Version 1.0 -- Effective May 15, 2026

Privacy Policy

This Privacy Policy explains how the platform collects, uses, protects, and shares information for students, parents, tutors, teachers, and administrators using our standards-aligned diagnostic and personalized learning tools. The Pennsylvania PSSA ELA module is the first supported assessment module, but the service is designed for standards-based mastery and intervention workflows.

What Data We Collect

We collect account information such as name, email address, role, date of birth when needed for parental-consent decisions, password credentials in hashed form, class or group membership, and school or learning-center affiliation when provided.

We collect student performance data including assessment sessions, answers, scores, standards mastered or missed, lesson progress, practice responses, reading-coach attempts, learning quest attempts, reports, and intervention recommendations.

The Reading Coach feature may process a student's voice recording by sending audio to OpenAI Whisper or a similar transcription service. We use the transcript and scoring metadata to provide reading feedback. Audio is not intentionally retained by the platform after transcription unless a later feature explicitly says otherwise.

The AI tutor and intervention features may store conversation messages, learner summaries, weak standards, and recent progress information so the service can provide continuity and personalized support.

We collect limited diagnostic data such as request timing, rate-limit events, AI failure telemetry, account-security events, and operational logs needed to maintain reliability and safety.

How We Use Data

We use data to provide standards-aligned diagnostics, score responses, generate personalized learning paths, recommend targeted practice, support teacher review, score text-dependent analysis essays, operate reading-coach and tutor experiences, communicate with teachers or parents, and improve the service.

AI-generated lessons, tutor responses, and recommendations may be reviewed by educators or administrators to improve quality. Validated scoring logic and answer keys remain separate from AI-generated explanations.

Who We Share Data With

We use subprocessors to operate the service. Current and planned subprocessors include OpenAI for AI generation, essay feedback, tutor support, speech-to-text, and text-to-speech; Anthropic for possible future AI routing; Vercel for hosting; Upstash for Redis, rate limits, and QStash background jobs; Resend for email delivery; and Google YouTube for embedded educational videos. Subprocessors are expected to process data only as needed to provide the service and under appropriate data-processing terms where applicable.

We do not sell student personal information. We do not use student information for targeted advertising.

Retention

We retain account and learning data while the account is active. Accounts with no login for 18 months may be flagged for review. Export and deletion requests are processed within 30 days when verification is complete. Export download links expire after a limited period, normally 7 days.

COPPA and Parental Rights

For students under 13, parental consent is required before account creation. Parents and legal guardians may review their child's data, request corrections, request deletion, or withdraw consent. Consent withdrawal may limit or end the student's access because the service cannot operate without processing learning data.

Parents can contact privacy@[domain] to ask questions or submit a request.

FERPA Notice

For school-affiliated accounts, student education records may be protected under FERPA. The school or learning organization is the controller of those records, and the platform acts as a school official with a legitimate educational interest in providing assessment, intervention, reporting, and instructional services.

Cookies and Tracking

We use cookies and similar technologies for authentication, session security, rate limiting, and core product functionality. We do not use third-party advertising cookies. Browser settings may block some cookies, but the service may not function without authentication cookies.

Data Security

We use reasonable administrative, technical, and organizational safeguards, including hashed passwords, role-based access, server-side validation, rate limits, and encrypted transport where supported. No internet service can guarantee perfect security.

Changes

We may update this Privacy Policy as the product changes. If we make material changes, we will update the version and effective date and provide notice where appropriate.

Contact

Questions about privacy, data export, deletion, parental consent, or school data processing can be sent to privacy@[domain].