Privacy Policy

Last Updated: September 3, 2025

1. Introduction

PRISM, operated by Ethan Unland, is committed to protecting the privacy of students, teachers, administrators, and all users of our educational platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect and store the following information that schools and teachers provide to us through manual entry, CSV uploads, or Google Classroom sync:

Student Information

  • Name (first and last name)
  • Student ID number
  • School email address
  • Grade level and classroom assignments
  • Academic performance data (assessment scores, skill progress)
  • Learning goals and progress tracking
  • Attendance records for learning lab sessions

Teacher and Staff Information

  • Name and professional email address
  • Teacher code/identifier
  • School and district affiliation
  • Subject areas and grade levels taught
  • Classroom rosters and assignments
  • Professional Learning Community (PLC) participation

Google Classroom Integration

When you connect Google Classroom, we access:

  • Your Google account name and email address
  • List of your Google Classroom courses (read-only)
  • Student rosters with names and email addresses (read-only)

3. How We Use Your Information

We use the collected information to:

  • Provide educational services and track student progress
  • Generate personalized learning recommendations
  • Facilitate teacher-student interactions and classroom management
  • Create and manage Professional Learning Communities
  • Sync classroom rosters with Google Classroom
  • Generate reports for teachers, administrators, and districts
  • Ensure platform security and prevent unauthorized access
  • Comply with educational regulations and requirements

4. FERPA Compliance

We comply with the Family Educational Rights and Privacy Act (FERPA). We work with schools as a "school official" with a legitimate educational interest. Student records are only accessible to authorized school personnel and parents/guardians as permitted by FERPA.

5. COPPA Compliance

For users under 13, we comply with the Children's Online Privacy Protection Act (COPPA). We only collect information necessary for educational purposes with proper school consent serving as parental consent.

6. Data Security

We implement appropriate security measures including:

  • Encryption of data in transit and at rest
  • Secure authentication through Clerk
  • Role-based access controls
  • Activity logging and monitoring
  • Secure cloud infrastructure (Vercel and Neon)

7. Data Sharing

We do NOT:

  • Sell student or teacher data
  • Use data for advertising purposes
  • Share data with third parties for non-educational purposes

We MAY share data:

  • With authorized school personnel within your district
  • With parents/guardians as permitted by FERPA
  • With service providers who help us operate the platform (under strict confidentiality)
  • When required by law or valid legal process

8. Data Retention

We retain educational records as long as necessary to provide our services and comply with legal obligations. Schools may request data deletion in accordance with their retention policies.

9. Your Rights

You have the right to:

  • Access your personal information
  • Request corrections to inaccurate data
  • Request deletion of your data (subject to legal requirements)
  • Opt-out of optional features
  • Receive a copy of your data in a portable format

10. Third-Party Services

We integrate with:

  • Google Classroom: For roster synchronization (optional)
  • Clerk: For secure authentication
  • OpenRouter: For AI-powered educational content generation
  • Common Standards Project: For educational standards data

Each service has its own privacy policy. We only share the minimum necessary information with these services to provide functionality.

11. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use tracking cookies for advertising or marketing purposes.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this policy periodically. Continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact Information

For questions about this Privacy Policy or our data practices, please contact your school administrator or district technology coordinator.

Data Controller:
Ethan Unland
Email: support@prismlearn.org
Website: https://prismlearn.org