Skip to content
Masterly Masterly UA

Privacy policy

Edition of 2 November 2026

Masterly is an electronic gradebook, timetable and learning platform for vocational education institutions. This policy explains what data the platform processes, why, where it is stored and who has access to it. The platform is operated by ФОП Сидоренко Сергій Юрійович (the "developer").

Roles

Each school works on its own address with a separate database. The school decides what data to enter and is the owner (controller) of that data. The developer processes it only on behalf of the school, to run the system and provide technical support. Each school's own policy is published on its Masterly site at /privacy.

What data is processed

  • Staff: full name, login, encrypted password, subjects, groups and position.
  • Students: full name, group, access codes for the student and parents, grades, attendance, homework and answers, tests; for state education systems also date of birth, sex, tax number and document data (stored encrypted).
  • Learning materials: lesson topics, files and links added by teachers.
  • Change log: who changed grades or data, when and from which address, plus sign-ins. It protects the gradebook from forgery.
  • Technical data: a session cookie to keep you signed in, and the chosen language and theme. Masterly does not use advertising or analytics cookies.

Why

Only to run the educational process of the school: gradebook, timetable, lessons, tests, reports and communication between students, parents and teachers. Data is not sold and is not used for advertising.

Google data

A teacher may choose to connect their Google account. In that case Masterly receives:

  • the account's email address (openid and email scopes), to show which account is connected;
  • the calendar.events permission, to create an event in the teacher's calendar with a Google Meet link for the time of the lesson and remove it when the lesson is cancelled;
  • the meetings.space.readonly permission, to show the teacher who from the group attended the Meet meeting and for how long (for attendance);
  • the drive.file permission, to work only with files the teacher personally picked in the Google picker: read a Google Form chosen as a test and its responses for grades, or add a Drive file to lesson materials. For such a file Masterly turns on view access by link, so students without a Google account can open it.

Masterly does not read emails, contacts, other Drive files or other calendar events. The Google access token is stored on the server in encrypted form and is used only for actions the teacher starts: creating a meeting, viewing an attendance report, picking a form or a file, or updating grades from a form. The meeting link and picked files are visible to the students of the group. Students and parents do not sign in to Google.

Masterly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is not sold, is not transferred to third parties, and is not used for advertising or for training artificial intelligence models.

You can disconnect Google in the teacher's portal with the "Disconnect" button or on the myaccount.google.com/permissions page. After disconnecting, the access token is deleted from the server.

AI features

A teacher or administrator may use AI assistance: turn a curriculum document into topics and hours, draft a test from a lesson topic and materials, or list skills from an occupational standard. For this the text of the chosen document or lesson is sent to Anthropic (Claude API). Student data is not sent. Anthropic does not use this data to train its models. The result is always checked by a person before it is saved.

Other services

  • Files of a school may be kept in a cloud file storage (Backblaze B2) in a separate folder of that school.
  • Encrypted backups may be copied to the same cloud storage. They cannot be read without the platform key.
  • Weather and air raid alert information is requested by city or region only, without any personal data.

Storage and protection

Servers are located in: Germany (European Union), hosting provider Contabo GmbH. Connections use HTTPS only; passwords, access keys and daily backups are encrypted; backups are checked by test restores. Only the platform administrator has access to the server. School administrators have no access to the server or database. Data is kept while the person studies or works at the school and then for the periods required by education law, or until the school stops using Masterly and asks to delete it.

Your rights

Under the Law of Ukraine "On Personal Data Protection" you may find out what data about you is stored, ask to correct or delete it, or withdraw consent where processing is based on consent. Please contact your school's administration first, since it owns the data. Questions about the platform itself can be sent to the developer.

Contact

Platform questions: sergeysydorenko26@gmail.com. Questions about grades, timetables and accounts are handled by the administration of your school.

Changes

The developer may update this policy. The new edition applies from its publication on this page.