Privacy Policy

1. Introduction

FrameProof ("we," "us," or "our") is committed to protecting the privacy of children and families who use our educational assessment platform. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data.

We comply with the Children's Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA). We do not collect personal information from children under 13 without verifiable parental consent.

2. Information We Collect

From Parents/Guardians:

• Email address (for account creation and communication)
• First name
• ZIP code (for demographic analysis only — never shared)
• Ethnicity and household structure (for bias detection research — encrypted at rest)

From Children (with parental consent):

• First name only (no last name is collected)
• Age and grade level
• Sex and ethnicity (for bias detection — encrypted at rest)
• Assessment responses and scores
• Learning engagement data (streaks, badges, participation)

From School Personnel:

• Email address, first and last name
• School and classroom associations
• Role (teacher, admin, curriculum director)

Automatically Collected:

• Assessment timing data (for diagnostic purposes, not surveillance)
• We do NOT use cookies for advertising or tracking
• We do NOT use analytics services that track children

3. How We Use Information

• Generate personalized educational assessments
• Detect and measure bias in educational content
• Produce learning reports for parents and authorized school personnel
• Track learning progress and engagement
• Improve our assessment methodology

We NEVER sell children's data. We NEVER use children's data for advertising. We NEVER share children's data with third parties for marketing purposes.

4. Data Security

• All sensitive data (demographics, assessments, profiles) is encrypted at rest using AES-256-GCM
• All data is transmitted over HTTPS (TLS 1.2+)
• Passwords are hashed with bcrypt
• Access to student records is logged and auditable
• School personnel can only access students in their assigned classrooms

5. Third-Party Services

We use Anthropic's Claude AI to generate and evaluate educational assessments. When an assessment is generated, we send your child's age, grade level, sex, ethnicity, and learning focus areas, along with your zip code region and household type, to this service. This data is used to detect potential bias patterns in educational content and personalize assessments. We do not send your child's name to this service. We have a data processing agreement in place that prohibits Anthropic from using this data for any purpose other than generating the assessment.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking service on our platform.

6. COPPA Compliance

• We require verifiable parental consent before collecting any information from children under 13
• Parents can review all data collected about their child at any time
• Parents can request deletion of their child's data at any time
• Parents can refuse further data collection (by deleting their child's profile)
• We collect only the minimum information necessary for the educational service

7. FERPA Compliance

When FrameProof is used by schools, we act as a "school official" with a legitimate educational interest under FERPA. We maintain student education records on behalf of the school under the terms of our Data Processing Agreement (DPA).

• Schools control access to student records through role-based permissions
• Teachers can only view records for students in their assigned classrooms
• All access to student records is logged for audit purposes
• Parents/eligible students may request to inspect their education records
• Data is retained only as long as necessary for the educational purpose

8. Your Rights

As a parent or guardian, you have the right to:

• Review — View all data collected about your child through your dashboard
• Delete — Request complete deletion of your child's data and your account
• Refuse — Opt out of further data collection by removing your child's profile
• Export — Request a copy of all data we hold about your child
• Correct — Update inaccurate information in your child's profile

To exercise any of these rights, contact us at support@frameproof.ai

9. Data Retention

• Active accounts: data retained while the account is active
• Deleted accounts: all data permanently deleted within 30 days of deletion request
• School accounts: data retained per the terms of the school's DPA
• Perspective tracking data: automatically summarized and minimized on a rolling schedule

10. Changes to This Policy

We will notify parents by email before making material changes to this privacy policy. Continued use of the service after notification constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this privacy policy or our data practices, contact us at:

FrameProof Education
Email: support@frameproof.ai