection laws may differ from those in your country.

Where required, Thaki relies on recognized transfer mechanisms such as an adequacy decision, Standard Contractual Clauses, or another legally permitted safeguard.

You may contact us for additional information about the safeguards applicable to your personal data.

11. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy.

Our retention periods are:

  • Account and required profile information: While the account remains active. At present, Thaki has not established a fixed retention period for analytics information stored in the central database.
  • Certificate PDFs: until account deletion is requested.
  • Assessment answers and results: Processed temporarily and discarded after the assessment and certificate-generation process is completed.
  • Course attendance and progress: Not recorded.
  • Google Forms survey responses: Retained according to the relevant program’s documented reporting needs. Responses are anonymous and periodically reviewed for deletion or aggregation.
  • Analytics data: Retained for no longer than 14 months in Google Analytics and Firebase Analytics, unless it is aggregated or anonymized earlier.
  • Security and server logs: Retained for up to 12 months unless a longer period is necessary to investigate a security incident or comply with law.
  • Backups: Deleted or overwritten within 90 days after deletion from active systems, unless retention is required by law.

12. Account and Data Deletion

You may request deletion of your TDT account and associated personal data:

  • Through Account Settings → Delete Account in the mobile application or website; or
  • By emailing info@thaki.org from the email address associated with your account.

We may ask you to verify your identity before completing the request.

Following verification, we process valid deletion requests without undue delay and normally within 30 days. Information may remain in restricted backups for up to 90 days before being overwritten.

We may retain limited information where required by law or necessary to establish, exercise, or defend legal claims, prevent fraud, or document that a privacy request was completed. We will inform you if such an exception applies.

Deleting your TDT account does not automatically delete information held independently in your Google account. You can manage Google information through your Google privacy controls.

13. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

  • Request access to your personal data;
  • Correct inaccurate or incomplete data;
  • Request deletion of your data;
  • Restrict certain processing;
  • Object to processing based on legitimate interests;
  • Receive certain information in a portable format;
  • Withdraw consent at any time; and
  • Lodge a complaint with a data-protection authority.

Withdrawing consent does not affect processing lawfully performed before the withdrawal.

To exercise your rights, email info@thaki.org. We may request information reasonably necessary to confirm your identity.

Because Thaki Nederland is established in the Netherlands, you may lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
https://www.autoriteitpersoonsgegevens.nl/

You may also contact the competent data-protection authority in the country where you live or work.

14. Data Security

We use technical and organizational measures appropriate to the nature of the information processed. These measures include salted password hashing, authenticated access to account-specific certificates, restricted administrative access, and hosting in a European data center.

No internet transmission or storage system is completely secure. You are responsible for choosing a strong password, keeping it confidential, and notifying us if you suspect unauthorized access to your account.

15. External Links and Services

TDT may contain links to third-party websites and services, including YouTube and Google Forms.

Once you leave TDT or interact directly with a third-party service, that provider’s terms and privacy policy apply. Thaki is not responsible for the independent privacy practices of third-party websites or services.

16. Changes to This Privacy Policy

We may update this Privacy Policy when TDT’s features, service providers, legal requirements, or data practices change.

We will publish the revised Policy with a new “Last updated” date. If a change materially affects how we use personal data, we will provide additional notice where required.

17. Contact Us

For privacy questions, requests, objections, or account deletion, contact:

Thaki Nederland
James Wattstraat 100-8
1097 DM Amsterdam
The Netherlands

Email: info@thaki.org