Student Data Privacy Pledge

We will not sell student personal information. Not now. Not ever. Student data exists to serve learning, not to generate revenue through data brokering or any third-party arrangement.

Standard: SDPC Pledge Commitment 1

We will not use student data for targeted advertising. There are zero ads on Gregarious. Student data will never be used to profile students for commercial purposes outside the educational context.

Standard: SDPC Pledge Commitment 2

We will not build behavioral or psychological profiles of students for non-educational purposes. Skill ratings and mastery data exist solely to personalize the learning experience.

Standard: SDPC Pledge Commitment 3

We collect only the student data necessary to provide the educational service. No location data, browsing history, social media information, biometric data, or health records are collected.

Standard: SDPC Pledge Commitment 4

We support parental access to, review of, and correction of their child's data. Parents can view, export, and request deletion of their child's information at any time through the Parent portal.

Standard: FERPA 20 U.S.C. 1232g

We will delete student data upon school or parent request within 30 calendar days. When an account is deleted, all personally identifiable student information is permanently purged from our systems.

Standard: SDPC Pledge Commitment 5

We use student data only to support the educational purposes of the school and to improve the platform. Every data point we collect serves exactly one goal: helping students learn and helping teachers teach.

Standard: SDPC Pledge Commitment 6

We will not materially change our privacy policies without providing advance notice to schools and parents. Major changes require at least 14 days notice and active communication through multiple channels.

Standard: SDPC Pledge Commitment 7

We maintain comprehensive security standards to protect student data, including encryption in transit (TLS 1.3), encryption at rest (AES-256), row-level security at the database level, and complete audit logging of all data access.

Standard: SDPC Pledge Commitment 8

When AI is used for educational feedback, student names and all personally identifiable information are stripped before processing. We use Anthropic's zero-data-retention option. The AI provider does not store or train on student inputs or outputs.

Standard: EdSAFE AI Alliance Principle 3

We will not retain student data beyond the period needed to support the educational purpose. Active accounts are retained during enrollment. Deleted accounts are permanently purged within 30 days.

Standard: SDPC Pledge Commitment 9

In the event of a data breach affecting student information, we will notify affected schools and users within 72 hours of discovery, with full details of what was affected, what we have done, and what affected individuals should do.

Standard: SDPC Pledge Commitment 10