Privacy

Who is responsible

The school (the school owner) that uses neddi is the data controller for information about students, parents and staff. Neddi AS is the data processor and processes the information only as agreed with the school, in a data processing agreement.

If you have questions about how your school uses neddi, contact the school. You can also write to us.

What information we process

Name, email address, role (teacher, student, parent), school and class. What the school adds: themes, tasks and resources. What students hand in: answers and files. Messages between teachers, students and parents.

For security we log sign-ins (the time and whether they succeeded), so we can stop attempts to guess passwords. The logs contain no names or text from students.

Where the information is stored

The information is stored in the EU and EEA: the database with Neon in Frankfurt (Germany), files with Cloudflare R2 in the EU, and background jobs run with Fly.io in Stockholm (Sweden). The web pages run on Vercel, with the server functions in Stockholm.

Artificial intelligence (AI)

Some features for teachers use AI from Anthropic, for example suggested theme descriptions and tasks at several levels. We remove names and other identifiers before anything is sent, and we never send free text from students.

Nothing made with AI is shown to students or parents before a teacher has approved it. The AI features are only turned on for a school by agreement with the school.

Other suppliers

We use Resend to send email (sign-in links and notifications) and Sentry for error reports. The error reports contain no names, email addresses or text from students.

Cookies

neddi only uses the cookies needed for signing in to work. We use no tracking, analytics or advertising.

Your rights

You have the right to see the information about you, and to have it corrected or deleted. Contact your school, which is responsible; we help the school answer. How long the information is kept is agreed with the school in the data processing agreement.

If you think your information is processed in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet).