Privacy Policy

Overview

Academoo provides educational games, teacher tools, assignments, worksheets, and classroom progress features. This policy explains what information we collect, how we use it, and how teachers, parents, guardians, and schools can contact us about privacy requests.

When a school or teacher uses Academoo for a class, the school or teacher controls the student records it provides and Academoo processes those records only to deliver the authorized educational service. A signed school data agreement will control if it provides stronger or more specific protections than this policy.

For a shorter school-focused summary, see our Student Privacy page.

Information Teachers Provide

• Account information: email address, display name, avatar choice, login details, and account preferences.
• Authentication information: if you use Google Sign-In, we receive basic profile information such as your name and email address from Google.
• Teacher-created content: question sets, prompts, accepted answers, word lists, images, audio, saved games, assignments, worksheet activity, and classroom tool settings.
• Billing information: purchase status, product pass, transaction identifiers, refund status, and related billing metadata. Full payment card details are handled by Paddle, our merchant of record.
• Support and feedback: messages you send us, optional contact email, page URL, browser/device details, and related troubleshooting metadata.

Student And Classroom Information

Students normally do not need their own Academoo account or email address to use a teacher assignment link. Teachers may create classroom records so assignments and progress reports work.

• Student profiles: names or nicknames, optional surname, avatar or teacher-uploaded avatar, group membership, PIN-related settings, classroom role labels, stars, and levels chosen or managed by the teacher.
• Assignment and learning activity: assignment links, assigned games or lessons, answers, correctness, scores, attempts, completion, page or activity progress, time-active measurements, timestamps, and reports shown to the teacher.
• Teacher notes and rewards: optional session notes, reward balances, sticker credits, and reward history entered or awarded through classroom features.
• Parent report links: a protected link token, its expiration and access status, and the classroom records displayed in a report when a teacher chooses to create one.

Teachers should avoid adding sensitive student information that is not needed for classroom practice. Initials, first names, or nicknames can be used where appropriate.

Information Collected Automatically

• IP address, browser type, operating system, device information, pages viewed, links clicked, referring pages, approximate location, and timestamps.
• Performance, error, and usage information that helps us keep Academoo reliable and improve the product.
• Cookies and similar technologies used for login sessions, security, analytics, preferences, and product measurement.

Educational Use Only

We use student information only to provide, maintain, support, secure, diagnose, and improve the school-authorized educational service. We do not use student information for a non-educational commercial purpose. We do not sell, rent, lease, trade, or otherwise monetize student information; build an advertising profile about a student; show targeted or third-party advertising to students; or use student information to market products or services to a student.

Student information is disclosed only to the school, teacher, authorized recipients of links the teacher creates, service providers needed to operate Academoo, or as required by law. Our service providers may process it only to perform services for Academoo and are not authorized to use it for their own advertising.

Analytics And Product Improvement

We use limited analytics and performance tools to understand feature use, diagnose bugs, improve classroom workflows, and measure web performance. On student assignment pages, PostHog receives only allowlisted, privacy-minimized lifecycle and performance events through a separate client that does not use persistent browser storage or create person profiles. Session replay, heatmaps, automatic page views, and autocaptured interactions are disabled there. Student and assignment identifiers, names, answers, numeric scores, displayed text, and private page URLs are not included in those events.

PostHog is disabled entirely on parent report pages, and Microsoft Clarity is disabled on both student assignment and parent report pages. On teacher and public pages, Academoo's interface text can appear in PostHog session replays so we can diagnose display and usability problems. Input values and marked personal or private text remain masked where supported. Sentry may receive limited technical error and performance diagnostics configured to remove account identity, request content, query values, assignment codes, and displayed text, input, and media where supported. We do not use student answers for advertising or unrelated product marketing.

Affiliate Referrals

If you follow an Academoo affiliate link, we store the affiliate, visit time, an anonymous click identifier, the internal landing path, and limited campaign values such as UTM source, medium, and campaign. The referral record does not store your IP address or full browser user agent. A signed, HttpOnly attribution cookie may remain for up to 60 days so an eligible first Pro purchase can be attributed correctly.

We delete affiliate click records after 12 months. We retain the minimum conversion, commission, adjustment, and payout audit records needed for accounting, disputes, fraud prevention, and legal compliance. Affiliates do not receive buyer names, email addresses, account identifiers, or other buyer identity information.

How We Use Information

• To provide educational games, assignments, worksheets, teacher tools, and classroom progress reports.
• To create, authenticate, secure, and support teacher accounts.
• To process purchases, passes, refunds, and billing support.
• To prevent abuse, investigate errors, protect the service, and enforce our terms.
• To communicate important product, account, security, and support messages.
• To improve Academoo, understand feature usage, and prioritize product work.

Third-Party Services

We use service providers to operate Academoo, including:

• Supabase: authentication, database, and file storage.
• Vercel: hosting, analytics, speed insights, and web infrastructure.
• Upstash: security rate limiting and abuse prevention.
• Sentry: error monitoring and reliability diagnostics.
• PostHog: product analytics and debugging; only restricted, privacy-minimized events without durable student identity on student assignment pages, and no collection on parent report pages.
• Microsoft Clarity: masked session insight on teacher and public pages, not student assignment or parent report pages.
• Google Sign-In: optional teacher account login.
• Paddle: teacher payment processing, merchant of record, billing, taxes, and refunds.
• Resend: service and support email delivery.
• Pixabay: teacher-initiated image search for creating content.

These providers are used to deliver, secure, support, and improve Academoo. We do not authorize them to use student data for their own advertising.

Data Retention And Deletion

We keep account and classroom records while the teacher or school uses Academoo and while they are needed to provide authorized educational features and reports. Parent report links expire after 90 days unless revoked earlier. Short-lived, hashed network information used to rate-limit parent report access is normally removed within about five minutes.

Teachers can delete some classroom content or their account directly in the product. A school or verified teacher can request access, correction, export, return, or comprehensive deletion by contacting us. Unless a school agreement or applicable law requires a shorter period, we will complete a verified deletion or return request within 30 days. We may retain limited records only where required for security, legal compliance, dispute resolution, or billing; backups may persist temporarily until their ordinary secure rotation completes and will not be restored for ordinary use.

Public And Shared Content

Some teacher-created question sets or resources may be shared publicly if a teacher chooses to publish or share them. Do not include private student information in public question sets, public prompts, images, word lists, or shared resources.

Security

We use technical and organizational safeguards to protect information, including access controls, row-level database permissions, encrypted connections, and service monitoring. No online service can guarantee perfect security, but we work to protect Academoo and respond to issues responsibly.

We maintain a written incident response process to investigate, contain, remediate, document, and notify affected schools about a confirmed breach involving their student information. We will notify the school without unreasonable delay and no later than 30 calendar days after determining that a breach occurred, or sooner when a school agreement or applicable law requires it. See our Security and Incident Response page.

Children's Privacy

Academoo is built for educational use by teachers, schools, parents, and guardians. Students do not need to create their own Academoo accounts for teacher assignment links. When a school authorizes Academoo to collect student information, we process it for the school-authorized educational purpose and under the school's direction. Schools and teachers are responsible for providing required notices and obtaining any permissions that apply to their use.

If you believe a child has provided personal information to Academoo without appropriate permission, contact us and we will review the request.

School Privacy Laws

Academoo is designed to support school use under FERPA, COPPA, and applicable state student privacy laws. When a school relies on the FERPA school-official exception, Academoo performs the authorized institutional service under the school's direction and uses and rediscloses education records only as allowed by the school agreement and applicable law.

When a school authorizes collection under COPPA, Academoo uses the child's information only for the school-authorized educational purpose and not for another commercial purpose. An Illinois public school must have an applicable written agreement with Academoo before covered student information is provided; the signed agreement will control the parties' specific SOPPA duties.

Your Choices And Requests

Depending on your location and relationship to Academoo, you may have rights to access, correct, delete, or restrict certain personal information. To make a request, contact us using the email below. We may need to verify your identity or authority before acting on a request.

Changes To This Policy

We may update this policy as Academoo changes. If we make significant changes, we will update the date above and provide notice where appropriate.

Contact Us

For privacy questions, school data questions, or deletion requests, contact us at support@academoo.com.