Safe with your money, open with your books
A class fund runs on trust between families. We built ClassFund.Club so that trust doesn't rest on anyone's word: what can happen is limited by design, and what did happen is written down.
We can never move your money
The bank connection is read-only. The chair grants it at the bank, and can withdraw it at any moment. There is nothing in ClassFund.Club that can start a payment — so no mistake, and no break-in, can move the class's money.
The money stays in the class's own account the whole time. The only payment we ever take is the price of a plan, paid by card on the checkout of Paddle, our reseller. The card number stays with Paddle; we never see it.
Everyone sees only what's theirs
Who can see what is decided by each person's role in the class, and checked on our server for every single request. Changing an address in the browser gets nobody into another family's figures.
- A parent sees their own children — nothing about anyone else's.
- A teacher records expenses and never sees a family's balance or payment — of the bank, only the card payments of an account the chair links to them.
- The chair sees the whole books, because somebody has to keep them.
- In the charts, other families are numbered, never named.
Every change leaves a trace
Each class keeps its own audit trail: who signed in and how, which invitations and reports went out, what each bank update and import brought in, and every expense, split and balance change — who made it, and when. The chairs can open it at any time.
Every email the app sends is archived too, filed by class. And a class can't disappear quietly: before anything is deleted, its chairs are emailed an audit report with the figures and the full ledger.
The audit trail is kept for 18 months after each event and then deleted automatically, or sooner, together with the class.
Open books for every family
Transparency is the point of a shared fund. Every family can open the receipts attached to an expense, see every payment and cost on their own child's balance, and see in the charts where the class's money went. The monthly report puts it all in one email.
Your data stays in the EU
The app, its database and its backups all run inside the European Union. Backups are encrypted and kept apart from the running system.
- No passwords stored — you sign in with Google or Microsoft.
- No card numbers stored — plans are paid on Paddle's checkout.
- No advertising, no profiles, and nobody's data is sold or shared for marketing.
- Visits are counted with Google Analytics only if you say yes.
Who is responsible for what
The parents' community decides what goes into its class — which children, which parents, which bank account — so for the class's records it is the data controller, and we process them on its behalf. For your own account and for billing, we are the controller.
You can ask us for a copy of your data, to correct it, to delete it, to restrict how it is used, or to have it in a portable form. And if you think we've got something wrong, you can complain to the data protection authority where you live — in Hungary, that's the NAIH.
The full documents
This page is a friendly summary. These are the documents that apply, and where every point above comes from.