Privacy & student data
Last updated: September 23, 2026
What we do with student information. Plain enough for a teacher to read, specific enough for a district to check.
Our commitments
- • We do not sell student personal information.
- • We do not use student information for targeted advertising.
- • We do not build advertising or behavioral profiles from student information.
- • We use student information only to run this service, and for anything else the school specifically asks us to do.
- • We collect only what the comment workflow needs. No home address, no phone number, no date of birth, no health records, no parent contact details, no immigration or demographic data.
- • Schools and districts can request deletion of data under their control, and we support it.
- • Comments are written by the app itself, not by an outside AI service, so nothing about a student is sent to one. If that ever changes, it will say so here and districts will be told first.
Two ways to work, and you choose
NO SAVE (DEFAULT)
Your work exists only while the page is open. Nothing about a student is written to your browser or to our servers, and a refresh clears it. Copy or download before you leave. (The page itself still has to load from our host to work.)
SAVED HISTORY (OPT-IN)
Opening the app signs you in, and signing in creates your account and a workspace, before any agreement is signed. Nothing about a student is sent to it until you choose to save or push on purpose. Reports kept this way let you compare trimesters. Students are stored under random codes. The app sends codes, not names or student IDs, and the list matching codes to names stays with you. The server refuses a student record whose ID is not a code, but it cannot check comment text for names, because it never sees your roster. (Accounts from before August 30, 2026 synced names the old way. Those records are being deleted.) Each school only ever sees its own records. Your district decides how long they are kept, and nothing is deleted on a schedule, so the district asks for the deletion and a person carries it out.
The other setting, This device only, keeps your roster in your browser without sending it to a server. Those two are the settings the app offers. The active one is always shown in the app. We never switch it for you.
Who else is involved
Every outside company the service can send data to, and what each one gets. The optional ones do nothing until they are set up or connected.
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Application hosting and delivery | United States |
| Supabase | Database and sign-in for every account, and the student records saved to a school account | AWS us-west-1, United States |
| Sign-in with a Google account. Teacher details only. | Set by the provider | |
| Resend | Support email, when set up. Teacher details only. | Set by the provider |
| Stripe | Card payments, when set up. Buyer details only. | Set by the provider |
| Google Classroom | When a teacher connects it. Sends the class list, student names included, and receives the comments posted to it. | Set by the provider |
| MasterAlp | When a district has it set up. Sends the class list and receives comments. | Set by the provider |
| Canva | Optional design tool. The server refuses to send it report text unless a district allows outside processing. | Set by the provider |
| AI providers | None. The app writes comments itself. | Not applicable |
For district review
We are a small team and we would rather be exact than impressive. We are not claiming any privacy certification, and no outside firm has security-tested us yet. What we can show you is how it is built, what protects it, the paperwork behind that, and a straight list of what is not done.
Privacy or security questions, or a deletion request: support@papalotledu.com