← Back to LessonOS
Privacy Policy for LessonOS
Last Updated: September 24, 2026
1. Introduction
This Privacy Policy explains what information the LessonOS mobile application for Android and iOS (the "App") handles, where it goes, and the choices you have. The App is provided by Chumphon Jan Toolseram ("we", "our", or "us"). It forms part of our Terms of Use.
In short:
- Everything you enter (students, classes, attendance, leave requests, credit packages) is stored only on your device. There is no LessonOS account and we do not run any servers, so we cannot see this data.
- The App uses Google's Firebase services for usage analytics and crash reports. These collect technical and usage information about the App and your device, not the records you enter.
- Backups are optional and go to your own Google Drive (Android) or iCloud (iOS).
- Purchases are handled by Google Play or the Apple App Store. We never receive your payment details.
2. Data you enter in the App
Organizations, branches, coaches, students (including any contact details you type in), classes, enrollments, check-ins and attendance, leave requests, credit packages and credit purchases are stored in a local database on your device (SQLite on Android; Apple's SwiftData on iOS, stored on the device only).
- This data is not sent to us or to Firebase. We have no server that could receive it.
- No login or account is needed to use the App.
- It leaves your device only if you choose to back it up, export it, or if your device's own backup system copies it (see sections 5 and 6).
If you record information about other people, such as students or their parents, you are responsible for having the right to do so under the privacy laws that apply to you.
3. Analytics and crash reporting (Firebase)
The App includes the following Google Firebase software development kits (SDKs), which start automatically when the App opens:
| Service | Android | iOS | Purpose |
| Google Analytics for Firebase | Yes | Yes | Understand how many people use the App, which versions and devices they use, and how the App is used overall |
| Firebase Crashlytics | Yes | Yes | Find and fix crashes |
| Firebase Cloud Messaging | No | Included | Push messaging library. The App does not ask for notification permission and does not send you notifications. |
What these services collect
- Usage events collected automatically by the Analytics SDK, such as first open, app sessions, screen views, engagement time, app updates and, where supported, in-app purchase events (product, price and currency, but no payment details). The App does not log any custom analytics events of its own.
- Device and app information, such as device model, operating system version, language setting, app version and country or region.
- Identifiers: a Firebase installation ID and an Analytics app instance ID, which are random IDs created for this installation of the App. On Android, the Android advertising ID (see below). On iOS, Google Analytics may also use the identifier for vendor (IDFV).
- Approximate location (such as country, region or city) that Google derives from your IP address. The App does not access your device's location (GPS) and does not request location permission.
- Crash reports (Crashlytics): the stack trace and state of the App at the time of a crash, device model, operating system and app version, and a Crashlytics installation ID.
We do not send your name, email address, or any student, class or attendance records to Firebase, and we do not use Firebase data to identify you personally.
Advertising identifiers
- Android: the App declares the advertising ID permission, so Google Analytics for Firebase can read your device's advertising ID. The App shows no ads. You can reset or delete your advertising ID at any time in your device settings (for example Settings → Privacy → Ads, or Settings → Google → Ads, depending on your device). If you delete it, Analytics no longer receives it.
- iOS: the App does not ask for App Tracking Transparency permission, so iOS does not give the App your advertising identifier (IDFA) and it is not collected. The App does not track you across other companies' apps or websites.
Google as our service provider
Google LLC provides Firebase and processes this information on our behalf, under the Firebase terms and data processing terms. Google may process this data in the United States and other countries. To learn more, see:
We use this information only to understand and improve the App and to fix problems. We do not sell it and we do not use it for advertising.
4. Purchases
LessonOS Pro is sold as an auto-renewing subscription (monthly or yearly) or a one-time lifetime purchase. Payments are processed entirely by Google Play (Android) or the Apple App Store (iOS).
- We never receive or store your card number, billing address or other payment details.
- The App asks the store which products you own and whether a subscription or free trial is active, so it can unlock Pro. The App keeps the last known plan on your device so Pro works offline. We do not run a server to verify purchases.
- Google's and Apple's handling of your purchase is governed by their own privacy policies: Google Privacy Policy, Apple Privacy Policy.
5. Optional backup and restore (Pro)
Android: Google Drive
If you choose to use backup on Android, you sign in with your Google account and the App asks for access to the Google Drive application data folder (drive.appdata scope) only. This is a hidden folder in your own Google Drive that only LessonOS can access. The App cannot see any of your other Drive files.
- What is uploaded: a compressed backup file containing your App data (the records listed in section 2), plus basic details used to show and restore backups: the organization name, student count, backup date, app version, device model and Android version.
- How it is used: to create backups, list them, restore one you choose, and automatically delete the oldest backups so that no more than 5 are kept.
- Your Google account email is used only to connect to Drive and to show which account is connected. It is kept in the App's memory while the App is running and is not saved by the App or sent to us.
- Data travels directly between your device and Google's servers over encrypted connections. It never passes through any server of ours.
- Temporary files created during a backup or restore are stored in the App's cache and deleted when the operation finishes.
The App's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not share Google user data with third parties, and we do not use it for advertising, analytics or to train AI or machine-learning models.
You can sign out in the App's Settings, or revoke access at any time at Google Account Permissions. Revoking access does not delete backups already stored in your Drive. You can delete them in Google Drive on the web under Settings → Manage apps → LessonOS → Options → Delete hidden app data.
iOS: iCloud
On iOS, backups are saved as files in LessonOS's own container in your iCloud Drive, under your Apple ID. They are stored by Apple under Apple's terms and privacy policy. We have no access to your iCloud account or these files. You can delete backups from the App's backup list, or manage them in your device's iCloud settings. The App does not sync your data through iCloud or CloudKit outside of the backups you create.
6. Device backups and exports
- Android Auto Backup: the App allows Android's standard backup system. If backup is turned on for your device, Android may back up the App's data, including its database and settings, to your Google account, and restore it when you set up a new device. This is handled by Google under Google's terms, not by us. You can turn it off in your device's backup settings.
- iOS device backups: like most apps, the App's data may be included in your iCloud Backup or computer backup, depending on your device settings. This is handled by Apple.
- CSV export and import: exported files are created on your device and handed to the app or location you choose through the system share sheet or file picker. Imported files are read on your device. We do not receive either.
7. Who we share data with
We do not sell or rent personal information, and we do not share it for advertising. Information reaches third parties only as described above:
- Google: Firebase Analytics and Crashlytics (both platforms), Google Play purchases, and Google Drive backups and Android Auto Backup if you use them.
- Apple: App Store purchases, and iCloud backups if you use them.
We may disclose information if required by law.
8. Data retention
- Data in the App stays on your device until you delete it, use Reset All Data in Settings, or uninstall the App.
- Google Drive backups stay in your Drive until you delete them. The App keeps at most 5 and deletes older ones automatically. iCloud backups stay until you delete them.
- Analytics data is kept by Google according to the data retention setting of our Google Analytics property. User-level data is kept for no more than 14 months; aggregated reports may be kept longer.
- Crash reports are kept by Crashlytics for 90 days.
9. Security
Your data is protected by your device's built-in security. Communication with Google and Apple services uses encrypted connections. Because we do not run servers or keep a copy of your data, there is no LessonOS database to be breached. No method of storage or transmission is completely secure, so please protect your device with a passcode and keep backups.
10. Children
The App is a business tool for trainers, coaches and studios. It is not directed to children under 13, and we do not knowingly collect personal information from children. Records about students, who may be minors, are entered by the business using the App and stay on its device (and in any backups it chooses to make); we do not receive them. If you believe a child has provided us with personal information, contact us and we will delete it.
11. Your choices and rights
- Access and export your data in the App at any time, including as CSV files.
- Delete your data with Reset All Data in Settings, or by uninstalling the App.
- Advertising ID (Android): reset or delete it in your device settings.
- Backups: stop using them, revoke Google Drive access, or delete backup files as described in section 5.
- Analytics and crash reports: the App currently has no setting to turn these off. Uninstalling the App stops all collection.
- Depending on where you live (for example under the GDPR in the EU/UK or state privacy laws in the US), you may have rights to access, correct, delete or object to the processing of your personal information. Because Firebase data is linked only to random installation IDs and not to your name or email, we may be unable to find data belonging to a specific person, but contact us and we will help as far as we can.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example when the App changes. We will post the new version on this page and update the "Last Updated" date.
13. Contact us
Terms of Use · lessonos.app