carusulabs.com

Small, useful apps, made with care.

CarusuLabs is the team that designs, builds and maintains the apps below. Each app solves a concrete everyday problem, with respect for your privacy.

Apps → Contact

Apps

02 app

01 — School and family

BanchIO Genitore

Your child's class, in one place.

BanchIO Genitore is the app for families: receive class announcements, follow homework, pay class fees and take part in polls and events, without endless WhatsApp groups. You join the class with the representative's invite code.

Google Play ↗ App Store ↗

Privacy Cookies

Announcements Priority and read receipts

Homework By subject, with due dates

Fees Payment status and receipt upload

Polls and events Quick votes, shared calendar

02 — School and family

BanchIO Rappresentante di classe

Running the class, made easy.

BanchIO Rappresentante di classe is the app for whoever represents the class: create the class, invite families with a simple code and manage announcements, fee collection, polls and events from a single app.

Google Play ↗ App Store ↗

Privacy Cookies

Class and invites Class setup and invite code

Announcements Publish with read receipts

Fee collection Who paid, who hasn't, receipts

Polls and events Class decisions and calendar

BanchIO Rappresentante di classe, screenshot

Team

CarusuLabs develops and maintains every app over time: updates, support and data handling are managed by the same team that built them.

@gessetto Design and UI

@zainetto Mobile development

@campanella Backend and data

This policy describes how the BanchIO apps (Genitore and Rappresentante di classe, "the Service") collect, use and protect users' personal data, in accordance with Regulation (EU) 2016/679 ("GDPR") and applicable Italian data protection law.

1. Data controller

The data controller is Lucia Di Pietro, for CarusuLabs. For any request regarding the processing of personal data, write to info@carusulabs.com.

2. Data collected

The Service collects and processes the following categories of data:

Account data (parent or class representative): first name, last name, email address. Sign-in happens via an email access link ("magic link") or, if enabled, via social login (Google on Android, Sign in with Apple on iOS): in that case we receive a unique identifier and, if authorised by the user, the name and email associated with the Google/Apple account.
Children's data (children of the parent account): first name, last name, year of birth, school and class. This data is entered and managed by the parent or class representative, who guarantees its accuracy; the child does not hold the account.
User-generated content: class announcements, direct messages between parents and representative, polls and votes, calendar events, class fees/payments (including uploaded payment receipts), class notebook photos, questions to teachers.
Technical and security data: session tokens, IP address, server application logs, needed to keep the Service working and secure.

3. Purposes and legal basis

Providing the Service (class creation, announcements, fees, homework, polls, events): performance of the contract with the user (Art. 6.1.b GDPR).
Security and abuse prevention (logs, authentication): the controller's legitimate interest in a secure, working service (Art. 6.1.f GDPR).
Social login (Google/Apple): the user's consent, given by actively choosing this sign-in method instead of the email link (Art. 6.1.a GDPR). Social login is always optional.

4. Recipients

Data may be shared, only to the extent strictly necessary, with:

Cloud infrastructure and hosting providers that host the Service.
The email delivery provider, if configured, to deliver access links.
Google LLC and/or Apple Inc., limited to identity verification, only if the user chooses social login.

Data is not sold or used for advertising profiling.

5. Transfers outside the European Economic Area

If any of the providers listed in section 4 process data outside the European Economic Area, such transfers take place only with adequate safeguards under the GDPR (for example Standard Contractual Clauses approved by the European Commission).

6. Data retention

Data is kept for the lifetime of the account and in any case for as long as needed to provide the Service. On request, by writing to info@carusulabs.com, data can be deleted, unless the law requires longer retention.

7. Your rights

As a data subject, you have the right to:

access your personal data (Art. 15 GDPR);
have it corrected if inaccurate (Art. 16 GDPR);
have it erased, where applicable (Art. 17 GDPR);
restrict processing (Art. 18 GDPR);
receive your data in a structured, readable format (portability, Art. 20 GDPR);
object to processing based on legitimate interest (Art. 21 GDPR).

To exercise these rights, write to info@carusulabs.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Children's data

The Service is intended for adult users (parents and class representatives). Children's data is entered by the parent or class representative, who acts as holder of parental responsibility and guarantees that entering such data is accurate and lawful. A parent can request correction or deletion of their child's data at any time by writing to info@carusulabs.com.

9. Changes to this policy

This policy may be updated from time to time. Material changes will be communicated to users through the app or by email.