DATA PROTECTION

Privacy Policy

Effective Date: April 4, 2026

Viafocus AB — Göteborg, Sweden


1. Overview

Viafocus provides Focuspilot, a classroom management tool delivered as a Chrome browser extension and web dashboard. This privacy policy explains what data Focuspilot collects, how it is used, who can access it, and what rights you have.

Focuspilot is designed exclusively for educational use. It is deployed by schools onto managed student devices through Google Admin Console. Students do not install the extension themselves.

2. Data We Collect

Focuspilot collects the following data from student devices during active school sessions:

  • Browsing activity — URLs, page titles, and favicons of visited websites

  • Screenshots — periodic screen captures visible only to the assigned teacher

  • Media detection — whether audio or video is playing (not the content itself)

  • System information — device type, OS, screen resolution for compatibility

  • Connection status — online/offline state and idle detection

  • Device identity — on managed Chromebooks, device serial and enrollment info

Focuspilot does not collect passwords, form inputs, file contents, keystrokes, or any data from personal accounts. Monitoring is limited to browser tab activity.

3. How We Use Data

All collected data serves a single purpose: helping teachers manage classroom focus and student safety during school hours.

  • Teachers see real-time browsing activity to identify off-task behavior

  • Screenshots help teachers monitor student work without walking to each device

  • Website blocking enforces school-appropriate browsing during lessons

  • Activity data helps teachers understand class engagement patterns

We never use student data for advertising, profiling, marketing, or any purpose unrelated to classroom management.

4. Who Has Access to Student Data
  • Teachers — see real-time activity and screenshots for their assigned classes only

  • School administrators — can configure policies and view aggregate data

  • Viafocus engineering — limited access for technical support and system maintenance only

  • No third parties — we do not sell, share, or provide student data to any external party

5. Data Storage and Security
  • All data is transmitted over encrypted connections (TLS 1.3)

  • Data is stored on servers within the European Union

  • Screenshots are stored in encrypted cloud storage with access controls

  • Authentication uses industry-standard OAuth 2.0 via WorkOS

  • Infrastructure is hosted on managed cloud services with SOC 2 compliance

6. Data Retention and Deletion
  • Real-time browsing data is ephemeral — it exists only during active sessions

  • Screenshots are retained for the duration configured by the school (default: 24 hours)

  • Activity logs are retained for up to 90 days, then automatically deleted

  • Schools can request immediate deletion of all student data at any time

  • When a student is removed from a class, their associated data is deleted

7. Your Rights

Under GDPR and applicable data protection laws, students, parents, and schools have the following rights:

  • Right to access — request a copy of collected data

  • Right to deletion — request removal of all stored data

  • Right to rectification — correct inaccurate data

  • Right to restriction — limit how data is processed

  • Right to data portability — receive data in a standard format

  • Right to object — object to specific data processing activities

To exercise these rights, contact your school administrator or email us directly at privacy@viafocus.com.

8. Children's Privacy

Focuspilot is used in schools with students of all ages. We take extra care with data from younger students.

  • The school acts as the authorized agent for consent under COPPA (US) and GDPR (EU)

  • We collect only the minimum data necessary for classroom management

  • No student profiles are built for purposes outside the classroom

  • Parents can request data access or deletion through their school

9. Chrome Extension Permissions

The Focuspilot Chrome extension requests specific browser permissions to function. Here is why each category is needed:

  • Tabs and browsing — to monitor which websites students visit during class

  • Screenshots — to capture periodic screen images for teacher review

  • Website blocking — to enforce school browsing policies during lessons

  • Notifications — to display messages from teachers to students

  • Storage — to save local configuration and session state

  • System info — to identify device capabilities for optimal performance

  • Identity — to authenticate the student with the school account

The extension is deployed and managed by school IT administrators through Google Admin Console. Individual students cannot install or remove it on managed devices.

10. Chrome Web Store Limited Use Disclosure

Focuspilot's use of information received from Chrome browser APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements:

  • We only use data for the single stated purpose of classroom management

  • We do not transfer data to third parties unless necessary to provide the service, comply with law, or as part of a merger/acquisition — and only with user-level encryption

  • We do not use data for serving advertisements

  • We do not allow humans to read user data unless with explicit consent, for security, compliance, or to provide the service — and only in aggregated, anonymized form where possible

11. FERPA and COPPA Compliance

For schools in the United States, Focuspilot is designed to comply with federal student privacy laws:

  • FERPA — Focuspilot acts as a "school official" under FERPA. We access student data solely to provide the contracted educational service. We do not use student data for any purpose other than providing classroom management to the school.

  • COPPA — For students under 13, the school provides consent on behalf of parents as permitted under COPPA. We collect no more data than is reasonably necessary for the educational purpose.

  • We are willing to sign a Data Processing Agreement (DPA) with any school or district upon request.

  • Schools may request a FERPA compliance addendum to their service agreement.

12. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. Schools will be notified of material changes via email. The effective date at the top of this page will be updated accordingly.

13. Contact Us

If you have questions about this privacy policy or how Focuspilot handles student data, please contact us:

  • Email: privacy@viafocus.com

  • Company: Viafocus AB, Göteborg, Sweden

  • For school-specific inquiries, contact your school administrator first


© 2025-2026 Viafocus AB. All rights reserved.