EFFECTIVE DATE: October 6th 2026
In this Privacy Policy (“Policy”), we describe how Einstein Studios (“Einstein Studios”) collects, uses, and discloses information that we obtain about visitors to our website teachwithkoala.com (the “Site”) and the services available through our Site and Koala App (collectively, the “Services”).
By visiting the Site, or using any of our Services, you agree that your personal information will be handled as described in this Policy. Your use of our Site or Services, and any dispute over privacy, is subject to this Policy and our Terms of Service including its applicable limitations on damages and the resolution of disputes. Einstein Studios Terms of Service are incorporated by reference into this Policy.
We collect information about you directly from you and from third parties, and automatically through your use of our Site or Services.
Information We Collect Directly From You. The information we collect from you depends on how you use our Services.
Information We Collect Automatically. We automatically collect information about your use of our Site and Apps through cookies, web beacons, and other technologies, including technologies designed for mobile apps. To the extent permitted by applicable law, we combine this information with other information we collect about you, including your personal information. Please see the section “Cookies and Other Tracking Mechanisms” below for more information.
Site:
App:
We use your information, including your personal information, for the following purposes:
The uses described in this section that relate to marketing, advertising, or products and services of affiliated or other entities do not apply to information we receive from your Google Calendar or Microsoft Outlook Calendar, which is used only as described in the “Calendar Integrations” section below.
We may share your information, including personal information, as follows:
We also disclose information in the following circumstances:
Information we receive from your Google Calendar or Microsoft Outlook Calendar is shared only as described in the “Calendar Integrations” section below.
We and our service providers use cookies and other tracking mechanisms to track information about your use of our Site or Services. We may combine this information with other personal information we collect from you (and our third party service providers may do so on our behalf).
Cookies. Cookies are alphanumeric identifiers that we transfer to your device’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Site and Services, while others are used to enable a faster log-in process or to allow us to track your activities at our Site and Service. There are two types of cookies: session and persistent cookies.
Disabling Cookies. Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. The Help portion of the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Visitors to our Site and Services who disable cookies will be able to browse certain areas of the Site, but some features may not function.
Third Party Analytics. We use automated devices and applications, such as Google Analytics, to evaluate usage of our Site, and to the extent permitted, our Apps. We also may use other analytic means to evaluate our Site and Apps. We use these tools to help us improve our Site’s and Apps’ performance and user experiences. These entities may use cookies and other tracking technologies, such as web beacons or local storage objects (LSOs), to perform their services. To learn more about Google’s privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy/. You can also download the Google Analytics Opt-out Browser Add-on to prevent their data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.
Do-Not-Track. Currently, our systems do not recognize browser “do-not-track” requests. You may, however, disable certain tracking as discussed in this section (e.g., by disabling cookies); you also may opt-out of targeted advertising by following the instructions in the Third Party Ad Network section.
We use third parties such as network advertisers to serve advertisements on our Site, App, and on third-party websites or other media (e.g., social networking platforms). This enables us and these third parties to target advertisements to you for products and services in which you might be interested. Third-party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons (including clear GIFs), Flash LSOs and other tracking technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third party's specific privacy policy, not this one. We may provide these third-party advertisers with information, including personal information, about you. We do not provide information received from your Google Calendar or Microsoft Outlook Calendar to advertisers, ad networks, or any other third party for advertising purposes.
Users in the United States may opt out of many third-party ad networks. For example, you may go to the Digital Advertising Alliance ("DAA") Consumer Choice Page for information about opting out of interest-based advertising and their choices regarding having information used by DAA companies. You may also go to the Network Advertising Initiative ("NAI") Consumer Opt-Out Page for information about opting out of interest-based advertising and their choices regarding having information used by NAI members.
Opting out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page will opt you out from those companies' delivery of interest-based content or ads to you, but it does not mean you will no longer receive any advertising through our Site, Services, or on other websites. You may continue to receive advertisements, for example, based on the particular website that you are viewing (i.e., contextually based ads). Also, if your browsers are configured to reject cookies when you opt out on the DAA or NAI websites, your opt out may not be effective. Additional information is available on the DAA's website at www.aboutads.info or the NAI's website at www.networkadvertising.org.
Our Site and Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Policy, but instead is governed by the privacy policies of those third party websites. We are not responsible for the information practices of such third party websites.
We have implemented reasonable precautions to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. We also require that our teachers with whom student personal information is shared in order to deliver the educational service, if any, are obligated to implement these same commitments for the given student personal information. Please be aware that despite our best efforts, no data security measures can guarantee security.
You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.
If you are a teacher or parent using Koala’s scheduling features, you may choose to keep an external calendar in sync with lessons booked through Koala. This is optional. Koala offers three ways to do this, and they handle your information differently.
A. Google Calendar (connected account). You may connect your Google account. If you do, we request the following permissions through Google’s OAuth consent screen:
calendar.events.owned). Koala uses this permission only on your primary calendar and only to (i) create, update, and delete calendar events for lessons scheduled, rescheduled, or cancelled through Koala, and (ii) read the start and end times and titles of your existing calendar events, so that those times are shown as unavailable when someone books a lesson with you and the titles are shown to you on your own Koala availability calendar.openid, email). We use this only to display which Google account is connected and to recognise the same account if you reconnect.When you disconnect Google through Koala, we revoke our access with Google and delete the stored tokens. You can also remove Koala’s access at https://myaccount.google.com/permissions.
B. Microsoft Outlook Calendar (connected account). You may connect a Microsoft account (work, school, or personal). If you do, we request the following permissions through Microsoft’s consent screen:
Calendars.ReadWrite). Although this permission covers all calendars on your account, Koala uses it only on your default calendar and only to (i) create, update, and delete events for lessons scheduled, rescheduled, or cancelled through Koala, and (ii) read the start and end times and titles of your existing events, so that those times are shown as unavailable when someone books a lesson with you and the titles are shown to you on your own Koala availability calendar.openid, email, profile, offline_access). We use these only to display which Microsoft account is connected, to recognise the same account if you reconnect, and to keep the sync working without asking you to sign in again.When you disconnect Microsoft through Koala, we delete the stored tokens. Microsoft does not allow us to revoke access on your behalf, so to fully remove Koala’s permission you should also remove it at https://myaccount.microsoft.com under “App permissions” (or, for work or school accounts, at https://myapps.microsoft.com).
C. Calendar subscription link (Apple Calendar, Outlook, and other apps). Instead of connecting an account, you may subscribe your calendar app to a private Koala calendar link. In this case Koala does not receive any information from your calendar. Instead, your calendar app (and the service behind it, such as Apple or Microsoft) periodically downloads a list of your upcoming Koala lessons from us, including each lesson’s start and end time, the name of the student or students, and the link to join the lesson. Your subscription link is unique to you and is not guessable, but anyone who has the link can view this information, so treat it as you would a password and do not share it. If you believe your link has been exposed, contact us using the details in the “Contact Us” section below.
What we store for connected accounts (A and B). We store the OAuth tokens issued to us, encrypted at rest; the email address of the connected account; and the identifiers of the calendar events Koala itself created, so we can update or remove them later. We do not store the titles, descriptions, attendees, or other contents of events that were already on your calendar. When checking your availability we read only the start and end time, title, and busy/free status of your existing events. Titles are shown only to you; anyone booking a lesson with you sees only that the time is unavailable. We do not keep any of this information after the availability check is complete. Calendar events that Koala previously created remain on your calendar after you disconnect unless you delete them.
How we use information from connected calendars. We use information received from your Google Calendar or Microsoft Outlook Calendar solely to provide and improve the calendar-sync feature described above. We do not use it for advertising or marketing, we do not sell it, and we do not transfer it to third parties except as necessary to operate the feature (for example, our hosting and database providers, who are bound by confidentiality obligations), to comply with applicable law, or as part of a merger, acquisition, or sale of assets, in which case this Policy continues to apply to that information. Our staff do not read your calendar data except with your explicit permission (for example, to resolve a support request you have raised), for security purposes such as investigating abuse, or to comply with applicable law.
Limited Use disclosure (Google). Koala’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy#additional_requirements_for_specific_api_scopes), including the Limited Use requirements.
Deletion. You can disconnect a connected account at any time from your Koala profile page. You may also request deletion of all data associated with your connected calendar accounts by contacting us using the details in the “Contact Us” section below.
You may modify personal information that you have submitted by logging into your account and updating your profile information. Please note that copies of information that you have updated, modified or deleted may remain viewable in cached and archived pages of the Site for a period of time.
We may send periodic promotional emails to you. You may opt-out of promotional emails by following the opt-out instructions contained in the email. Please note that it may take up to 10 business days for us to process opt-out requests. If you opt-out of receiving promotional emails, we may still send you emails about your account or any services you have requested or received from us.
Because our Services enable the collection of personal information from your children—who may be under the age of 13—we are required under federal law to make certain disclosures regarding our data collection practices. This includes a list of which entities may collect your children’s personal information; a description of the personal information collected and how it is used; and a description of your rights as parents.
If you have questions about the privacy aspects of our Services or would like to make a complaint, please contact us using our contact form. xavier@teachwithkoala.com
This Policy is current as of the Effective Date set forth above. We may change this Policy from time to time, so please be sure to check back periodically. We will post any changes to this Policy on our Site and Application. If we make any changes to this Policy that materially affect our practices with regard to the personal information we have previously collected from you, we will endeavor to provide you with notice in advance of such change by highlighting the change on our Site and Application.