ClassWise Data Processing Agreement and Terms of Use

Between Young Engineers (Processor) and the Licensee (Controller) — ClassWise

Date: 18 June 2026

1. Parties and scope

This Data Processing Agreement (“DPA”) is entered into between E Square Young Engineers Franchising Ltd (“Processor”), 34034 West 8 Mile Road, Suite 102, Farmington Hills, MI 48335, USA, Identification Number 800757868, and the licensee identified in the licence agreement (“Controller”). It governs the Processor’s processing of personal data on the Controller’s behalf through the ClassWise service and forms part of the licence agreement between the parties.

The ClassWise software and brand are owned by YE Wise Learning Solutions (Reg. HE 476229, Danaon 4, Aradippou, Cyprus, 7100).

2. Roles

The Controller determines the purposes and means of processing the personal data of students and parents entered into ClassWise. The Processor processes that personal data only on the Controller’s documented instructions, including as set out in this DPA and the ClassWise service.

3. Subject-matter and details of processing

Set out the required processing details:

•Subject-matter: provision of the ClassWise class- and student-management service.

•Duration: for the term of the licence agreement and any agreed post-termination period.

•Nature and purpose: enrolling and managing students, recording attendance and notes, managing parent contacts and leads, and processing class payments.

•Types of data: student identity and details (including date of birth, age, gender, and free-text notes that may contain sensitive information); parent/guardian contact details; payment records; lead data.

•Categories of data subjects: children (students), their parents/guardians, and the Controller’s own staff users.

4. Processor obligations

The Processor shall:

•process personal data only on the Controller’s documented instructions, including for international transfers, unless required by law;

•ensure persons authorised to process the data are bound by confidentiality;

•implement appropriate technical and organisational security measures (see Schedule 2);

•respect the conditions for engaging sub-processors (Section 5);

•assist the Controller in responding to data-subject requests (Section 6);

•assist the Controller with security, breach notification, and any required impact assessments (Section 7);

•at the Controller’s choice, delete or return the personal data at the end of the services (Section 8); and

•make available information needed to demonstrate compliance and allow for audits (Section 9).

5. Sub-processors

The Controller authorises the Processor to engage the sub-processors listed in Schedule 1. The Processor shall impose data-protection obligations on each sub-processor equivalent to those in this DPA and shall remain liable for their performance. The Processor shall inform the Controller of intended changes to sub-processors and give the Controller the opportunity to object.

6. Data-subject requests

Taking into account the nature of the processing, the Processor shall assist the Controller by appropriate measures in fulfilling the Controller’s obligation to respond to requests by students or parents (or those acting for them) to exercise their rights, including access, correction, and deletion.

7. Security and personal-data breaches

The Processor shall implement the security measures in Schedule 2 and shall notify the Controller without undue delay after becoming aware of a personal-data breach affecting the Controller’s data, providing the information the Controller needs to meet its own notification obligations.

8. Return and deletion of data

On termination of the services, and at the Controller’s choice, the Processor shall delete or return all personal data and delete existing copies unless storage is required by law. The parties acknowledge that deletion must also address data held in backups.

9. Audit

The Processor shall make available to the Controller information reasonably necessary to demonstrate compliance with this DPA and shall allow for and contribute to audits, including inspections, conducted by the Controller or an auditor it mandates, subject to reasonable confidentiality and security conditions.

10. International transfers

Where the Processor transfers the Controller’s personal data to a country without an adequacy decision, it shall ensure an appropriate transfer mechanism (such as Standard Contractual Clauses) is in place.

11. Children’s data

The parties acknowledge that ClassWise processes the personal data of children. The Controller is responsible for obtaining any parental or guardian consent that is required under the laws of the place where the Controller operates before entering a child’s data into ClassWise. The Processor shall support the Controller’s compliance as set out in this DPA.

12. Governing law

This agreement is governed by the laws of Cyprus, and the courts of Larnaca, Cyprus have jurisdiction over any dispute. Where it forms part of the licence agreement, it follows the governing law and jurisdiction of that agreement.

13. Terms of Use of ClassWise

The following terms govern the Licensee’s use of the ClassWise software, in addition to the data-processing terms above. They apply together with the licence agreement between the Licensee and Young Engineers, which prevails if there is any conflict.

13.1 Use of the service

Young Engineers grants the Licensee a non-exclusive, non-transferable right to use ClassWise to operate its Young Engineers classes for the term of the licence agreement. The Licensee and its authorised users use ClassWise only for that purpose and in accordance with these terms.

13.2 Accounts and security

The Licensee is responsible for its user accounts, for keeping login credentials secure, for the acts of its users, and for ensuring only authorised staff access student and parent data through role-appropriate accounts.

13.3 Acceptable use

The Licensee and its users shall not: use ClassWise other than to deliver Young Engineers classes; enter unlawful content or another person’s data without authority; attempt to access, disrupt, or reverse-engineer the service beyond what the law allows; or interfere with the operation or security of the service.

13.4 Intellectual property

The ClassWise software and brand are owned by YE Wise Learning Solutions (Reg. HE 476229, Danaon 4, Aradippou, Cyprus, 7100). ClassWise, its content, and the Young Engineers brand are owned by Young Engineers or its licensors and are licensed to the Licensee only to deliver Young Engineers classes. These terms grant no ownership. Data entered by the Licensee remains subject to the data-processing terms above.

13.5 Availability and changes

Young Engineers aims to keep ClassWise available but does not guarantee uninterrupted access, and may update, change, or withdraw features. Material changes to these terms will be notified to the Licensee.

13.6 Disclaimers and liability

To the fullest extent permitted by law, ClassWise is provided “as is” and Young Engineers disclaims implied warranties. Nothing limits liability that cannot be limited by law. Any cap or allocation of liability is as set out in the licence agreement.

13.7 Suspension and termination

Young Engineers may suspend or end access for breach of these terms or to protect the service or its users. Access is tied to the Licensee’s relationship with Young Engineers; on termination, the return-and-deletion terms in Section 8 apply.

Schedule 1 — Approved sub-processors

AWS (hosting and storage); Zoho CRM (leads); Stripe and Viva (payments); Amazon SES, Postmark, Resend (email); Microsoft, Google, Apple (optional sign-in); Firebase (push notifications); Anthropic (optional admin AI assistant).

Schedule 2 — Technical and organisational security measures

The Processor applies appropriate technical and organisational measures, including: encryption in transit for all connections and encryption at rest for children’s data; access controls and role-based access; restricted, private storage of photos and backups; logging and monitoring; secure deletion; and personnel confidentiality obligations.

Contact: support@youngengineers.org.