Privacy Policy

Teacher Support Assistant — how the app processes, uses, and protects data.

This Privacy Policy reflects our commitment to transparency with users of the Teacher Support Assistant app. It explains how the app works, what data it processes, and how that data is used and protected.

About the app

The Teacher Support Assistant app adds an assistant function for users of the Teacher Support service (T+, bundle identifier com.ynafs.tplus). It uses Apple’s Shortcuts app to forward messages selected by the user.

The Teacher Support Assistant does not read or directly access the SMS inbox. The user creates an Automation in Shortcuts and chooses the conditions for messages they wish to forward, such as a particular sender or suitable text condition.

When the automation runs, Shortcuts passes the content of the matching message to an action belonging to our app through App Intent. The message is then processed and sent to the destination linked to the user’s account.

Sign-in: This app does not create a separate account. The user must have an active Teacher Support service account. Authentication uses the existing account credentials, and the app does not provide separate sign-up.

The main Teacher Support app does not have to be installed on the device for the Teacher Support Assistant to work, but an active service account is required.

Links to the main Teacher Support app:

Custom receiving URL (Webhook)

A custom receiving URL (Webhook) is created in advance within our systems for each user and linked to their account. The user does not need to create, copy, type, or manually enter this URL in the app or Shortcut.

The app uses account identity and authentication to determine the correct destination automatically. The custom receiving URL is used only to perform the message-forwarding function associated with the user’s account.

Data we process

Email address: Used to authenticate the account and manage the user session.
User ID: Used to link requests to the correct account and identify its custom receiving URL.
Device ID: A unique app or device identifier may be used for security, session management, and preventing unintended duplicate submissions.
Message content: We process messages the user chooses to forward through a Shortcuts automation. Some messages may include sensitive information such as one-time passwords (OTP) if the user chooses to forward a message containing one.
Crash logs: Not collected in the current version. If a crash-analysis service is added in the future, this policy and the relevant disclosures will be updated.

How we use data

Authenticate the user and maintain a secure session.
Connect the app to the user’s Teacher Support service account.
Automatically identify the custom receiving URL linked to the account.
Receive the text passed by the user through Shortcuts and perform the requested submission.
Send the message content to the destination linked to the account to perform the function enabled by the user.
Prevent unintended duplicate requests and improve service reliability and security.

Messages and one-time passwords (OTP)

The app does not search the message inbox or independently extract verification codes. A message is processed only when the user configures a Shortcuts automation to forward a message that matches the conditions they selected.

If a message the user chooses to forward contains an OTP or other sensitive information, that information may be included in the content sent to the destination linked to the account. Users should therefore avoid creating automations for messages they do not wish to share with the service.

We do not use message content or OTP codes for advertising, tracking, or user profiling.

User consent and control

Message forwarding is not enabled merely by installing the app. The user must sign in and then create or enable the appropriate automation in Shortcuts. The user can disable or delete the automation at any time in Shortcuts to stop forwarding messages.

Message content is not sold or used for advertising. When message forwarding is used, the data required to perform the operation is sent to the Madrasati platform as the final destination for the message content selected by the user.

If we use an external provider in the future to process or host data or analyze crashes, we will update this policy and the required disclosures before doing so whenever required.

Data retention and deletion

Message content is processed to perform the forwarding operation. The app does not keep a permanent copy of message content on the device after the operation is complete, and we do not use message content to create a permanent record for marketing or tracking.

We may retain the minimum account data or technical logs needed for security, service operation, and duplicate prevention for as long as those purposes require.

Users may request access to, correction of, or deletion of their data under applicable laws and policies by contacting support.

Security and encryption

Data is transmitted over encrypted HTTPS/TLS connections. We also use authentication and account-linking controls to identify the correct destination without exposing the custom receiving URL or requiring the user to enter it manually.

User rights

The right to know what data the app processes and why it is used.
The right to request access to personal data linked to the account.
The right to request correction of inaccurate information.
The right to request deletion under applicable laws and policies.
The right to stop message forwarding at any time by disabling the Shortcuts automation.

Contact information

If you have a question or request regarding this Privacy Policy, contact us through:

Support email: [email protected]
Support phone: 0557295233