Privacy Policy

1. Information We Collect

Account Information

• Name, email address, and role (teacher, administrator)
• School or district affiliation
• Authentication credentials (passwords are hashed and never stored in plain text)

Usage Data

• Apps you create, publish, or interact with
• Feature usage and platform interactions
• Device and browser information

Payment Information

• Stripe processes all payments; we do not store credit card numbers
• Transaction history and payout records for marketplace sellers

2. How We Use Your Information

• Provide and maintain your account and the K12.io platform
• Power AI-assisted app creation and personalization features
• Process marketplace transactions and seller payouts
• Facilitate rostering and single sign-on through school districts
• Communicate service updates and respond to support requests
• Improve the platform based on aggregated, anonymized usage patterns

3. Third-Party Services

We integrate with the following services to operate the platform:

• Stripe — Payment processing and marketplace payouts
• RosterStream — Class roster syncing with school information systems
• OpenAI & Anthropic — AI-powered app generation (prompts may be sent to these services; no student data is included)
• Google, Microsoft, Clever, ClassLink — Single sign-on authentication

Each third-party service operates under its own privacy policy. We share only the minimum data necessary for each integration to function.

4. Student Privacy (COPPA & FERPA)

K12.io is designed for use by educators and school administrators. We are committed to compliance with the Children's Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA).

• We do not knowingly collect personal information from children under 13 without verifiable parental or school consent
• Student roster data synced through RosterStream is used solely for educational purposes and is governed by agreements with school districts
• Educators control what student-facing content they create and share

5. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (TLS), hashed passwords, and secure infrastructure. While no system is 100% secure, we continuously work to safeguard your information.

6. Data Retention & Deletion

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data by contacting us. Upon deletion, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., transaction records).

7. Your Rights

• Access, correct, or delete your personal information
• Export your data in a portable format
• Opt out of non-essential communications
• Request information about what data we hold about you

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or a prominent notice on the platform.

9. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at privacy@k12.io.