Privacy Policy
Privacy Policy for Teachers
Last updated: February 2026
This policy explains what data we collect about you as a teacher, how we use it, and your rights.
Account & Identification
When you register, we collect:
- Email address — For login and account recovery
- Display name — How students and the system identify you
- Teacher code — A short code your students use to find your classroom
- Password — Stored as a cryptographic hash only (we never see or store your actual password)
Data Processing Agreement
When you accept the Data Processing Agreement (required before creating groups), we collect:
- School or institution name — Identifies the Data Controller
- Your role (Teacher, Administrator, Department Head, or Other)
- Student age range (Under 14, 14-17, 18+, or Mixed) — Determines which privacy notices students see
- Default student language — Sets the language for student privacy notices
- Your affirmations that your institution is the Data Controller and that you acknowledge data collection
- IP address hash — A one-way cryptographic hash of your IP at the time of agreement, salted per-tenant (cannot be reversed). Kept for audit trail.
- DPA version and timestamp — Which version you accepted and when
Teaching Configuration
We store your preferences to deliver the teaching experience you configure:
- Progress report preferences — Score calculation mode, date range filters, term dates, inactivity thresholds
- Assignment defaults — Your default settings for exercises and quizzes (hints, feedback, scoring, attempts, navigation, shuffle, and more)
- Per-course overrides — Settings you customize for specific courses
- Per-assignment overrides — Settings you customize for specific assignments
Groups & Content
- Groups you create — Name, description, age category, whether parental consent is required
- Assignments you create — Course references, group associations, creation timestamps
Geographic & Usage Data
- Country detection — We detect your country and your students' country from network information. This is used for regional compliance, potential future regional pricing, and service optimization.
- Basic usage data — Feature usage patterns and session frequency, used to improve and optimize the platform.
Activity & Audit
- Timestamps — When records are created and updated
- Login security — Failed login attempt counter and lockout status (to protect your account)
- Authentication tokens — For session management (temporary, not stored long-term)
What We Do NOT Collect
- Physical address, government ID, or salary information
- Raw IP addresses (only cryptographic hashes)
- Browser fingerprints or device identifiers
- Geolocation tracking
- Webcam, proctoring, or keystroke data
Who Can See Your Data
- You can view and update your settings at any time
- The platform uses your data to deliver the teaching features you configure
- No one else has access to your personal data
- We do not share your data with third parties
Data Retention
| Data | Retention | Legal Basis |
|---|---|---|
| Account data (email, name, teacher code) | Account lifetime | Contractual (service delivery) |
| DPA agreement record + IP hash | Indefinite | Legitimate interest (compliance audit) |
| Teaching preferences & settings | Account lifetime | Contractual (user preferences) |
| Groups & assignments | Account lifetime | Contractual (teaching configuration) |
| Geographic data (country) | Account lifetime | Legitimate interest (compliance, pricing) |
| Basic usage data | Account lifetime | Legitimate interest (service optimization) |
Your Rights
You have the right to:
- View your data on the Settings pages at any time
- Update your information, preferences, and DPA details
- Request deletion of your account and all associated data
- Request export of your data in a portable format
- Withdraw consent — You may stop using the platform at any time
GDPR, FERPA & COPPA Compliance
This platform is designed to comply with:
- GDPR (General Data Protection Regulation) — Article 28 for data processing
- FERPA (Family Educational Rights and Privacy Act) — Protection of educational records
- COPPA school-use exception — For students under 13
Questions?
If you have questions about your privacy, contact privacy@coursegenie.com or see our full legal documents.
This is the privacy notice your students see when they use the platform.
Privacy Policy for Students
Last updated: February 2026
How Your Access Works
You have guest access to your teacher's classroom. This is not a personal account — your teacher created your access and manages it. We collect minimal information to support your learning.
- Your teacher controls your access — They created your profile and can modify or remove it
- No email or password required — You log in with an access code provided by your teacher
- Your display name is set by your teacher — You can request a change if it shows personal information
What Information We Collect
When you complete quizzes and exercises, we collect:
- Your answers and scores — To track your progress and provide feedback
- Time spent on tasks — To help your teacher understand how long activities take
- Temporary security information — To detect unauthorized access (automatically deleted after 90 days)
Who Can See Your Data
- Your teacher can see your progress, scores, and display name
- You can see your own progress on the Progress page
- No one else has access to your individual data
What We Do NOT Collect
- We do not collect your email address
- We do not collect your real name (unless your teacher entered it)
- We do not collect phone numbers, home addresses, or any other personal details
- We do not use cookies for advertising
- We do not share your data with third parties
How We Protect Your Privacy
- Minimal data collection: Only your display name, progress, and temporary security data
- Security measures: All sensitive data is encrypted and hashed
- Automatic deletion: Security data is automatically deleted after 90 days
- Limited access: Only your teacher can view your progress
Your Rights
You have the right to:
- View your data on the Settings and Progress pages at any time
- Download your data (coming soon)
- Request changes to your display name using the button on the Settings page
- Request deletion — ask your teacher to remove you from the class, which permanently deletes all your data
- Learn how your data is used
Data Storage
Your data is stored securely on your teacher's server. It is not sent to any external service.
GDPR & FERPA Compliance
This system is designed to comply with GDPR (General Data Protection Regulation) and FERPA (Family Educational Rights and Privacy Act) requirements. Your educational data is treated as confidential and is only used to support your learning.
Questions?
If you have questions about your privacy, talk to your teacher. They manage your classroom and can explain how your data is used.