Classlist vs WhatsApp: The school-owned alternative to parent WhatsApp groups

WhatsApp's own Terms of Service restrict the consumer app to personal use. They state that users must not use the service in ways that 'involve any non-personal use of our Services unless otherwise authorized by us'. WhatsApp Business has separate Business Terms that place the organisation as Data Controller under GDPR — a legal responsibility that most schools and parent associations are not set up to meet. For this reason, the UK Independent Schools' Bursars Association (ISBA) has issued formal guidance recommending schools guide parents away from WhatsApp groups and towards GDPR-compliant alternatives.

WhatsApp Communities adds structure — it lets admins group related chats under one umbrella with an announcement channel — but it does not change the underlying data protection, safeguarding, or inclusivity issues. Communities still run on the consumer WhatsApp app, still require parents to share their phone numbers, still store message history on individual devices rather than centrally, and still fall under WhatsApp's personal-use Terms of Service. Communities is an organisational feature, not a compliance fix.

ClassDojo added Parent Chat and Class Chat features that allow families who opt in to message each other for playdates, carpools and similar coordination. ClassDojo describes these as sitting outside school-owned data. Classlist is purpose-built for parent community: parents can message privately, join year groups and interest groups, post to a moderated activity feed, find parents by child or language, coordinate volunteers, sell event tickets, and run a marketplace — all inside a single school-owned community with behaviour guidelines parents accept on joining. Classlist chat helps new families feel they belong and can connect in safe environment. 

Under UK and EU GDPR, the parent or PTA volunteer who administers a school-related WhatsApp group is likely to be a Data Controller, with legal responsibilities including managing Subject Access Requests, Right to Erasure requests, and reporting data breaches to the Information Commissioner's Office within 72 hours. The school itself may become a Joint Controller if staff informally direct parents to those groups. ISBA's 2024 guidance sets this out in detail and recommends schools move to GDPR-compliant alternatives such as Classlist.

Joining a WhatsApp group requires sharing a personal phone number with every other member. Many parents — including teachers, doctors, diplomats, military families and those with safeguarding concerns — reasonably decline to share their phone number with strangers. Others don't use WhatsApp at all. The result is that WhatsApp groups systematically exclude a portion of every parent community, by design. Classlist lets parents join, find each other and message privately without sharing phone numbers, which means every family can be included on equal terms.

WhatsApp's moderation tools are limited. Group admins can remove members and delete their own messages, but cannot remove other people's messages after they have been delivered to members' devices. There is no reporting mechanism for inappropriate posts, no community guidelines members agree to on joining, no way to recall a message once it has been read, and no central record of what has been said. Classlist has community guidelines parents accept on joining, a report button on every post, flagged posts held for school review, and school-controlled content removal.

WhatsApp's Privacy Policy states that data is shared globally within Meta's infrastructure, including with data centres in the United States and other countries outside the European Economic Area. Messages themselves are end-to-end encrypted, but metadata — including contact lists, group membership, and usage patterns — is processed by Meta. For UK and EU schools, the practical issue isn't whether WhatsApp as a company is GDPR-compliant; it's that the school has no Data Processing Agreement with WhatsApp for school use, no ability to audit messages, no way to respond to Subject Access Requests, and no control over data stored on parents' personal phones. Classlist is UK-registered, hosts data in the EU, and operates under a clear Data Controller and Processor model with the school.

Yes. Classlist was designed specifically to remove the phone-number requirement that excludes so many parents from WhatsApp groups. Parents can join, message each other privately, find families by child's name or year group, and join interest groups — all without exposing their phone number to other parents. They choose what information to share on their profile and can adjust their notification settings.

Nothing automatic. Because WhatsApp messages are stored on individual members' devices, removing someone from a group does not remove the message history they already have on their phone. A parent who leaves the school, or a staff member who moves on, keeps every message, photo and file that was shared while they were in the group. With Classlist, access is centrally managed — when a family leaves the school, their access to the community is removed automatically through the MIS integration.