Security & privacy
How Edunizer protects your data.
Your teaching content is encrypted before it leaves your device, and only you hold the key.
Evaluating Edunizer for your school? Information for schools →
Encryption
All content is encrypted right in your browser with AES-256 before it reaches our servers. The secret key belongs to you alone and never leaves your device.
Our servers hold only encrypted text (zero-knowledge). Even we can't read your content.
Important: if you lose your password and also your recovery key or passkey, even we can't restore your data. That is exactly why you receive a recovery key during setup.
What is encrypted, and what isn't?
End-to-end encrypted
- Student names, birth dates, and contact details
- Grades and assessments
- Notes, task and event titles
- Teaching materials and lesson plans
- Uploaded files including thumbnails
Not encrypted (metadata)
- Dates and timestamps
- Technical structure (counts and identifiers of entries)
- Individual organizational fields, e.g. class labels in links
Why any metadata at all? Your calendar has to sort events without decrypting them. Metadata keeps the app functional without revealing your content.
Hosting & infrastructure
Database, file storage, and server functions run in a data centre in Frankfurt, Germany. A data processing agreement with the hosting provider is in place, based on the EU standard contractual clauses. Application data is not stored in the US.
Account security
- Two-factor sign-in: authenticator app, passkeys, or email codes
- Automatic lock on inactivity. The key is removed from the device in the process.
- Account deletion and full data export built into settings
What leaves your device?
The following features send data to external services:
- Image import / OCR (optional, consent required): The photographed document, such as a timetable or a class list, is sent to Google Gemini for text recognition.
- Feedback form: Your message is readable by us, since otherwise we couldn't help.
Nothing else. No analytics, no ad networks, no tracking.
Frequently asked questions
What happens if I forget my password?
With your recovery key or a passkey you reset the password without losing data. If both are missing, nobody can restore your data, including us.
What can Edunizer staff see?
Encrypted data and metadata: your email address, timestamps, and the structure of your account. No names, no grades, no notes, no files.
How safe are backups?
Backups are downloaded locally to your device and can be encrypted with a passphrase, which we recommend. Without a passphrase the file is readable; treat it accordingly.
Is Edunizer GDPR-compliant?
Application data is hosted exclusively in the EU, agreements are in place with our processors, and deletion and data export are built in. For use at schools we provide a dedicated information package.
Does Edunizer sell data?
No. Edunizer is funded by subscriptions. Your content is encrypted and unreadable to us.
The legal details are in the privacy policy. (Privacy policy)