Privacy Policy

ClassRoots Edu builds software used by schools, teachers and learners. Because that includes young people, we treat data minimisation as a design constraint rather than a compliance exercise. This policy explains what we collect, why, and what we do not do with it.

Information we collect

We collect only what a feature requires in order to function:

• Account information — name, email address, role and the institution a user belongs to, used for authentication and access control.
• Learning activity — lesson progress, responses to questions, mastery estimates and interaction events, used to adapt instruction to the individual learner.
• Speech recordings — audio submitted for pronunciation assessment, processed to produce a score and feedback for that learner.
• Technical data — device, browser and diagnostic logs used to keep the service reliable and secure.

How we use it

Learner data is used to deliver and improve instruction for that learner and to give their teachers and institution an accurate picture of progress. Aggregated, de-identified data may be used to evaluate and improve the effectiveness of our systems.

We do not sell personal data. We do not use learner data for advertising, and we do not build advertising profiles.

Student data

Where we process data on behalf of a school, the school remains the data controller and we act as a processor under their instruction. Learner records are isolated per institution and are accessible only to authorised users within that institution.

Service providers

We rely on a limited set of infrastructure and AI service providers for hosting, storage, speech processing and language model inference. These providers are bound by contract to process data only as instructed and are not permitted to use it for their own purposes.

Security

Data is encrypted in transit and at rest. Access is role-scoped and logged, environments are separated, and infrastructure changes are reviewed before deployment. No system is perfectly secure, but these controls are maintained as a baseline rather than an aspiration.

Retention

We retain learner records for as long as the institution's agreement with us is active, and delete or de-identify them within a reasonable period after termination, unless a longer period is required by law.

Your rights

Depending on your jurisdiction, you may have the right to access, correct, export or delete personal data we hold about you. Where a school controls the record, we will direct the request to them and support them in fulfilling it.

Changes

If we make a material change to this policy, we will update the date above and notify institutions using the platform.

Contact

For any privacy question or data request, email devs@classrootsedu.com.