Privacy Policy

1. Data Controller

The data controller responsible for this platform is:
Sven Oliver Zbinden, Chutzenstrasse 62, 3007 Bern, Switzerland
Email: contact@modulink.ch

2. Nature of the Service

Modulink is a non-commercial proof of concept (PoC). It is operated solely for testing and evaluation purposes. No data is sold, shared with third parties for marketing, or used for commercial purposes.

3. Data We Collect

When you use Modulink, the following data may be collected:

• Account data: Email address, name, school name, and school ID you provide during registration
• Module data: Information about your study modules, grades, and resources you create
• WebUntis credentials: School login credentials you optionally provide, stored in encrypted form
• Social data: Friend connections and shared module information
• Technical data: IP address, browser type, and access times (collected automatically by our hosting provider)

4. Purpose of Data Processing

Your data is processed for the following purposes:

• Providing the Modulink service and its features
• User authentication and account management
• Importing timetable data from WebUntis (if you choose to connect)
• Enabling social features (friend connections, shared modules)
• Improving and testing the platform during the PoC phase

5. Data Storage and Security

Data is stored on servers operated by our hosting provider (Vercel Inc.) and database provider (Supabase Inc.), which may process data in the EU and/or the United States. We use industry-standard security measures including encryption of sensitive data (such as WebUntis passwords), row-level security policies on our database, and secure authentication with hashed passwords.

6. Third-Party Services

Modulink uses the following third-party services:

• Supabase: Authentication and database hosting
• Vercel: Website hosting and analytics
• WebUntis: Timetable data import (only if you choose to connect your account)

7. Cookies

Modulink uses essential cookies required for authentication and session management. These are strictly necessary for the service to function. We do not use advertising or tracking cookies. Vercel Analytics may collect anonymized usage data; no personally identifiable information is tracked.

8. Your Rights

Under Swiss data protection law (nDSG), you have the following rights:

• Right of access: You can request information about the data we hold about you
• Right to rectification: You can request correction of inaccurate data
• Right to erasure: You can request deletion of your personal data
• Right to data portability: You can request a copy of your data in a structured format

To exercise any of these rights, please contact us at contact@modulink.ch.

9. Data Retention

As this is a proof of concept, data may be deleted at any time without notice when the testing phase concludes. You may request deletion of your account and associated data at any time by contacting us.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.