Privacy Policy

Last updated: June 2026

1. Overview

Kelasio is a classroom management assistant for teachers and students. Kelasio is used through the Bale messenger bot to help teachers manage classes, create online class sessions, and share class-related links with students.

This Privacy Policy explains how Kelasio collects, uses, stores, protects, shares, and deletes user information, including information received from Google APIs when a teacher chooses to use the optional Google Meet integration.

2. Information Kelasio May Collect

Kelasio may collect information that is necessary to provide classroom management features, such as teacher account information, class information, student enrollment information, class session records, assignment-related information, and messages or actions submitted by users inside the Kelasio bot.

When a teacher chooses to connect a Google account for Google Meet, Kelasio uses Google's official OAuth authorization flow. Google authorization is optional and is used only for the Google Meet integration.

3. Google User Data Accessed by Kelasio

Kelasio requests the Google Meet API scope needed to create Google Meet meeting spaces:

• https://www.googleapis.com/auth/meetings.space.created

This scope allows Kelasio to create, edit, and see information about Google Meet conferences created by the app.

When a teacher grants permission, Kelasio may access, collect, or process only the following Google-related data:

• The teacher's Google OAuth authorization result.
• The access token issued by Google.
• The refresh token issued by Google, if Google provides one.
• Basic Google account information needed to identify the connected teacher account, such as the Google account email address, when available through the OAuth flow or token response.
• The Google Meet meeting space created by Kelasio through the Google Meet API.
• The generated Google Meet meeting link, such as a meet.google.com URL.
• Metadata returned by Google for meeting spaces created by Kelasio, only as needed to provide the Google Meet link creation feature.

4. Google User Data Kelasio Does Not Access

Kelasio does not request access to Gmail, Google Drive, Google Contacts, or Google Calendar scopes for this Google Meet feature.

Kelasio does not access, collect, read, store, or process:

• Gmail messages or attachments.
• Google Calendar events, calendar lists, or calendar availability.
• Google Drive files or folders.
• Google Contacts.
• Google Meet recordings.
• Google Meet transcripts.
• Google Chat messages or other Google user messages.

5. How Kelasio Uses Google User Data

Kelasio uses Google user data only for the following purposes:

• To authenticate the teacher with Google OAuth after the teacher chooses Google Meet inside the Kelasio bot.
• To create a Google Meet meeting space when the authenticated teacher explicitly requests a Google Meet session.
• To return the generated Google Meet link to the teacher inside the Kelasio bot.
• To allow the same teacher to create future Google Meet links without reconnecting the Google account each time, when a refresh token is available and the teacher has not revoked access.
• To store the generated meeting link as part of the class session record so the teacher can access or share it with enrolled students.

Kelasio does not use Google user data for advertising, behavioral profiling, unrelated analytics, credit decisions, or any unrelated purpose.

Kelasio does not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.

6. Data Storage and Protection

Kelasio stores Google OAuth tokens only when needed to provide the optional Google Meet link creation feature.

Refresh tokens are encrypted before storage and are associated with the authenticated teacher account. Access tokens are used by the application backend to call the Google Meet API and create meeting spaces requested by the same authenticated teacher.

Access to stored OAuth tokens is restricted to authorized backend services and is not exposed to students or other users of the bot.

Kelasio uses reasonable technical and organizational safeguards designed to protect stored user data against unauthorized access, disclosure, alteration, or destruction. These safeguards may include encrypted token storage, restricted backend access, secure transport where applicable, and operational access controls.

7. Data Sharing

Kelasio does not sell, rent, or share Google user data with advertisers, data brokers, or unrelated third parties.

The generated Google Meet link is returned to the teacher inside the Kelasio bot. If the teacher chooses to send the link to students, Kelasio may share that meeting link with the students enrolled in the relevant class through the bot.

Kelasio may share information only when necessary to provide the service, comply with applicable law, protect the security of the service, or respond to a valid legal request.

8. Data Retention and Deletion

Google OAuth tokens are retained only as long as needed to provide the Google Meet integration, unless a longer retention period is required for security, legal, or operational reasons.

Generated Google Meet links may be retained as part of class session records so teachers can access previously created online class sessions.

A teacher may revoke Kelasio's Google access at any time from the teacher's Google Account permissions page. After access is revoked, Kelasio will no longer be able to create Google Meet links for that teacher unless the teacher reconnects Google again.

A teacher may also request deletion of Google integration data, including stored OAuth tokens, by contacting Kelasio support using the contact information in this policy. After receiving a valid deletion request, Kelasio will delete or disable the related Google OAuth tokens unless retention is required for security, legal, or operational reasons.

9. User Control and Revocation

Teachers are in control of whether they connect a Google account. The Google Meet integration is optional and is initiated only when a teacher chooses Google Meet inside the Kelasio bot.

Teachers can revoke access from their Google Account at any time by visiting Google's third-party access settings and removing Kelasio from the list of connected apps.

10. Google API Limited Use Disclosure

Kelasio's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

11. Children's Privacy

Kelasio is intended for classroom management by teachers and educational users. Teachers and institutions are responsible for using Kelasio in accordance with applicable educational, privacy, and child protection laws and for ensuring they have the necessary permissions to manage student information.

12. Changes to This Privacy Policy

Kelasio may update this Privacy Policy from time to time. When changes are made, the updated version will be published on this page with a revised “Last updated” date.

13. Contact

For privacy questions, Google integration questions, access revocation, or data deletion requests, contact:

Email: ebrahim.saber1376@gmail.com