School timetabling · Hosted service
Timastra Schedule Online: Privacy
Updated
Read or download the October 4, 2026 legal documents. The dated archive preserves this release; your order or acceptance record identifies the documents that apply to you.
Scope
Schedule Online is an optional, paid service for schools that use the Timastra Schedule desktop app. It publishes the school's timetable and daily cover to private web pages for staff, students and parents, and lets teachers report absences. Timastra LLC provides it. The Schedule desktop privacy information covers the app itself, which keeps working offline.
Who controls your data
The school is the controller of the timetable data it publishes; Timastra LLC processes it on the school's instructions. Timastra is responsible for the billing and support information it needs to run the service. See the data processing agreement and sub-processor list.
Information the service handles
- The school's name, billing email and subscription status
- The latest timetable the school synced: periods, sections, teacher and room names, subjects, lessons, cover arrangements for the next two weeks and school closures
- Private access links for each teacher and section, stored as one-way hashes and encrypted copies
- Absence reports teachers submit: dates, optional periods, reason and whether the school accepted them
- Request logs, including IP addresses, used to secure the service and limit abuse
Staff and students have no accounts, passwords or email addresses in the service. Each person or section gets a private link that the school hands out and can replace at any time.
When data is sent
The desktop app sends data only after the school connects it with its connection key, and only when the timetabler presses Sync now. Each sync replaces the previous timetable. There is no background sync, telemetry or update check.
Providers and location
The service runs on Timastra's servers in Singapore (netcup), behind Cloudflare, with encrypted daily backups in Cloudflare R2. Paddle is the current production merchant of record. If an eligible checkout names Creem or Dodo Payments instead, that provider processes the billing contact, payment and subscription information under its own privacy notice; school timetables and absence reports are not sent to the payment provider. See payment providers and privacy notices. Service pages load no third-party scripts, except that the signed-in admin page may load Paddle's script for subscription management.
Retention and deletion
Each sync replaces the previous timetable. After the subscription ends, published pages stay readable for 30 days and then show that the school's online timetable has ended. That access grace period does not itself erase the stored data. At the end of the processing service the school can choose return or deletion under the data processing agreement. Timastra must then delete the data and existing copies unless applicable law requires retention. The published policies do not currently specify a maximum disposal period covering every live, backup and operator copy. The deletion response identifies affected copies, documented retention grounds and expected disposal. A school needing a fixed deadline must obtain a documented schedule before uploading personal data.
Your requests
Teachers, students and parents should first contact their school, which controls the timetable. Schools can email support@timastra.com for access, correction or deletion.