Student Privacy Policy

Effective Date: July 22, 2025
Last Updated: July 22, 2025

​

TeachAid (“we,” “our,” or “us”) is committed to protecting student privacy. This policy explains how we collect, use, and protect student-related information in compliance with:

​

• FERPA (Family Educational Rights and Privacy Act)
   

• COPPA (Children’s Online Privacy Protection Act)
   

• New York Education Law 2-d
   

• PIPEDA (Canada)
   

• GDPR (where applicable)
   

• And applicable state and district student data agreements
   

We understand that student data deserves the highest level of care and transparency. This policy outlines what we collect, how we use it, and your rights. 

​

 

1. Student Access and Use

Students access TeachAid using a class code or link shared by their teacher. They enter a first name or nickname to interact with content or an AI tutor.

​

TeachAid sessions do not require:

​

• Account creation
   

• Passwords
   

• Email addresses or personal login information
   

Students can return to a session using the same code and first name to view or continue their previous work.

Students are only to interact with TeachAid content under the guidance of their teacher or guardian.

​

 

2. What We Collect

We only collect what is necessary to support instruction.

​

• First Name/Nickname: Used to personalize the session.
   

• Teacher Code or Link ID: Associates the session with a class or teacher.
   

• Submitted Responses: Supports instructional feedback and progress tracking.
   

• AI Tutor Interactions: Generates adaptive support (not tied to long-term ID).
   

• Browser/Device Metadata: Ensures platform security and provides technical support.

​

We do not collect:

​

• Last names
   

• Email addresses or phone numbers
   

• Government-issued IDs
   

• Medical or biometric data
   

• Geolocation or persistent device identifiers
   

• Behavioral tracking or advertising profiles
   

📧 Questions about data? Contact nadeem@teachaid.ca

​

 

3. How We Use Student Data

Student data is used exclusively to:

​

• Provide instructional content
   

• Power personalized and differentiated learning experiences
   

• Allow teachers to monitor student engagement
   

• Improve the functionality and reliability of the platform
   

We do not:

​

• Sell student data
   

• Use it for behavioral advertising
   

• Create marketing profiles
   

• Make automated decisions with academic or legal consequences
   

All content and interactions are initiated and reviewed by educators.

​

 

4. Role of Teachers and Schools

Teachers initiate all student use of TeachAid and control content and sessions. They are responsible for:

​

• Creating or approving activities
   

• Sharing class codes
   

• Interpreting student work
   

• Ensuring no sensitive data is submitted
   

TeachAid acts as a data processor or school official, operating on behalf of schools and districts with a legitimate educational interest.

​

 

5. Session Storage and Retention

Student sessions may be stored temporarily so:

​

• Teachers can review submitted responses
   

• Students can return using their class code and first name
   

We retain student responses:

​

• As long as necessary for instructional purposes
   

• Deleted within 30 days of a parent, school, or teacher request
   

Teachers may delete student data at any time through their dashboard or by contacting us.

​

 

6. Parent and Guardian Rights

In accordance with FERPA, COPPA, and other student data laws, parents/guardians may:

​

• Request access to their child’s responses or activity history
   

• Request deletion of their child’s session data
   

• Appeal decisions related to these requests
   

📧 Submit all requests through your child’s teacher or school administrator. You may also contact nadeem@teachaid.ca. We respond to verified requests within 30 days.

​

 

7. Data Security Practices

We take strong precautions to protect student data, including:

​

• AES-256 encryption for stored data
   

• TLS encryption for all transfers
   

• Hosting on secure, Canadian-based servers (DigitalOcean)
   

• Endpoint protection, access logging, and Industry standard authentication for staff
   

• Annual privacy and security training
   

• Strict, role-based access controls
   

📧 Contact nadeem@teachaid.ca for more about our security protocols.

​

 

8. Use of Service Providers (Subprocessors)

We use service providers to help operate and improve TeachAid. This includes:

​

• Hosting (e.g. DigitalOcean)
   

• Email delivery and user support
   

• AI infrastructure
   

• Analytics to improve functionality (never marketing)
   

• Authentication
   

Each provider:

​

• Is under contract to meet strict privacy and security standards
   

• May only access student data for authorized purposes
   

• May not reuse or retain data independently
   

📧 To request a current list of subprocessors, email nadeem@teachaid.ca.

​

 

9. Breach Notification

In the event of a security breach involving student data:

​

• Schools and districts will be notified within 24 hours
   

• Affected teachers and families will be notified within 72 hours, unless directed otherwise by law enforcement
   

• Notifications will include remediation steps and affected data types
   

📧 Report any incidents to nadeem@teachaid.ca

​

 

10. Definitions

TeachAid.ca Terms and Definitions
 

• Student Data: Any data entered by a student or teacher that links a session to a student.
   

• School Official: A party acting on behalf of a school/district under FERPA or other laws.
   

• AI Tutor: An assistive tool used to generate suggestions or feedback for student work.
   

• Subprocessor: A contracted third party that supports TeachAid’s platform and operations.

​

 

11. Contact

We take student privacy seriously. If you have questions or concerns, please reach out directly:

​

📧 Email: nadeem@teachaid.ca

🏢 Mailing Address: 515 Unit 23 Winston Rd, Grimsby, ON L3M 0C8, Canada