Student Privacy Policy

Who this covers

This app is used by schools to diagnose and remediate math skills. Accounts are created by teachers or school administrators; students join with a class code and their school student ID. We act as a “school official” with a legitimate educational interest under FERPA (34 CFR § 99.31(a)(1)) and operate under the direction of the school.

What we collect

• Student first and last name, school student ID, and class period (provided by the school roster or Google Classroom import).
• Answers, step-by-step work, photos of written work, diagnostic and exam scores, and time spent practicing.
• Optional learning preferences a student chooses (interests, read-aloud, font size) and accommodations a teacher records (for example IEP or 504 supports, home language).
• Teacher account details: name, school email, and sign-in method.

What we do not collect

• No student email passwords, precise location, contacts, camera roll, or biometric data.
• No advertising identifiers. We never show ads to students.
• Students under 13 never create their own accounts; the school provides consent under COPPA’s school-authorization exception.

How data is used

• Only to deliver instruction: grading work, generating practice and worked examples, coaching, and reporting progress to the student’s teacher and family.
• AI features send the minimum problem and answer content needed to generate feedback. Student names and IDs are not sent to AI models, and AI providers may not train on this content.
• We never sell student data, build non-educational profiles, or use it for targeted advertising.

Who can see it

• The student’s own teacher(s) and authorized school administrators.
• Parents and guardians, through progress updates the teacher chooses to send.
• Sub-processors that host the service (database, file storage, AI inference), each bound by confidentiality and security terms. A current list is available in the Data Processing Agreement.

Google user data

Teachers can choose to connect a Google account. We request only the access needed for the features the teacher uses, and we act in Google only when the teacher clicks to do so.

• Sign-in: your name, email address, and profile picture, used to create and secure your teacher account.
• Google Classroom: your course list and student roster (names and emails) to set up classes; and, when you choose, creating assignments and returning grades for coursework this app created.
• Google Sheets and Drive: creating new spreadsheets of your grades and saving copies of student work to your Drive. We only access files this app creates, not your other files.
• Google Calendar: adding assignment and test due dates to your calendar when you choose.
• Google data is used only to provide these features. It is never sold, used for advertising, used to train AI models, or shared with anyone except as needed to run the service or required by law.
• Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• You can remove this app’s access at any time at myaccount.google.com/permissions. Access tokens are deleted when you disconnect or delete your account.

Security

• All traffic is encrypted in transit (HTTPS/TLS) and data is encrypted at rest.
• Teacher passwords are salted and hashed; sessions are signed, HTTP-only cookies.
• Every sensitive action (data deletion, retention changes, roster imports, account linking) is recorded in an audit log visible to school administrators.

Retention and deletion

• The school sets a retention period (180 days, 1 year, 2 years, or until deleted). Student work older than that period is purged.
• A teacher or administrator can permanently delete all data for any student at any time, including uploaded photos.
• When a school ends its agreement, all student data is deleted within 60 days unless the school requests an export first.

Parent and student rights

Parents and eligible students may review, correct, or request deletion of education records by contacting the student’s school. The school will forward the request and we will act on it promptly.

Changes

We will notify schools before any material change to how student data is used, and will not apply such a change to previously collected data without the school’s consent.