Privacy Policy

1. Scope and Educational Purpose

ClasFlo is a K–12 instructional and assessment platform designed for use by teachers, students, schools, and school districts. This Privacy Policy explains how ClasFlo collects, uses, stores, shares, and protects information when the service is used for educational purposes.

When a school or district authorizes ClasFlo for student use, ClasFlo processes student information only to provide, secure, maintain, support, and improve the educational service and the features requested by the school, teacher, or student.

2. Information We Collect

The information ClasFlo processes depends on the features a school or teacher chooses to use.

• Account information, such as name, email address, role, username, preferred language, and authentication identifiers.
• Class and roster information, including class membership, teacher-student relationships, and classroom identifiers.
• Educational content, including assignments, questions, student responses, submissions, scores, grades, teacher feedback, and participation records.
• Classroom communication content, such as discussion posts, replies, messages, and attachments.
• Student-created media, such as drawings, audio responses, video responses, and other files submitted for classroom activities.
• Instructional activity and security information, including timestamps and, when a teacher enables Academic Integrity features, assignment interaction events that may indicate changes in focus or visibility during an assessment.
• Google account or Google Workspace information when a user chooses a Google-connected feature and grants the requested permission.
• Technical information that may be processed by hosting, authentication, and security systems, such as IP address, browser or device information, timestamps, and application logs.

3. How We Use Information

• Create and manage teacher and student accounts.
• Deliver assignments, assessments, live activities, discussions, feedback, and other classroom features.
• Save and display student work to the student and authorized educators.
• Calculate or assist with scores, progress information, instructional insights, and support groups.
• Provide accessibility, language, translation, and response accommodations selected by teachers or students.
• Operate Google-connected features requested by the user, such as sign-in, roster connections, or supported assignment integrations.
• Protect accounts, investigate errors, prevent misuse, maintain service reliability, and improve ClasFlo for K–12 educational purposes.

4. Student Data, Advertising, and Commercial Use

ClasFlo does not sell or rent student personal information. ClasFlo does not use student personal information for targeted advertising, build commercial advertising profiles about students, or use school-authorized student information for an unrelated commercial purpose.

Student information may be used in de-identified or aggregated form to maintain, secure, improve, and evaluate ClasFlo for educational purposes, provided the information cannot reasonably be used to identify an individual student.

5. Schools, Districts, and FERPA

Schools and districts control the educational records they provide to or create through ClasFlo. When a school relies on a FERPA exception that permits use of an educational service provider, ClasFlo uses education-record information only for the authorized educational purpose and does not reuse or redisclose that information for unauthorized purposes.

ClasFlo will cooperate with authorized schools and districts regarding access, correction, export, retention, and deletion of student information as required by applicable law and the school's instructions.

6. Children Under 13 and COPPA

ClasFlo is designed for school-directed educational use. For students under 13, a school or school district may provide authorization on behalf of parents or guardians when COPPA permits school-based consent and the information is collected for the use and benefit of the school and for no other commercial purpose.

ClasFlo remains responsible for its own obligations under COPPA. We do not place responsibility for ClasFlo's COPPA compliance on an individual teacher, school, parent, or student.

Where school authorization is not available or does not apply, ClasFlo will obtain verifiable parental consent when required before collecting personal information from a child under 13.

7. Google User Data

ClasFlo may allow users to sign in with Google or connect supported Google Workspace services. ClasFlo requests only the Google permissions needed for the feature the user chooses.

Google user data obtained through Google APIs is used only to provide and support the requested Google-connected feature, to protect the service, and to comply with applicable law. ClasFlo does not use Google user data for targeted advertising or sell Google user data.

Student Google sign-in can be limited to basic identity information such as account identifier, name, and email address. Broader Google permissions used for teacher integrations are separate from basic student authentication.

8. Artificial Intelligence Features

ClasFlo may offer teacher-controlled AI-assisted features, such as question generation, translation, grading assistance, or instructional feedback. Depending on the feature, limited assignment content or student response content may be sent to an AI service provider to complete the requested task.

ClasFlo is designed to minimize the information sent to an AI provider to what is needed for the feature. AI output may be incomplete or incorrect and is intended to support, not replace, educator judgment. Teachers remain responsible for reviewing and releasing grades, feedback, and instructional decisions.

Schools and districts may choose not to authorize AI features that process student information. ClasFlo will follow applicable school or district restrictions for those features.

9. Service Providers and Data Sharing

ClasFlo uses service providers to operate the platform. Depending on the features enabled, these providers may process information on ClasFlo's behalf only as needed to provide their services.

• Supabase for database, authentication, and file-storage infrastructure.
• Vercel for application hosting and delivery.
• Google for Google authentication and Google Workspace integrations selected by the user.
• OpenAI for supported AI-assisted features when those features are enabled and used.
• Other technical service providers may be used when necessary to operate, secure, or support ClasFlo. Material changes to how student information is handled will be reflected in this Privacy Policy.

10. Data Security

ClasFlo uses administrative and technical safeguards designed to protect information from unauthorized access, use, alteration, or disclosure. These safeguards include authenticated access, role-based authorization, database Row Level Security, server-side secrets, restricted storage access for student response files, and secure network connections.

No online service can guarantee absolute security. ClasFlo reviews and improves its security controls as the platform changes and will investigate and respond to suspected security incidents.

11. Data Retention and Deletion

ClasFlo retains student information only for as long as it is reasonably needed to provide the authorized educational service, meet a school's instructions, protect the service, or satisfy applicable legal requirements.

An authorized school or district may request deletion of covered student information. A student who has reached the age of majority may also have deletion rights under applicable law. Parents or guardians seeking access to or deletion of a school-managed student's information may contact the school or ClasFlo; ClasFlo may coordinate with the school to verify the request and the appropriate response.

When information is no longer needed for an authorized educational purpose and no legal or school-directed retention requirement applies, ClasFlo will delete or de-identify it.

12. Student Privacy Controls

Teachers may enable privacy-supporting classroom settings, including anonymous display modes for selected activities. Anonymous display does not necessarily mean the underlying record is anonymous to ClasFlo or the authorized teacher when identity is required for classroom management, safety, grading, or recordkeeping.

Student submissions and education records are not intended to be publicly accessible. Teachers may choose to share their own instructional materials publicly, but public instructional content is handled separately from private student work.

13. Access, Correction, and School Requests

Authorized schools and districts may contact ClasFlo to request information about the categories of student data processed, review or correct information, obtain an export where appropriate, restrict further collection, or request deletion.

Students and parents or guardians should ordinarily work through the student's school for requests involving school-managed education records so ClasFlo can verify identity and school authority before making changes.

14. Changes to This Policy

ClasFlo may update this Privacy Policy as the service, law, or data practices change. The effective date at the top of this page will be changed when the policy is materially revised. If a material change affects school-authorized student data, ClasFlo will provide notice as appropriate before applying the new practice.

15. Contact

Questions, school privacy reviews, and verified data requests may be sent to support@classflow.app.