Privacy Policy
Keyi Timetabling ("Keyi", provided by Aiyi) takes the security of your and your school's data seriously. This policy explains what we collect, how we use and protect it, and your rights.
Version 2026-10 · Effective 2026-10-15
1. What we collect
- Account details: name, email, phone, staff number, school name, and your password (stored only as a salted hash).
- School timetabling data: teachers, classes, courses, rooms, students (names, IDs, choices), timetables, changes, exams and after-school arrangements entered or imported by the school.
- Usage records: sign-in times, activity and error logs, IP addresses — for security and troubleshooting.
- Payments are handled by Alipay; we keep only order numbers, amounts and status.
2. Student and teacher data
- Student and teacher data entered by a school belongs to the school. The school is the controller; Keyi processes it on the school's instructions solely to provide the service.
- Schools are responsible for having the necessary authorisation or notice for the data they enter, including for minors.
3. How we use information
- To provide timetabling, publishing, term operations, exams and after-school features; to keep accounts secure and send verification and notification emails; and to improve the product using aggregated, non-identifying statistics.
- We never sell personal information or use school data for anything unrelated to the service.
4. Processors and third parties
- Cloud hosting (in mainland China), email delivery and Alipay process the data needed on our behalf under contract.
- When you use the AI assistant, relevant timetabling information is sent to the model provider to generate answers; nothing is sent if you don't use AI features.
- If the school enables integrations or change notifications, data is sent to the systems or group bots the school configures.
5. Storage and retention
- Data is stored on servers in mainland China. Deleted data is removed from the live system at once and from backups within 30 days. After account closure we delete or anonymise school data within 30 days unless the law requires otherwise.
6. Security
- HTTPS, salted password hashes, tenant isolation, brute-force protection, audit logs, regular backups and restore drills. We will notify affected schools of any security incident and report as required.
7. Your rights
- You can view, correct and export data (Excel) and delete plans in the product. For account closure, full deletion or other requests, contact us via in-app Feedback or the contact details on our website; we respond within 15 working days.
8. Changes
- We update this page with the version and effective date; material changes are announced in the product.