Student Privacy

Our Basic Approach

Academoo is designed so teachers can run classroom practice without requiring students to create accounts or provide email addresses. Teachers control the classroom content, student profiles, assignments, and progress records they create.

What Student Data May Be Stored

• Student names, nicknames, initials, or optional surnames entered by the teacher.
• Student avatars or teacher-uploaded avatars, classroom groups, optional PIN-related settings, role labels, stars, and levels.
• Assignment links, assigned games or lessons, progress, completion, answers, scores, correctness, attempts, active time, and timestamps.
• Reading and phonics page or activity progress, including teacher-visible practice results.
• Optional teacher notes, reward balances, sticker credits, and reward history.
• Parent report link information and the classroom records displayed through a report, if a teacher creates and shares one.
• Limited device, network, security, and error information needed to deliver and protect the service.

Teachers should only enter information they are comfortable using for classroom practice. Academoo does not require full legal names for student profiles.

What Students Do Not Need

• Students do not need their own Academoo account for teacher assignment links.
• Students do not need to provide an email address for teacher assignment links.
• Students do not need to enter payment information.

How Student Data Is Used

• To let students play assigned educational games.
• To show teachers assignment progress, completion, scores, and answer history.
• To help teachers understand classroom practice and student progress.
• To keep assignment links, reports, and classroom tools working correctly.
• To protect the service from abuse and troubleshoot product problems.

Student data is used only to provide, maintain, support, secure, diagnose, and improve the school-authorized educational service. It is not used for a non-educational commercial purpose. Academoo does not sell, rent, lease, trade, or otherwise monetize student data; build an advertising profile about a student; show targeted or third-party advertising to students; or market products or services to a student.

Who Can Access Student Data

Student data is available to the teacher or school that created it, Academoo personnel who need access to operate or support the service, and service providers that process data for Academoo. It can also be shown to a person using an assignment or parent report link intentionally created and shared by the teacher.

Assignment and parent report links act like access keys. Teachers should share them only with intended students, families, or school staff, use an available group PIN where appropriate, and revoke links that should no longer work.

Analytics And Error Monitoring

On student assignment pages, PostHog receives only allowlisted, privacy-minimized lifecycle and performance events through a separate client without persistent browser storage, person profiles, replay, heatmaps, automatic page views, or autocaptured interactions. These events exclude student and assignment identifiers, names, answers, numeric scores, displayed text, and private page URLs. PostHog is disabled entirely on parent report pages, and Microsoft Clarity is disabled on both student assignment and parent report pages.

On teacher and public pages, displayed text and inputs are masked where supported. Sentry may receive limited technical error and performance diagnostics configured to remove account identity, request content, assignment codes, query values, and displayed text, input, and media where supported.

Data Retention And Deletion

Academoo keeps classroom and progress records while the teacher or school uses the service and while the records are needed for authorized educational features and reports. Parent report links expire after 90 days unless revoked earlier. Short-lived, hashed network information used to rate-limit report access is normally removed within about five minutes.

Teachers can delete some records or their account in the product. A school or verified teacher can request access, correction, export, return, or comprehensive deletion by contacting us. Unless a school agreement or applicable law requires a shorter period, we will complete a verified deletion or return request within 30 days. Limited records may be retained only where required for security, legal compliance, dispute resolution, or billing, and backups rotate out securely.

Service Providers

Academoo uses service providers for hosting, database, storage, authentication, rate limiting, email delivery, payments, teacher-initiated image search, analytics, performance monitoring, and error tracking. These include Supabase, Vercel, Upstash, Resend, Paddle, Google Sign-In, Pixabay, PostHog, Microsoft Clarity, and Sentry.

These providers help us operate Academoo. We do not authorize them to use student data for their own advertising.

Security And Incident Response

Academoo uses encrypted connections, access controls, row-level database permissions, rate limiting, monitoring, and documented response procedures. If we determine that a breach involved a school's student information, we will notify the school without unreasonable delay and no later than 30 calendar days after that determination, or sooner when the school agreement or applicable law requires it.

Read the public Security and Incident Response overview.

School Direction And Agreements

When a school authorizes Academoo, we process student information for the school's educational purpose and under its direction. Schools and teachers remain responsible for providing required notices, obtaining applicable permissions, and sharing access links safely. We will work with schools on a written data privacy agreement, and the agreement controls if it provides stronger or more specific protections.

Academoo is designed to support school use under FERPA, COPPA, and applicable state student privacy laws. When a school relies on the FERPA school-official exception, Academoo performs the authorized institutional service under the school's direction and uses and rediscloses education records only as allowed by the agreement and law. When a school authorizes collection under COPPA, we use the child's information only for the school-authorized educational purpose. Illinois public-school use requires an applicable written student data agreement before covered information is provided.

Questions From Schools

If your school needs a privacy review, deletion request, vendor questionnaire, or data agreement discussion, contact us at support@academoo.com. Please include your school name and the request type.

This page is a plain-English overview. The full Privacy Policy and our Terms of Service contain more detail.