Privacy policy
How Amana Board processes personal data, in line with the EU General Data Protection Regulation (GDPR).
1. Data controller
Scaled Academy GmbH, Taunusanlage 8, 60329 Frankfurt am Main, Germany. Managing Director: Jiaming Song. Email: info@scaledacademy.net.
2. What we process
Amana Board is an internal workspace used by partner organizations to manage their sponsorship programmes. The data we process on their behalf includes: account data (email, hashed password, organization membership, role); operational data the organization enters about the children and sponsors it supports (identity, family, education, photos, finance entries, tags, assignees, comments); and technical data needed to deliver the service (session cookies, server-side request logs).
3. Purposes and legal basis
Account and authentication data is processed to fulfil the contract with the partner organization (Art. 6 (1)(b) GDPR). Operational data is processed on behalf of the partner organization as a processor (Art. 28 GDPR); the organization is the controller for that data. Technical logs are processed on the basis of our legitimate interest in operating a secure service (Art. 6 (1)(f) GDPR).
4. Retention
Account data is retained for as long as the account exists and is deleted on request. Operational data is retained until the controlling organization deletes it or terminates the contract. Server logs are kept for at most 30 days, then deleted.
5. Processors
We use Supabase (Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992 / Supabase EU regions for data storage) as a hosting and database processor under Art. 28 GDPR. Data is stored on EU-based infrastructure where available.
6. International transfers
Where personal data is transferred outside the EU/EEA, the transfer is covered by the EU Standard Contractual Clauses and additional safeguards as appropriate.
7. Your rights
Under the GDPR you have the right to access, rectify, delete or restrict the processing of your personal data, to object to processing, and to data portability. To exercise these rights, contact us at info@scaledacademy.net. You also have the right to lodge a complaint with a supervisory authority.
8. Cookies
Amana Board only sets cookies that are strictly necessary for authentication and for remembering the active organization. We do not set tracking or advertising cookies.
9. Security
Data is protected at the database layer by row-level security policies, in transit by TLS, and at rest by the storage provider's encryption. Photos are stored in private buckets with signed-URL access.
10. Changes to this policy
We may update this policy when functionality changes. The most recent version is always available at this page.
11. Contact
Questions about this policy? Write to info@scaledacademy.net.