MomentDeskSpace to teach.
English
Back to sign in

The details, in plain language

Privacy Policy

What MomentDesk uses, who receives it, and how to contact us about your data.

Effective October 7, 2026 · momentdesk-2026-10-07

Who is responsible

PRYADKO DANILA, empresa unipersonal, Uruguay, RUT 221025670013, is the operator of MomentDesk. Our address is Charrua 2063, apt. 101, Montevideo, Uruguay. For privacy requests, write to hello@momentdesk.com.

We are responsible for account administration, security, service communications and our own support records. A tutor decides what teaching records to enter and who may access them.

Learners and parents

MomentDesk is for tutors aged 18 or older and learners aged 14 or older. A tutor states each learner’s age group when adding them. A learner aged 14–17 can sign in only after a parent or legal guardian confirms consent in MomentDesk; we record who confirmed, when, and the version of these documents they accepted. We do not knowingly allow learners under 14. If we learn that a learner under 14 has been added, or that a learner aged 14–17 is using MomentDesk without that consent, we restrict access and address removal with the responsible tutor or guardian.

A parent or guardian sees only the information the tutor shares with them. They can withdraw consent at any time in their MomentDesk account, which stops the learner’s access, and may ask us for access to, correction or deletion of their child’s information using the contact above. The tutor’s own teaching records are handled as described under Retention. A learner whose age the tutor has not yet set cannot sign in.

Information and purposes

  • Account details: email, name when provided, role, language, time zone, password hash or external sign-in identifier, acceptance versions/times, a learner’s age group and, for learners aged 14–17, the guardian consent record. We use these to create and protect the account and apply your choices.
  • Workspace content: the schedules, learner records, messages, files, boards, homework and lesson-payment entries you choose to save. We use them to provide the selected features and share them with authorized participants.
  • Calls: our own media service on the hosting provider below routes live audio and video between authorized participants. MomentDesk saves call history, participant identifiers and connection/start/end times. Built-in calls do not create audio or video recordings.
  • Technical information: request times, connection and security information, device/browser details and error diagnostics needed to operate and protect the service.
  • Support: your correspondence and the information you choose to include. Please avoid sending passwords, payment-card details, identity documents or unnecessary learner content.
  • Pilot inquiries: when you submit the optional contact form, we use your name, reply email, teaching subject, time zone, message and recorded permission to review the inquiry and reply. Resend sends it to our existing business inbox through the providers described below. Its message reference confirms provider acceptance, not a reserved pilot place. We do not create an account, subscribe you to marketing or send your inquiry to other tutors. Please leave out learner names and private teaching records.

We use consent where required, process information needed to provide the service you request, and meet applicable legal and security obligations. Refusing information required for a particular feature may prevent that feature from working. Optional analytics is separate from account consent. We do not sell personal information or use lesson content for advertising.

Sign-in, email and other providers

Google or Apple sign-in is optional when the corresponding button is available. We receive an account identifier and basic profile/email information needed for sign-in. We do not request access to your mailbox, contacts or calendars. Apple may supply a private relay address. The provider also processes the sign-in under its own terms and privacy policy.

Resend delivers service emails, including account and invitation messages, when email is enabled. It processes recipient addresses, message contents and delivery records in the United States. Selecting a sending region does not change where Resend stores that information. Under its current free-plan policy, message contents and delivery logs are retained for 30 days. See Resend’s data-processing and retention information.

Namecheap forwards messages sent to our business addresses to the operator’s Google Gmail inbox. The operator handles that correspondence from Uruguay; the email providers may process it in other countries, including the United States. The Resend delivery-log period does not delete copies in Gmail or a recipient’s mailbox. Do not include sensitive teaching content in support email.

Telegram notifications are optional. Connecting the bot and confirming the connection in MomentDesk lets us save your Telegram chat identifier and display name and send the notification text you enable, which may include lesson, homework or lesson-payment information. Disconnect in Notification settings or send /stop to stop future notifications. Telegram processes these messages under its own Privacy Policy.

When you request human support, we send your support conversation code, role, current account section and up to eight recent support messages to our private MomentDesk operator group in Telegram; subsequent support messages are forwarded there while the operator handles the conversation. Operator replies appear in your MomentDesk account. You do not need a Telegram account to use this support route; email remains available. Account deletion or disconnection does not automatically delete messages already held in Telegram. Our internal product reports also use this private group and contain service totals rather than lesson or homework contents.

MomentDesk has its own application database and file storage, separate from UrokDesk, on a Namecheap VPS. According to Namecheap’s hosting-location information, its VPS service uses the US datacenter in Phoenix. Namecheap describes its hosting role as a processor under the Data Processing Addendum incorporated into its service terms. This does not mean that data stays in your country.

Before an update changes the database structure, we keep a copy of the database on the same hosting provider. Encrypted database and file recovery copies are also stored in our Google Drive recovery account, with the retention described below. We do not promise country-specific storage for this backup service. The encryption password is held separately from the files in Drive. Transfers to configured providers follow the terms applicable to each service.

Polar acts as Merchant of Record for paid subscriptions and processes checkout and payment details under its own terms. We receive the customer/subscription identifiers and current subscription status needed to apply access, not full card details. No card is collected during the cardless trial or on the Free plan; purchasing a paid subscription is a separate choice.

Optional analytics

When configured, PostHog US receives limited product-usage events only after you allow analytics in Privacy settings. These may include a pseudonymous browser identifier, page or action category, role and technical outcome. We do not intentionally send lesson or message content, board drawings, homework answers, email addresses, invitation tokens or payment details in these events. Session replay and automatic capture of page content are not enabled. Learner accounts never send optional analytics, whatever the browser setting.

Browser error reports follow the same optional choice. They contain an error category, application version and code-file coordinates; error messages and page content are omitted. Separately, configured API and background-task error reporting sends technical failure categories and application code coordinates to PostHog US to maintain the service. These server reports use a new random identifier for each error and do not include account identifiers, request contents, messages or local-variable values. This necessary server diagnostic processing does not depend on the browser’s analytics choice.

In our PostHog organization, we have disabled features that send data to third-party AI services and opted out of AI training on anonymized aggregated data.

Choose Necessary only, or change your choice later using Privacy settings. Withdrawing permission stops future optional events from that browser; it does not automatically erase events already received. Contact us if you also want to request deletion. Necessary service and security processing continues.

PostHog publishes a one-year event-retention period for its free plan, but automatic expiry depends on whether retention enforcement has reached the particular project. That setting has not yet been confirmed for our project, so we cannot promise an automatic deletion date for existing events. See PostHog’s retention policy. We do not link the analytics browser identifier to your email; locating particular events for a request may require information from the browser that sent them. We will explain what we can identify rather than claim that deleting an account automatically deletes analytics.

Sharing and access

Your content is available to the participants authorized for the relevant teaching relationship and feature. Treat public booking or shared links as disclosures to their intended recipients. We may access information to investigate an authorized support request, secure the service, enforce these terms or comply with applicable law. We disclose only information relevant to that purpose.

Retention and your choices

We keep encrypted recovery copies of the database and uploaded files in Google Drive. The backup schedule retains 14 daily snapshots plus the latest two recovery sets; these can overlap. Local working copies expire after two days. A deleted item may remain in an older recovery copy until that copy expires. Backups are restricted to service recovery; restoring one requires replaying applicable deletion requests. These copies are separate from service emails and processor logs.

Keep a copy of anything you need. Tutors can download the available spreadsheet or account archive from Settings; the archive is not a complete automatic restore. The export and import guide explains its scope.

  • Archiving a learner keeps their teaching history. It does not erase the learner’s personal information or shared records.
  • Deleting a file removes its stored contents and access through the service. A record of the file and the deletion remains; this can include its name, size and dates.
  • Homework solution files are scheduled for cleanup two calendar months after their most recent review, or their latest submission if never reviewed. The daily cleanup removes eligible file contents; homework text, comments, status and dates remain. This rule does not automatically remove other materials or the account.
  • Account, support and security records currently have no single automatic expiry period. Account closure is handled by the operator after a verified request; follow-up for provider, correspondence and recovery copies is described below.

You can request account deletion from your account settings. The confirmation screen explains which records will be removed or retained; after you confirm your identity and submit the request, account access ends and deletion runs in the background. Accounts with a Polar payment history require a separate review: contact us before closing the account so its billing state can be checked. You can also email us to request account closure or removal of content. Records controlled by another participant or subject to a lawful retention requirement may remain. Closing a guardian’s account withdraws the consent recorded by that account. We explain what was removed and what remains; we do not erase another tutor’s records merely because you close your account.

Provider records and support correspondence require separate follow-up. Removing an account from MomentDesk does not automatically remove records held by providers or erase older recovery copies. Recovery copies expire under the schedule above; applicable deletion requests must be replayed before a restored copy returns to service. A request, an archived learner or an export does not mean deletion has been completed.

You may request access, correction, export, deletion or withdrawal of consent by emailing the address above. We may need proportionate information to verify the request and protect other participants’ data. A tutor or guardian can raise a concern about a record; we verify their authority before disclosing it.

Uruguayan law provides a five-working-day response period for access, correction and suppression requests, including a reasoned response where a request cannot lawfully be granted. See the Uruguayan authority’s explanation of these rights.

You may also contact Uruguay’s Unidad Reguladora y de Control de Datos Personales or the competent authority where you live. Nothing in this notice limits rights granted by applicable law.

Changes

We will publish changes here and ask for renewed acceptance or a new choice when required.