Privacy policy
Last updated: 10 November 2026
Cartable is an app for shadow teachers and learning support assistants (“you”) to plan their sessions with children, track absences and prepare invoices. This policy explains what data we process and how. We keep it short and we only collect what the app needs.
Who is responsible
Cartable is published by HSN Information Technology Consultants, United Arab Emirates (“we”). For any question about your data, write to [email protected].
Data we collect
Your Google account. When you sign in with Google, we receive your name, your email address and a Google account identifier. We do not receive your password, and we have no access to your emails, contacts or files.
What you enter in the app.
- Your billing details: legal name, address, licence number, TRN, IBAN and payment terms, as you choose to fill them in.
- The children you follow: first name, and optionally last name, school, grade, dates, colour and notes.
- The payers (usually parents): name, and optionally address, email and TRN.
- Timetables, sessions, absences, invoices and payments.
Technical data. A session cookie keeps you signed in (30 days), and a temporary cookie protects the sign-in (10 minutes). Your browser stores a few preferences (language, tips already seen). Our servers and our network provider record technical logs (IP address, date, page requested) to keep the service secure. We also record usage events in our own database (for example “child added”, “invoice issued”, “PDF shared”), linked to your account and without the content of your data, to understand how Cartable is used and improve it. We use no advertising or tracking cookies, and no third-party analytics tools.
About children’s data
Children do not use Cartable: their information is entered by you, as a professional, to organise your work. Please only enter what you need to plan sessions and invoice them. Do not write diagnoses or health information in the notes. You are responsible for informing the parents that you use Cartable to manage your sessions and invoices.
Why we use your data
- To provide the service: show your week, generate your sessions, prepare and archive your invoices, and share them with the people you choose.
- To keep the service secure and working, and to answer your messages.
- To understand overall use (number of accounts, children and invoices), only in aggregated form.
We process your data to perform the service you asked for and for our legitimate interest in keeping it secure. We never sell your data and never use it for advertising.
Parent links
You can create a private link for a payer. Anyone who has this link can see that payer’s upcoming sessions and invoices, and report an absence; the time of the report is recorded. The link contains no personal information, can be reset or turned off by you at any time, and pages behind it are not indexed by search engines.
Where your data is stored and who helps us
- Amazon Web Services hosts the app and the database in Frankfurt, Germany (European Union).
- Cloudflare carries and protects traffic between your device and our servers.
- Google provides the sign-in and the fonts used by the app.
These providers only act on our instructions. Your data may therefore be processed outside the United Arab Emirates, with appropriate safeguards. Connections between your browser and Cartable are encrypted (HTTPS), and your data is only visible from your own account.
How long we keep it
We keep your data while your account is active. If you ask us to delete your account, we delete your data within 30 days, and backup copies are erased within 30 days after that. UAE tax rules may require you to keep your invoices for several years: download them before asking for deletion. Children you archive stay in your account until you delete them.
Your rights
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where it applies, the European GDPR, you can ask to access, correct, delete or receive a copy of your data, and object to or restrict its use. Most information can be corrected directly in the app. For anything else, write to [email protected]: we answer within 30 days. Parents and other people whose data is entered in Cartable can contact us too. You can also complain to the competent data protection authority.
Changes
If this policy changes in an important way, we will tell you in the app before the change applies. The date at the top shows the latest version.