PictoSuitePrivacy policy
PictoSuite is a free personal project by Rafa Robles Fontanet, a primary school teacher. There are no ads, no data is sold to anyone, and no profiling is done on the people who use it.
This page explains plainly what is stored, where, for how long, and how to delete it.
Who is responsible
Rafa Robles Fontanet, responsible for the PictoSuite service. For anything related to data: pictosuite@gmail.com.
PictoSuite decides how the service works and answers for it. The teacher decides what data they type into it.
It can be used without giving any data
Without signing in you can make cards, bingos, timetables and everything else, and print them. That material stays in the device's browser (local storage), not on the server.
An account is only needed to save material in the cloud, create classes and see pupils' results.
What is stored about the teacher
With a Google account: the email address, name and profile picture provided by Google, and the chosen language. They identify the teacher and let them recover their material from any computer.
What they create: cards, bingos, edited library topics, and their classes with their pupils.
What is stored about pupils
Pupils never register. They are not asked for an email address, a password, their age or any other detail: they get in with the six-character code their teacher gives them.
The only things stored are what the teacher typed (the class name and each pupil's name) and what the pupil does with that code: the sheet's answers, the games played and, if the sheet is editable, the sheet as it stands (it saves itself while they work so the teacher can see it, and each pupil has only one, which keeps being overwritten). If the sheet is not linked to a class, nothing they do is stored.
In the classroom tools (Class jobs, Draw, Random teams and Take attendance), if the teacher uses them with one of their classes, their account stores who has held each job, who came up in a draw or a team and, in Take attendance, whether each pupil was present, absent (excused or not) or late each day. Only the pupil's identifier is stored, never the photo, and only the teacher can see it. If the class or the pupil is deleted, all of it is deleted with them.
- Recommendation: a first name or initials is enough. The app says so when pupils are added.
- The teacher is the one typing those names, and the one who must have their school's cover to do so.
Photos in the Schedule and in classes (pupils and teaching staff)
In the Schedule, the teacher can add a pupil's photo so the tablet shows whose schedule it is, and a teacher's photo, which appears on the activities they lead. In “Les meves classes” the teacher can also add a photo of each pupil in the class, shown in the classroom tools (Class jobs, Draw and Random teams). It is optional: the name is enough. The staff names are stored in the teacher's account, like the rest of the material; the photos are not.
Those photos never leave the device. It is reduced to a small square, and the whole photo, made smaller, is kept with it so the teacher can adjust it again; everything is stored in the browser storage of that computer or tablet; it is not uploaded to the server, it does not go into the account, no other person or device can see it, and it never goes through artificial intelligence.
- So, on another tablet or computer, the pupil appears without a photo (and staff with their initials) until the teacher adds one.
- To delete it: "Remove the photo" in the same window, delete the pupil or the staff member, or clear the browser data.
- If other people use the device, it is best to remove the photo when finished.
- The teacher is the one who must have their school's and the families' cover to use photos of pupils.
Photos and audio from Gimcana challenges
In Gimcana, the teacher can set a challenge that the team answers by taking a photo or recording their voice on the tablet they are playing with. It is optional: the teacher decides whether to set one, and there are challenges with no photo or audio.
These photos and recordings never leave the device: they are saved in the browser storage of that tablet; they are not uploaded to the server, do not go into the account, are not seen by any other device and never pass through artificial intelligence.
When the game ends they are shown on the same tablet so the teacher can review them. They are deleted when the teacher says so, when leaving the finished game or when starting another one. Otherwise, they are deleted after 24 hours, the next time a gimcana is opened on that tablet.
The teacher is the one who must have their school's and the families' cover to use photos and the voices of pupils.
Pupil photos and other images
The photos in the Schedule, those of the pupils in “Les meves classes” and those from Gimcana challenges are the only exception (see above): they stay on the device only. Any other image the teacher uploads (on a card, a worksheet, a Communicator sheet…), including a pupil's photo, is saved like the rest of their material: in their account if they are signed in.
Photos of pupils are data about minors. The teacher decides whether to upload them and is responsible for them, and must have the cover of their school and of the families to do so. If in doubt, it is better not to upload them: the name is enough.
PictoSuite does nothing with those images: it does not look at them, does not share them with anyone and does not use them for anything other than showing them to the teacher who added them and, where relevant, to the pupils of their class.
Where the data lives
On Supabase, with servers in Ireland (European Union), and on Vercel, which serves the website.
What leaves the app, and what does not
To work, some things go through third-party services. These:
- Google, if you sign in with the Google button.
- Google's artificial intelligence (Gemini): the words and phrases being translated, the lists requested, and the PDF uploaded in "AI list", if any.
- Google's text-to-speech: the text that is read out loud.
- The browser's speech recognition (Google in Chrome and Edge, Apple in Safari), when the microphone is used in "Say it" or in the Translator's dictation: what is said at that moment. PictoSuite does not keep any audio.
- ARASAAC and OpenSymbols: when a pictogram is requested, their server receives the request.
- Vercel: anonymous, aggregated visit statistics, without cookies, which identify nobody and are discarded after 24 hours.
What never goes through artificial intelligence
Pupils' names and their results are never sent to any artificial intelligence service. Only words and phrases from the material go through it.
Cookies
There are no advertising or tracking cookies, which is why the app does not ask for permission to set them. Only one technical cookie is used, to remember the chosen language, plus the browser's own storage to keep your material and already-downloaded pictograms, which never leaves the device.
How long it is kept
Material and classes are kept for as long as the account exists. The teacher can delete a sheet, a class, a pupil or the results whenever they want, and that really deletes them.
Codes created without an account are deleted after 3 months without being used.
Rights of the people involved
Anyone can ask to access their data, correct it, delete it, take it with them or object to it being processed. Just write to pictosuite@gmail.com.
If the answer is not satisfactory, a complaint can be filed with the Spanish Data Protection Agency (aepd.es) or, in Catalonia, the Catalan Data Protection Authority (apdcat.gencat.cat).
Changes
If anything written here changes, this page and the date below will be updated.
Questions
Write to pictosuite@gmail.com and I will reply.