Classroom Hero

What is Classroom Hero?

School Use

Classroom Hero is a classroom management and gamification platform that brings teachers and students together through engaging reward systems. Teachers use Classroom Hero to encourage and engage students in class through a customizable point-based system and virtual rewards.

Teacher Features

Teachers use Classroom Hero to create classes and add students using just their names. Teachers can set a custom virtual currency for their classrooms and create "Actions" - which are rewards for behaviors or achievements they define (such as reading aloud in class, raising hands, completing homework, etc.). This allows teachers to track why and when students were rewarded.

Teachers can create a virtual Marketplace containing "Items" that they design, allowing students to spend their earned points on rewards the teacher has established (such as homework passes, extra credit, or classroom privileges). Teachers may emulate their existing in-class reward systems by adding physical classroom items to the virtual marketplace.

Teachers can establish "Class Goals" - long-term objectives that the entire class works together to achieve, such as pizza parties or movie days. Teachers may also create "Subtractors" to deduct points when necessary while maintaining records of when and why points were removed.

The platform provides teachers with comprehensive classroom statistics and the ability to export both individual student data and class-wide analytics. Teachers can invite Teacher Assistants to act on their behalf and can share classroom "Text Codes" that students use to access their profiles. Students cannot create accounts directly and must use teacher-provided classroom codes.

Teachers have access to AI-powered tools including quiz generation, assignment creation, assignment theme modification, and UDL (Universal Design for Learning) choice board generators. Students earn both classroom currency and Power Tokens for completing AI-generated quizzes. Teachers can view quiz completion rates and scores, as well as access their history of AI tool outputs.

The platform includes avatar customization features where teachers can view and purchase new avatar accessories for their students using either Power Tokens or direct payment. Teachers maintain full control over their account and can delete their account and all associated class data at any time.

Student Features

Students earn points by completing teacher-defined Actions, receiving the custom virtual currency that teachers establish during class creation. Students can spend their earned currency by purchasing items from their teacher's marketplace. Depending on teacher settings, items can be sold manually by the teacher, purchased immediately by students, or set as "request to buy" where students submit purchase requests that require teacher approval.

Students earn up to 15 Power Tokens per day (or 50 depending on the teacher's pricing plan). Power Tokens are a separate Classroom Hero currency used exclusively for purchasing avatar accessories for their virtual avatar. This creates a dual-currency system: teacher-created classroom currency for marketplace items, and Power Tokens for avatar customization.

Students can view other students in their class, seeing only names and avatars. They can take "selfies" of their avatars (screenshot functionality) and customize their avatar's appearance including skin tone, hair, clothing, accessories, and footwear.

Students access their accounts exclusively through teacher-provided classroom codes. After entering a class code, students select their student record from the teacher's roster. Students cannot edit their own names - only teachers can modify student names. To maintain login sessions, the platform generates temporary JWTs (JSON Web Tokens).

Students have access to an optional open-world web-based game called "Mysteria" where they can explore and search for treasure chests to earn additional Power Tokens. Teachers can enable or disable this game feature at any time, and it defaults to disabled. The platform includes a classroom-only leaderboard showing which students have discovered the most treasure chests in Mysteria.

School Leader Features

School Leader accounts function similarly to teacher accounts but with expanded oversight capabilities. School Leaders can view overviews of all classes within their organization and purchase "seats" for individual teachers. They can manage teacher access and view high-level statistics across multiple classrooms.

Parent Integration

Teachers can link parents with individual students through the platform. Currently, parents can sign in to view their student's profile and progress. Important Note: Unlike some classroom management platforms, Classroom Hero does not currently include direct communication tools between teachers and parents - the system focuses primarily on the teacher-student gamification experience.

How does Classroom Hero protect Children's Personal Information?

Please see our Children's Privacy Policy here

What information does Classroom Hero collect?

We collect two types of information about you: (1) information that you voluntarily provide us by using the Service (described below under "Information You Provide to Us") and (2) information collected automatically as result of your use of the Service (described below under "Information We Collect Automatically"). The types and amounts of information collected will vary depending on whether you are signed up as a teacher, School Leader, or parent and how you use Classroom Hero.

Basically,
Classroom Hero asks for some information directly from teachers, School Leaders, and parents (such as account information), and also collects some information automatically (such as crash reports when errors occur) in order to provide you with the best possible Classroom Hero experience.

Information You Provide To Us

We ask for and collect the following personal information about you when you use the Service. This information is necessary either for the adequate performance of the contract between you and us, for our legitimate interest in being able to provide and improve the Service, or to allow us to comply with our legal obligations. Without it, we may not be able to provide you with all the requested services.

There are currently three categories of users on our Service: teachers, School Leaders, and parents. We describe the information collected from students in our Children's Privacy Policy. For other users, we collect and store the following types of information from each type of user:

School Use

Account Sign-up and Profile Information

To create a Classroom Hero account as a teacher, School Leader, or parent, you may be asked to provide some basic information such as your first and last name, email address, password, and an optional profile photo. As a teacher or School Leader, you may be asked to provide school verification information to help us verify your identity and enhance our security.

Teacher Accounts:

First and last name
Email address for account access and communication
Password for account security
Optional profile photo
School information for verification purposes

School Leader Accounts:

First and last name
Email address for account access
Password for account security
School information and verification details
Authority to purchase teacher seats

Parent Accounts:

First and last name
Email address for account verification
Password for account security
Relationship to student (when linking to student accounts)

School Information and Class Setup

If you are a teacher or School Leader, as part of the profile information you provide, you may choose to associate your account with a school. Teachers will provide:

Class Information:

Class name or subject area
Student names (first and last names as entered by teacher)
Class codes for student access
Grade level or subject information

Student Management:

Individual student records created by teachers
Student roster management
Classroom codes for student login access

Gamification and Reward System Data

Teachers create and manage the core gamification features:

Actions and Rewards:

Custom "Actions" defined by teachers (behaviors or achievements to reward)
Point values assigned to each Action
Descriptions and criteria for earning rewards
Records of when students complete Actions and earn points

Virtual Marketplace:

Items created by teachers for their virtual classroom store
Item descriptions, point costs, and availability settings
Purchase configurations (immediate, manual approval, or request-based)
Transaction records and purchase history

Class Goals:

Long-term objectives set by teachers for the entire class
Progress tracking toward collaborative achievements
Goal descriptions and requirements

AI Tool Usage

Teachers may use AI-powered tools to enhance their classroom management:

AI-Generated Content:

Inputs provided by teachers to generate quizzes and assignments
Educational content creation requests
Quiz questions and answer choices generated by AI
Assignment prompts and educational activities

Administrative AI Tools:

Roster management assistance
Classroom organization tools
Educational content suggestions

Points and Progress Tracking

Feedback and Recognition:

Points awarded to students through teacher-defined Actions
Comments and notes associated with point awards
Progress tracking for individual students and class-wide metrics
Achievement milestones and level progression

Analytics and Reporting:

Class performance statistics
Student engagement metrics
Usage patterns and platform analytics
Export capabilities for educational records

Parent Information (Limited Features)

Account Linking:

Basic profile information when linked to student accounts
Relationship verification to student
Contact information for account notifications

Student Progress Viewing:

Access to basic student progress information
Points earned and avatar customizations
General educational activity completion status

Important Note: Unlike comprehensive educational platforms, Classroom Hero does not currently include:

Parent-to-teacher messaging or communication features
Parent-controlled reward systems or point awarding
Detailed academic performance tracking
Social features or parent communities

Information We Collect Automatically

When you use the Service, we (or our service providers) may use various technologies that automatically record or collect certain information from your browser or your device about the services you use and how you use them. This information is necessary given our legitimate interest in being able to provide and improve the Service.

The technologies and information we automatically collect include:

Device Information

We collect device-specific information such as:

Device type, brand, and operating system
Hardware version and settings
Browser type and language settings
Device identifiers for technical support
Crash reports and error logs to improve platform stability

Server Log Information

Like most online services, we automatically collect and store certain information in our server logs:

IP addresses (automatically deleted after six months)
Feature usage and platform interactions
Login timestamps and session information
Error reports and technical diagnostics

Analytics and Usage Data

Product Events: We collect information about how the platform is used:

Feature interactions and button clicks
Time spent on different platform areas
Quiz completions and marketplace transactions
Avatar customizations and game progress

Performance Monitoring:

Platform load times and performance metrics
Error rates and system stability measurements
User engagement patterns and feature adoption

Third-Party Analytics Services

We use limited third-party services to improve our platform:

PostHog: Anonymous analytics data to understand platform usage and improve functionality

Google Analytics: Basic usage statistics and performance metrics

Important Privacy Protection: All student data shared with analytics services is anonymized and cannot be traced back to individual students.

Local Storage and Session Management

Temporary Data Storage:

JWT tokens for secure session management (automatically expire)
Basic preference settings and platform configurations
Important: We do not store student data in browser LocalStorage

No Tracking or Advertising

What We Don't Collect:

We do not use advertising cookies or tracking technologies
We do not collect precise location data from any users
We do not share data with advertising networks or data brokers
We do not track users across other websites or platforms

Data We Do NOT Collect

Sensitive Information:

Social Security numbers or government identification
Precise location or GPS data
Financial information (except teacher subscription payments through Stripe)
Health or medical information
Demographic data (age, race, gender, etc.)

Academic Records:

Official grades or test scores from school systems
Standardized test results
Formal academic transcripts

Social and Communication Data:

Social media profiles or connections
Personal communications outside our platform
Contact lists or address books

Basically,
We ask you for different types of information based on who you are (teacher, School Leader, or parent) and which Classroom Hero features you use. Teachers provide the most information since they create and manage classrooms, while parents have limited viewing access to their child's basic progress. We collect minimal automatic information focused on platform improvement and security, with strong protections for student privacy.

How does Classroom Hero use the information it collects?

First and foremost, you should know that Classroom Hero does not sell or rent any of your, or your child's personal information to any third-party for any purpose – including for advertising or marketing purposes. Third-party advertising is not permitted on Classroom Hero and personal information collected from students is never used for behaviorally-targeted advertising to students or children (by us or third-parties).

Classroom Hero commits that its collection, use, retention and sharing of personal information shall be reasonably necessary and proportionate to achieve the purposes for which the personal information was collected or processed and for the purposes disclosed in this Privacy Policy and that the personal information will not be further processed in a manner incompatible with these purposes. We also offer a Student Data Privacy Addendum, an agreement we enter into with schools or districts that further describes our duties, responsibilities, and commitments with respect to Student Data that we collect or receive.

We use your personal information only when we have a valid legal basis to do so. Our use of information collected from students using the Service is set forth in our Children's Privacy Policy. The information we collect from teachers, School Leaders, and parents is used to:

Power Our Services

This includes operating, providing, enhancing and improving the Service, for example, by developing new products and features, and personalizing or customizing the Service for you. Specifically for Classroom Hero, this includes:

Gamification Platform Operations:

Managing teacher-created Actions and reward systems

Operating the virtual marketplace and point transactions

Maintaining student avatar customization features

Running the Mysteria open-world game environment

Processing AI-generated quizzes and educational content

Account and Classroom Management:

Creating and maintaining teacher, School Leader, and parent accounts

Managing classroom codes and student access

Facilitating School Leader oversight of multiple classrooms

Enabling parent account linking to view student progress

AI Tool Enhancement: For our AI-powered educational tools, Classroom Hero does not use any children's personal information contained in any inputs, prompts, or output to train any of Classroom Hero's artificial intelligence models, but does reserve the right to use de-identified information. Additionally, Classroom Hero does not allow OpenAI, Anthropic, or any other LLM or AI third-party service provider to use any information (personal information or de-identified) to train, improve or develop their artificial intelligence models.

Provide Internal Analytics and Reviews

This includes using information for internal audits and review, for analyzing how the Services are used, providing statistics about usage levels of the Services, and diagnosing service or technical problems. For Classroom Hero specifically:

Platform Improvement:

Analyzing which gamification features are most effective for student engagement

Understanding how teachers use our AI tools to create educational content

Improving the user experience based on interaction patterns

Monitoring platform performance and stability

Educational Effectiveness Research:

Studying how classroom gamification impacts student participation (using anonymized data)

Analyzing usage patterns to improve our educational tools

Understanding feature adoption across different classroom environments

Process Your Transactions

To fulfill your requests and provide any information you request, such as:

Subscription Management:

Processing teacher and School Leader subscription payments through Stripe

Managing free trial periods and subscription renewals

Handling subscription cancellations and account changes

Educational Service Delivery:

Responding to customer support requests from teachers and school administrators

Providing technical assistance and platform guidance

Fulfilling requests for data exports or account modifications

Communicate with You

To send you information about features on our Service or changes to our policies and Service or communicate with you about your use of the Service, your account, or transactions with us. Specifically for Classroom Hero users, this includes:

Account and Subscription Communications:

Sign-up confirmation emails for new teacher and School Leader accounts

Free trial expiration notifications and subscription renewal reminders

Trial expiration warnings and billing notifications

Platform Activity Notifications:

Email notifications to teachers when students request to purchase items from the virtual marketplace

Weekly recap emails summarizing classroom activity and student engagement

Notifications about platform updates, new features, or important announcements

Educational Support Communications:

Informational emails to help teachers and School Leaders understand and maximize platform features

Best practices guides for classroom gamification

Tips for using AI tools effectively in educational settings

Customer Support and Service Communications:

Responses to support requests and technical questions

Security alerts and important account notifications

Administrative messages about platform maintenance or updates

Important Note: Classroom Hero only sends emails to teachers, School Leaders, and parents. Students do not receive email communications directly from our platform.

We may also send teachers, School Leaders, and parents information about educational resources, platform improvements, and features we think will be of interest to you. Personal information is never shared with third-parties in connection with these communications unless you have explicitly opted-in.

Request Your Participation in Surveys or Focus Groups

To request your participation in ratings, reviews, surveys, focus groups, or other initiatives which help us to gather information used to develop and enhance our educational gamification platform and Services. This helps us understand how teachers use classroom management tools and how we can improve the educational experience.

Security and Fraud Prevention

Most crucially, to protect our educational community by making sure the Service remains safe and secure, such as:

Detecting, investigating and preventing activities that may violate our policies or be illegal

Protecting student accounts from unauthorized access

Monitoring for inappropriate content in the Mysteria game environment

Ensuring the security of teacher-created educational content

Preventing abuse of our AI tools or platform features

Enforcing our Terms of Service to maintain a safe educational environment

Comply with Law

To comply with applicable law – for example, to satisfy tax or reporting obligations related to teacher subscriptions, to comply with lawful governmental requests, or to notify you of data privacy incidents when legally required. This includes compliance with educational privacy laws like FERPA and COPPA.

Automated Information Usage

We use automatically collected information (described in the "Information We Collect Automatically" section above) to provide and support our Service, including:

Platform performance monitoring and improvement

Understanding feature usage to prioritize development

Maintaining system security and stability

Providing customer support and troubleshooting

No Automated Decision Making: We do not use algorithms for profiling or to otherwise make any decision based solely on automated processing or AI that would significantly affect you without the opportunity for human review.

Legal Basis for Processing

When acting as a Controller, we process this information given our legitimate interest in improving and protecting the Service and our users' experience with it, taking into consideration your interests, rights, and expectations. Depending on the circumstances, we may also rely on:

Your consent for specific features or communications

The necessity for adequate performance of our contract with you

Protection of vital interests (yours, other persons, or the Service)

Compliance with applicable laws and educational regulations

Marketing Communications

When acting as a Controller, we will process your personal information for marketing and promotional communications given our legitimate interests in offering you educational products and services that may be of interest to you. You can opt-out of receiving marketing communications from us by following the unsubscribe instructions included in our communications or by contacting us directly.

Data Anonymization

Please note that we may anonymize and/or de-identify information collected through the Services so that the information no longer relates to you personally. Subject to applicable laws, where we have anonymized and/or de-identified information, our use and disclosure of such information is not subject to this Privacy Policy and may be used for educational research and platform improvement purposes.

Basically,

Classroom Hero doesn't sell or rent your information to third-parties, we don't permit third-party advertising on Classroom Hero, and personal information collected from students is never used for behaviorally-targeted advertising. We use your information to provide and personalize our educational gamification service, optimize and improve our platform, communicate with you about our Service (including subscription notifications, marketplace requests, and weekly recaps), and for security and safety reasons. We may also use information from teachers, School Leaders, and parents to provide educational resources, platform updates, and services we think will be of interest to you.

Account Linking & Student Data

Please see the “Account Linking” section above and “Sharing Student Data for Non-School Use” section of the Children’s Privacy Policy for more information.

Will Classroom Hero Share any information it collects?

Classroom Hero does not sell or rent your (or your child's) personal information to any third-party for any purpose - including for advertising or marketing purposes. Third-party advertising is not permitted on areas where users are required to log in to Classroom Hero and personal information collected from students is never used for behaviorally-targeted advertising to students (by us or third-parties). Furthermore, we do not disclose personal information with any third-parties except in the limited circumstances described in this Privacy Policy and as set forth below:

Other Users You Share and Communicate with on Classroom Hero

No teacher, School Leader, or parent profiles are made available to the general public through our Service. Furthermore, students cannot share their account information with anyone on Classroom Hero outside of their teacher, School Leaders, and linked parent accounts.

Within the Classroom Environment:

Students can see other students' names and avatars within their class
Students can view classroom leaderboards showing avatar-based treasure hunt progress in the Mysteria game
If teachers choose to display aggregated point totals to the class, students may see classmates' total points (but not individual point-earning details)

Teacher and School Leader Sharing:

Teachers can share their classes with other teachers or School Leaders within their school
School Leaders can view overview information about classes under their supervision
Teachers control what information is visible to students and can adjust privacy settings for their classroom

Parent Access:

Linked parents can view basic information about their child's account and progress
Parents cannot communicate with teachers through our platform
Parent accounts are limited to viewing their own child's information only

Important Note: Unlike comprehensive communication platforms, Classroom Hero does not include messaging, story sharing, or social features between users. Our sharing is limited to the educational gamification experience within teacher-controlled classroom environments.

Please keep in mind that information (including personal information) that you voluntarily share with others - including with other Classroom Hero users you interact with through the Service - can be viewed, copied, stored, and used by the people you share it with. We cannot control the actions of people with whom you choose to share information and we are not responsible for the collection, use, or disclosure of such information by others.

Third-Party Integrations on our Service

Google Login Integration: When teachers, School Leaders, or parents choose to sign up or log in using their Google accounts, Google may receive information about your registration and use of our Service. This integration allows for easier account creation and management, but you can also create accounts directly with Classroom Hero without using third-party authentication.

Limited Third-Party Features: Classroom Hero operates as a standalone platform with minimal third-party integrations. We do not currently integrate with social media platforms, messaging services, or other educational platforms for content sharing purposes.

Service Providers

We work with vendors, service providers, and other partners to help us provide the Service by performing tasks on our behalf. We may need to share or provide information (including personal information) to them to help them perform these business functions. These service providers have limited access to your personal information to perform specific tasks and are contractually bound to protect and use it only for the purpose for which it was disclosed.

Our Essential Service Providers:

DigitalOcean: Database hosting and management services for secure data storage
Stripe: Payment processing for teacher and School Leader subscriptions (does not process any student information or payments)
PostHog: Anonymous analytics data to help us understand platform usage and improve functionality (student data is anonymized before sharing)
Google Analytics: Basic usage statistics and performance metrics (student data is anonymized before sharing)
OpenAI and Anthropic: AI service providers for teacher educational tools with zero data retention contracts for any student information

All service providers must adhere to confidentiality and security obligations consistent with this Privacy Policy and our commitment to student privacy protection.

Analytics Services

We use limited analytics services to help us understand and improve how the Service is being used. These services may collect, store and use information in order to help us understand things like platform usage patterns, feature adoption, and technical performance.

Important Student Privacy Protection: All student information shared with analytics services is anonymized and cannot be traced back to individual students. We only share aggregated, de-identified usage patterns that help us improve our educational platform.

Aggregated Information and Non-Identifying Information

As allowed by applicable laws, and in compliance with our Student Data Privacy Addendum, we may share aggregated information (information about our users that we combine together so that it no longer identifies or references an individual user) and other de-identified or non-personally identifiable information with third parties to:

Demonstrate how the Service is used for educational research
Spot trends in educational technology and gamification
Assist third parties in understanding educational engagement patterns
Provide evidence of our platform's educational effectiveness

Any aggregated information shared this way will not contain any personal information. If your school or district has entered into a custom Student Data Privacy Addendum, any additional restrictions on the disclosure of Student Data or de-identified data will be set forth there.

Legal Requirements

We may disclose information, including personal information, if we have a good faith belief that doing so is necessary to comply with the law, such as complying with a subpoena or other legal process. We may need to disclose personal information where, in good faith, we think it is necessary to:

Protect the rights, property, or safety of Classroom Hero, our employees, our educational community, or others
Prevent violations of our Terms of Service or other agreements
Respond to law enforcement and government requests
Defend ourselves against legal claims and allegations

Where appropriate, we may notify users about legal requests, unless providing notice is prohibited by the legal process, court order, or applicable law, or we believe providing notice would be futile, ineffective, or create safety risks.

Fraud and Security Protection

We may share information to assist with security operations, including:

Scheduled security auditing and penetration testing
Continuous improvement of our security practices
Fraud protection for our educational platform
Protecting student accounts from unauthorized access

Authorized parties receiving this information comply with our current privacy and security policies.

Sharing with Classroom Hero Companies

Over time, Classroom Hero may grow and reorganize. We may share your personal information with affiliates such as a parent company, subsidiaries, joint venture partners, or other companies that we control or that are under common control with us, in which case we will require those companies to agree to use your personal information in a way that is consistent with this Privacy Policy.

Change of Control

In the event that all or a portion of Classroom Hero or its assets are acquired by or merged with a third-party, this Privacy Policy will continue to apply to your information, and any acquirer would only be able to handle your personal information as per this policy (unless you give consent to a new policy). We will provide you with notice of an acquisition within thirty (30) days following the completion of such a transaction, by posting on our homepage, or by email to your email address that you provided to us. If you do not consent to the use of your personal information by such a successor company, subject to applicable law, you may request its deletion from the company.

In the unlikely event that Classroom Hero goes out of business: We will protect your personal information and will not sell it to any third-party. We are committed to maintaining the same privacy protections even in business transitions.

With Your Consent

Other than the cases above, we won't disclose your personal information for any purpose unless you consent to it.

What We Do NOT Share

No Commercial Data Sharing: We never share personal information for commercial, marketing, or advertising purposes with third parties.
No Social Media Marketing: We do not share user information with social media platforms for marketing or advertising purposes.
No Data Brokers: We do not provide information to data brokers or similar commercial entities.
No Cross-Platform Tracking: We do not participate in cross-platform tracking or advertising networks.
Student Data Protection: Student personal information is never shared outside of the educational environment except as required by law or for essential service provision.

Basically,
Classroom Hero doesn't sell or rent your personal information to any third-parties. We believe your information is yours, and you should own it - we think that's the right way to operate an educational platform. We share information only with essential service providers who help us provide the educational gamification service – like companies that help us host our database securely or process teacher subscription payments. You may also choose to use Google login for easier account access.

If Classroom Hero is ever acquired or goes out of business, our commitments don't change: we still won't sell or rent your personal information to anyone. Your personal information will continue to be protected by this policy, and any company that acquires Classroom Hero will have to abide by this policy unless you give consent to a new policy.

How does Classroom Hero protect and secure my information?

The security of your personal information is important to us. The safety and security of your personal information also depends on you and you should maintain good internet security practices. Where you have password-protected access to an account or certain parts of the Services, you are responsible for keeping this password secure at all times. You should not share your password with anyone. You must prevent unauthorized access to your account and personal information by selecting and protecting your password appropriately and limiting access to your computer or mobile device and browser by signing off after you have finished accessing your account.

Student Account Security: Students access their accounts through teacher-provided classroom codes and may set optional 4-digit security codes to prevent other students from accessing their accounts. Teachers can override these student security codes when necessary for classroom management.

Account Compromise: If you think that any of your accounts have been compromised you should change your account credentials with us immediately. In particular make sure any compromised account can't access Classroom Hero. We will never email you to ask for your password or other account login information. If you receive such an email, please send it to us so we can investigate.

We work hard to protect our educational community, and we maintain reasonable administrative, technical, and physical security procedures and practices appropriate to the nature of the personal information designed to protect personal information from unauthorized or illegal use, destruction, disclosure, or access. In particular:

Technical Security Measures

Encryption and Data Protection:

When you enter any information anywhere on the Service, we encrypt the transmission of that information using secure socket layer technology (SSL/TLS) by default
Classroom Hero's databases where we store your personal information are encrypted at rest through DigitalOcean's managed database service. This converts your personal information into a form that unauthorized users can't translate
We ensure passwords are stored and transferred securely using encryption and salted hashing
We use MD5 hashing for student usernames to provide additional privacy protection

Database and Hosting Security:

The Service is hosted on DigitalOcean servers with enhanced security measures and industry-standard protections
Our database infrastructure includes automated daily backups with secure storage
Personal information is stored on servers equipped with industry-standard firewalls
The hosting facility provides 24x7 security monitoring and intrusion detection systems
LUX Security Integration: Our DigitalOcean infrastructure includes LUX security protocols that provide additional layers of protection for data at rest, ensuring enterprise-grade security standards for all stored educational information.

Session Management:

We use temporary JWT (JSON Web Tokens) to maintain secure student login sessions
Session tokens automatically expire to prevent unauthorized long-term access
We do not store student data in browser LocalStorage for additional privacy protection

Administrative Security Practices

Access Controls:

We restrict access to personal information to authorized Classroom Hero employees who need to know that information in order to process it for us
Our small team (currently two founders) ensures tight control over data access
All personnel are subject to strict confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations

Security Monitoring and Testing:

Our engineering team is dedicated to keeping your personal information secure
We perform application security testing and conduct risk assessments
We periodically review our information collection, storage, and processing practices to guard against unauthorized access to systems
Whenever we develop new features, we do so in a manner to keep your personal information safe

Teacher and School Controls:

Teachers have complete control over student data and can delete individual students, classes, or entire accounts at any time
School Leaders can oversee multiple classrooms while maintaining appropriate access controls
We provide clear data export and deletion capabilities for educational institutions

Data Retention and Deletion Security

Automatic Cleanup:

We automatically delete inactive teacher accounts after 12 months of inactivity, removing all associated student data
Server logs and IP addresses are automatically deleted after six months
Product event logs containing IP addresses are purged after six months

Teacher-Controlled Deletion:

Teachers can immediately delete student accounts and all associated data through their dashboard
All deletion requests are processed immediately and permanently
We provide clear instructions for account deletion at https://classroomhero.com/deactivate

Educational Environment Security

Student-Specific Protections:

Students cannot create accounts independently - all accounts are teacher-managed
Student access is controlled through teacher-provided classroom codes
We use anonymized identifiers and MD5 hashing to protect student identity
No student personal information is shared with external analytics providers

Classroom Isolation:

Student data remains within their specific classroom environment
Cross-classroom access is limited to authorized school personnel only
Parents can only view their own child's basic progress information

Payment and Financial Security

Subscription Security:

All payment processing is handled securely through Stripe
We do not store credit card information directly
Students cannot make any payments through the platform
Only teachers and School Leaders can manage subscription payments

Third-Party Security

Service Provider Protections:

All service providers are contractually bound to protect personal information
We maintain zero data retention contracts with AI providers (OpenAI, Anthropic)
Analytics providers (PostHog, Google Analytics) receive only anonymized data
All third-party integrations are essential to service operation and subject to strict privacy requirements

Incident Response and Communication

Security Breach Notification: Although we make concerted good faith efforts to maintain the security of personal information, and we work hard to ensure the integrity and security of our systems, no practices are 100% immune, and we can't guarantee the security of information. Outages, attacks, human error, system failure, unauthorized use, or other factors may compromise the security of user information at any time.

If we learn of a security breach, we will attempt to notify you electronically (subject to any applicable laws and school reporting requirements) so that you can take appropriate protective steps. For example, we may:

Post a notice on our homepage (www.classroomhero.com) or elsewhere on the Service
Send email to you at the email address you have provided to us
Notify schools and districts directly for coordination with their security protocols

Depending on where you live, you may have a legal right to receive notice of a security breach in writing.

What You Can Do to Help

Best Practices:

Keep your passwords secure and don't share them with anyone
Sign out of your account when finished, especially on shared computers
For teachers: Manage student classroom codes securely
For students: Keep your 4-digit security code private (if you choose to set one)
Report any suspicious activity to your teacher or to us immediately

Google Login Security:

If you use Google login for account access, your account security also depends on your Google account security practices. Make sure to:

Use strong passwords for your Google account
Enable two-factor authentication on your Google account
Keep your Google account recovery information up to date

Basically,
The security of your information is important to us, and we take it very seriously. We're always adding safeguards to ensure the safety and security of Classroom Hero and our educational community of teachers, School Leaders, parents, and students. You can help us out by keeping your password secret! When you enter personal information anywhere on the Service, we encrypt the transmission of that information using SSL by default. Classroom Hero's databases where we store your personal information are encrypted at rest through DigitalOcean's secure infrastructure, which converts all personal information stored in the database to an unintelligible form. Teachers have complete control over student data and can delete it at any time for maximum privacy protection.

How long does Classroom Hero keep information about me?

We retain the data we collect for different periods of time depending on what it is, how we use it, and how you configure your settings.

Non-Student Users (Teachers, School Leaders, and Parents)

We store your personal information for as long as it is necessary to provide the Service to you and others. We determine the appropriate retention period for personal information on the basis of the amount, nature and sensitivity of the personal information being processed, the potential risk of harm from unauthorized use or disclosure of the personal information, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements (such as applicable statutes of limitations).

Account-Based Retention: Personal information associated with your account will be kept until your account is deleted, unless we no longer need the data to provide products and services, in which case we will delete prior to you deleting your account.

Teacher Account Deletion: You can delete your account at any time through your dashboard or by following the instructions at https://classroomhero.com/deactivate. When a teacher deletes their account, all associated class and student data is permanently removed from our systems.

Automatic Account Deletion: We automatically delete teacher accounts that have been inactive for 12 months or more, along with all associated student and class data.

Specific Retention Periods:

Teacher and School Leader Data:

Account information: Retained until account deletion
Subscription and billing information: May be retained longer for financial compliance purposes
Class setup data: Deleted with teacher account
AI tool usage data: Deleted with teacher account

Parent Account Data:

Basic profile information: Retained until account deletion or unlinking from student
Viewing history: Deleted with account removal

Communication and Support Records:

Customer support communications: May be retained for reasonable periods for service improvement and legal compliance
Platform usage analytics: May be retained in anonymized form for service improvement

Additional Retention Scenarios

Even after account deletion, we may need to retain some information in specific circumstances:

Legal and Compliance Requirements:

Financial recordkeeping: When you make subscription payments, we may be required to retain payment information for tax compliance, dispute resolution, and anti-fraud purposes
Legal obligations: To comply with applicable laws, regulations, or legal processes
Educational compliance: Some classroom data may be considered "education records" under FERPA or state student privacy laws and may need to be retained at the direction of schools

Customer Support Records: If you have directly communicated with us through customer support channels, feedback forms, or bug reports, we may retain reasonable records of those communications for service improvement and support purposes.

Security and Safety: To protect the safety and security of our educational community or our Service, or to prevent abuse of our Terms of Service.

Technical Data Retention

Server Logs and Analytics:

IP addresses in server logs: Automatically deleted after 6 months
Product event logs: IP addresses automatically deleted after 6 months
Anonymous analytics data: May be retained indefinitely as it cannot identify individuals

Backup and Recovery:

Even if you delete your account, keep in mind that:

Deletion by our service providers (like DigitalOcean) may not be immediate
Deleted information may persist in backup copies for a reasonable period of time (daily backup retention through DigitalOcean)
We may retain de-identified information for as long as we deem appropriate or as otherwise allowed by law

Student Users

Retention and deletion of Student Data and education records is at the direction of the school and the individual teacher. We enter into Student Data Privacy Addendums with schools or districts that further describes our duties, responsibilities, and commitments with respect to Student Data that we collect or receive.

Teacher-Controlled Retention:

Teachers have complete control over student data retention
Teachers can delete individual student records, entire classes, or their complete account at any time
When teachers delete their accounts, all associated student data is permanently removed

School-Directed Retention:

Schools may request specific retention periods for educational compliance
Some student activity data may be considered "education records" and retained as directed by educational institutions
Custom retention periods may be established in Student Data Privacy Addendums

For complete details on student data retention, please see "How Long Does Classroom Hero Keep Children's Information?" in our Children's Privacy Policy.

Data Deletion Process

Teacher-Initiated Deletion:

Teachers can delete their account through the dashboard settings
All associated student and class data is immediately marked for deletion
Data is permanently removed from active systems
Backup systems are updated according to our retention schedule

Parent-Requested Deletion:

Parents can request deletion through their child's teacher
Teachers can immediately delete specific student accounts
Parents can also contact us directly for assistance with deletion requests

School-Directed Deletion:

Schools can request deletion of specific student data or entire class information
We comply promptly with school-directed deletion requests
Custom deletion procedures may be established in Student Data Privacy Addendums

Geographic and Legal Variations

Depending on where you live, you may have additional rights regarding data retention and deletion:

Right to erasure under GDPR and similar privacy laws
Specific retention limits under state student privacy laws
Required notification periods for data retention changes

We comply with applicable data protection laws in all jurisdictions where we operate.

What Happens to Shared Information

Third-Party Service Providers:

When we delete your information, we also work to ensure deletion from our service providers:

DigitalOcean: Database records are permanently deleted
Analytics Services: Only anonymized data is shared, so personal information cannot be retrieved
AI Providers: Zero data retention contracts ensure no personal information is retained

De-identified Data:

We may retain de-identified and aggregated information that cannot be traced back to individual users for:

Platform improvement and educational research
Compliance with reporting obligations
Understanding educational technology effectiveness

Basically,
We keep teacher, School Leader, and parent personal information until your account is deleted, or until we no longer need it to provide you with the Service. Teachers have complete control over student data and can delete it immediately at any time. We automatically delete inactive teacher accounts after 12 months. Please see "How Long Does Classroom Hero Keep Children's Information?" for complete details on student data retention. You can delete your account at any time through your dashboard or by contacting us. Even after deletion, some information may persist in backups for a reasonable period, and we may need to keep certain information to comply with legal obligations or protect our educational community. We may retain de-identified information for platform improvement purposes as allowed by law.

What are Classroom Hero's commitments to providing transparency and rights?

We try to be transparent about what information we collect so that you can make meaningful choices about how it is used. You control the personal information you share with us. You may have certain rights relating to your personal information, subject to local data protection laws. Please review local data protection laws for more information. Depending on the applicable local laws these rights may include the rights set forth in this Section. You also have the right not to be discriminated against for exercising any of your rights set forth in this Section.

If you are a California resident, you may have additional rights as set forth under the California Consumer Privacy Act, as amended by the California Privacy Rights Act and its implementing regulations (collectively the "CCPA"). Additionally, if you are a resident of certain other states within the United States, you may have additional rights as set forth in applicable state privacy laws.

Basically,
At Classroom Hero, we believe that more transparency is better. We try to give you control, with easy settings and options, so that you can make good choices when it comes to your information and how it is used. We also set forth the ways in which you can exercise your rights to access, correct, and delete your personal information as well as your right to take information out of Classroom Hero and object or withdraw consent. If you are a California resident, you may have additional rights as set forth under the CCPA.

How to Exercise Your Rights

You may exercise any of these rights described in this section by contacting us directly at privacy@classroomhero.com from the email address associated with your account. Please note that we may ask you to verify your identity before taking further action on your request, for example by requiring you to provide acceptable forms of personal identification. Your personal information may be processed in responding to these rights. We try to respond to all legitimate requests within one month unless otherwise allowed or required by law, and will contact you if we need additional information from you in order to honor your request or verify your identity. Occasionally it may take us longer than a month, taking into account the complexity and number of requests we receive.

For School-Based Requests: If you are an employee of a school or district using Classroom Hero, we recommend you contact your school's system administrator for assistance in correcting or updating your information, as schools may have their own policies and procedures for managing educational technology data.

Student Data Requests: For requests relating to student personal information, please see our "Parental Choices" section in our Children's Privacy Policy for specific procedures.

We may reject requests for access, change, or deletion that are unreasonably repetitive (more than two identical or substantially similar requests per year for access rights), risk the privacy of others, require disproportionate technical effort (for example, developing a new system or fundamentally changing an existing practice), or would be extremely impractical. Where we can provide information access and correction, we will do so for free, except where it would require a disproportionate effort or if more than two times a year for access rights.

Basically,
To exercise your rights, please contact us at privacy@classroomhero.com from the email address associated with your account. We will respond to all legitimate requests within one month unless otherwise allowed or required by law, and will contact you if we need additional information.

Access or Correct Your Personal Information

Classroom Hero aims to provide you with easy access to any personal information we have collected about you and give you easy ways to update it or delete it, unless we have to keep that information for legitimate business purposes (e.g., we need at least an email address for your account if you maintain an account with us) or legal purposes. You have the right to correct inaccurate or incomplete personal information concerning you (and which you cannot update yourself within your Classroom Hero account).

Managing Your Information

Teacher and School Leader Accounts: If you have registered for an account on Classroom Hero, you may update, correct, or delete some of your profile information or your preferences at any time by logging into your account and accessing your account settings page. You may have to verify your identity before you can do that.

Parent Accounts: Parents with linked accounts can view and request corrections to their basic profile information through their account or by contacting their child's teacher.

Student Information Management: Teachers have complete control over student data and can update, correct, or delete student information at any time through their dashboard.

Accessing Your Information

Upon request, Classroom Hero will provide you with information about whether we hold any of your personal information. If you are a user of Classroom Hero, you may request access to all your personal information we have on file by contacting us at privacy@classroomhero.com. In some cases, we won't be able to guarantee complete access due to legal restrictions - for example, you will not be allowed to access files that contain information about other users or information that is confidential to us.

Accessing Your Child's Information

Visit our "Parental Choices" section in our Children's Privacy Policy to see how you can obtain copies of your child's personal information. Since Classroom Hero operates primarily through teacher-managed accounts with school consent, most requests for student information should be directed to your child's teacher or school first.

If we receive a request relating to personal information that we hold on behalf of a school acting as the data controller, we will either refer you to the school or handle the request directly if authorized by the school.

Basically,
You have certain rights to access, update and correct your personal information. Teachers can always access and manage student information through their Classroom Hero dashboard. Parents and other users can contact us at privacy@classroomhero.com or your child's school if they created your child's account.

How Can I Delete My Personal Information or Account?

We hope you love using Classroom Hero now and always. However, if for some reason you ever want to delete your account (or your child's account, if you are their parent), you can do that at any time.

Teacher and School Leader Account Deletion

Dashboard Deletion: Teachers and School Leaders can delete their accounts by logging into their account and accessing their account settings page, or by following the instructions at https://classroomhero.com/deactivate.

Complete Data Removal: When a teacher deletes their account, we delete all profile information and associated classroom data, including:

All student accounts and progress data
Virtual marketplace and point system data
Avatar customizations and game progress
AI tool usage history
Class setup and configuration data

Parent Account Deletion

Parents can delete their accounts by contacting us at privacy@classroomhero.com or by requesting unlinking from their child's teacher.

Student Account Deletion

Since student accounts are created and managed by teachers, parents who want their child's account deleted should:

Contact their child's teacher directly to request account deletion
Contact the school administration if needed
Contact us at privacy@classroomhero.com for assistance

Important Notes About Deletion: Even after account deletion, please note that:

Some classroom activity data may be considered "education records" under FERPA or state student privacy laws and may be retained at the direction of the school for legal compliance reasons
If you would like this content deleted, please first make a request to your child's school. If the school determines that the request should be implemented, they may submit the request to Classroom Hero
Information may be retained in backup copies for a reasonable period of time as necessary for legitimate business interests, such as fraud detection and prevention
We may retain and use personal information to the extent necessary to comply with our legal obligations

What Gets Deleted Immediately

When you delete your account, we immediately delete:

Your profile information (username, password, email address, profile photos)
Classroom configurations and settings (for teachers)
Student progress and gamification data (when teachers delete accounts)
AI tool inputs and usage history
Virtual marketplace transaction records

Basically,
You can always delete your account by visiting your account settings at https://classroomhero.com/deactivate, or by contacting us at privacy@classroomhero.com from the email used to create your account. Teachers have complete control over student data deletion and can remove student accounts immediately. Please note that some content may not be deleted given various compliance and recordkeeping obligations schools have under FERPA or state student privacy laws. Please contact your child's school if you would like all educational records deleted.

Object, Restrict, or Withdraw Consent

Where you have provided your consent to the processing of your personal information by Classroom Hero you may withdraw your consent at any time by changing your account settings or by sending a communication to Classroom Hero specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.

Marketing Communications

Classroom Hero provides teachers, School Leaders, and parents with the opportunity to withdraw consent or 'opt-out' of receiving any future marketing communications from Classroom Hero at any time. You can:

Follow unsubscribe instructions in any marketing email
Contact us at privacy@classroomhero.com to opt out
Adjust email preferences in your account settings

Data Processing Consent

Additionally, you can always decline to share personal information with us. However, it's important to remember that many of Classroom Hero's features may not be accessible, or may not function properly without certain information - for example, we need at least an email address to maintain your teacher account.

Legal Rights to Object or Restrict

In some jurisdictions, applicable law may entitle you to ask Classroom Hero not to process your personal information for certain specific purposes (including profiling) where such processing is based on legitimate interest. If you object to such processing, Classroom Hero will no longer process your personal information for these purposes unless we can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defense of legal claims.

Additionally, in some jurisdictions, applicable law may give you the right to limit the ways in which we use your personal information, in particular where:

You contest the accuracy of your personal information
The processing is unlawful and you oppose the erasure of your personal information
We no longer need your personal information for the purposes of the processing, but you require the information for the establishment, exercise or defense of legal claims
You have objected to the processing and pending verification whether our legitimate grounds override your own

Basically,
You have the right to withdraw consent for the collection of your personal information, and also opt-out of marketing communications from us. You may also be able to limit the ways in which Classroom Hero uses your personal information. Email us at privacy@classroomhero.com from the email used to create your account and we'll help you right away.

Additional Information or Assistance

If you have questions about exercising any of these rights or need assistance with your personal information, please contact us at privacy@classroomhero.com. We are committed to helping you understand and exercise your privacy rights.

Educational Data Requests

For student data requests, remember that:

Teachers have immediate control over student data and can delete it instantly
Schools may have additional policies for managing educational technology data
Some educational records may be subject to FERPA requirements and school policies

Compliance with Local Laws

If you are located in the European Union, the EEA, the United Kingdom, or other jurisdictions with specific data protection laws, you may have additional rights under those laws. We comply with applicable data protection regulations worldwide.

Basically,
We're here to help you exercise your privacy rights. Contact us at privacy@classroomhero.com with any questions or requests. For student data, remember that teachers have complete control and can delete information immediately, while some educational records may be subject to school policies and legal requirements.

What communications will I receive from Classroom Hero?

If you registered on Classroom Hero (including through Google Login), provided an email address to us, or otherwise opted-in to receive communications from us, you consent to us sending you messages and updates regarding your account and the Services, including privacy and security notices, updates regarding the Service, and information regarding products, features or services from Classroom Hero we believe you may be interested in.

Important Note: We do not send communications about third-party products, features or services to students. Students do not receive any email communications directly from Classroom Hero. These communications are sent only to teachers, School Leaders, and parents.

Types of Communications We Send

Account and Service Communications

For Teachers and School Leaders:

Account sign-up confirmation emails
Free trial expiration notifications
Subscription renewal reminders and billing notifications
Security alerts and important account notifications
Customer service communications related to your account
Platform maintenance and service announcements

Educational Activity Notifications

For Teachers:

Email notifications when students request to purchase items from the virtual marketplace
Weekly recap emails summarizing classroom activity and student engagement
Notifications about new students joining your class or Class Goal achievements

Product and Educational Information

For Teachers, School Leaders, and Parents:

Informational emails to help you understand and maximize platform features
Best practices guides for classroom gamification and student engagement
Updates about new features, AI tools, or platform improvements
Educational resources and tips for effective classroom management

Legal and Compliance Communications

For All Users:

Privacy policy updates and security notices
Terms of Service changes
Data breach notifications (if required by law)
Educational compliance updates related to FERPA or student privacy

Customer Support

If you have an account with us, we'll also use your email address to contact you for customer support purposes, or for any legal matters that arise in the course of business. We may receive a confirmation when you open an email from us if your device supports it. We use this confirmation to help us understand which emails are most interesting and helpful.

School-Directed Communications

If, as a parent/legal guardian of a student, you provided an email address to your child's school, Classroom Hero, at the direction of the school, may send an invitation to join Classroom Hero via the email address your student's teacher provided to Classroom Hero. The invitation (and any invitation reminders) will be sent via email. When providing your email to your child's school, you are consenting to Classroom Hero (on behalf of and at the direction of your child's school) sending informational emails closely related to the school's educational mission.

School-Based Invitations May Include:

Initial invitations to link your parent account to your child's student account
Instructions for accessing your child's progress information
Important updates about your child's classroom use of Classroom Hero

What We Do NOT Send

No Student Communications: Students never receive emails directly from Classroom Hero. All student interactions are through the web platform during classroom use.
No Phone/SMS Communications: We do not collect phone numbers or send SMS messages to any users.
No Third-Party Marketing: We do not send marketing communications about third-party products or services.
No Social Media Integration: We do not send communications through social media platforms.

How to Manage Your Communication Preferences

Unsubscribing from Marketing Communications

You can always unsubscribe from receiving marketing emails or other promotional communications whenever you'd like by:

Clicking the "Unsubscribe" link at the bottom of any marketing email
Contacting us directly at privacy@classroomhero.com
Adjusting your email preferences in your account settings (when available)

Important Service Communications

Please note that opting out of marketing communications does not opt you out of receiving important business communications related to your current relationship with us, such as:

Communications about your teacher or School Leader subscriptions
Service announcements or security information
Platform maintenance notifications
Customer support responses
Legal notices or compliance updates

Teacher Controls

Teachers can manage:

Weekly recap email frequency and content
Marketplace notification settings
New feature announcement preferences
Educational resource email frequency

School Leaders can manage:

Multi-classroom notification preferences
Teacher management communications
Platform usage report emails

Consent and Legal Requirements

Opt-In Consent

By creating an account and providing your email address, you consent to receiving the communications described above. If you reside in Canada or other jurisdictions that require explicit opt-in consent, you may have also opted in to receive future promotional electronic communications from us.

Communication Purposes

If you opt-in to receive communications, we may use your email address to:

Communicate with you regarding our educational platform, services and features
Provide you with information that you request about classroom gamification
Improve our product and service offerings based on engagement feedback
Send important updates about educational technology and student privacy

Ongoing Consent Management

You will always have the opportunity to "unsubscribe" from promotional communications at any time by clicking the "unsubscribe" link at the bottom of any email. We provide an ongoing opportunity to unsubscribe or opt-out of contact by us as set out on our website or by contacting us by email at privacy@classroomhero.com.

Post-Unsubscribe Communications

If you decide to unsubscribe from marketing communications, we will only contact you thereafter:

For purposes allowed under applicable law
To receive service-related messages essential to your account
For customer support responses to your direct inquiries
For legal or compliance notifications

For example, if you unsubscribe from marketing communications, it will not limit our ability to send transactional communications to you regarding subscription services you have requested or important security updates.

Communication Security and Privacy

Email Security: All communications are sent through secure email systems with appropriate privacy protections.
No Data Sharing: We do not share your email address with third parties for their marketing purposes.
Educational Context: All communications respect the educational nature of our platform and maintain appropriate professional tone and content.

Basically,
From time to time, we may send you useful messages about platform updates, new educational features, marketplace notifications, subscription reminders, and weekly classroom recaps. These communications are sent only to teachers, School Leaders, and parents - never directly to students. You can always opt-out of marketing messages if you'd rather we didn't contact you, but you'll still receive important service-related communications about your account and subscriptions.

Third Party Authentication Services

If you decide to register for a Classroom Hero account through an authentication service, such as Google Sign-In (web and iPhone app) or Apple Sign-In (iPhone app only) ("Authentication Service"), Classroom Hero may collect personal information that is already associated with your account connected to the Authentication Service (e.g. name, email address and photo). If you choose to provide such information during registration, you are giving Classroom Hero the permission to store and use such information already associated with your Authentication Service in a manner consistent with this Privacy Policy. Please note that if you as a parent, teacher, or School Leader provide a photo in connection with the Authentication Service, we may use this photo as your default profile photo on the Service.

Our Current Authentication Services:

Google Sign-In: Available for web platform and iPhone app for teachers, School Leaders, and parents
Apple Sign-In: Available for iPhone app only for teachers, School Leaders, and parents

Information We Collect Through Authentication Services

For Teachers, School Leaders, and Parents

When you use Google Sign-In or Apple Sign-In, we may collect:

Name (first and last name)
Email address
Profile photo (optional, used as default profile picture if provided)

Important Student Privacy Protection

Students do not use Authentication Services. Students access Classroom Hero exclusively through teacher-provided classroom codes and cannot sign up using Google or Apple authentication. This provides additional privacy protection by:

Preventing students from accidentally sharing personal information from external accounts
Ensuring all student access is controlled and supervised by teachers
Maintaining the teacher-controlled environment that is central to our platform

How We Use Authentication Service Information

Account Creation and Management:

Your name and email address are used to create and manage your Classroom Hero account
Email addresses are used for account verification, password resets, and important service communications
Profile photos (if provided) become your default avatar on the platform

Service Integration:

Authentication Services allow for easier account creation and login
You don't need to remember a separate password for Classroom Hero
Account information stays synchronized with your chosen Authentication Service

Privacy Protection:

We only request the minimum information necessary for account operation
We do not access your broader Google or Apple account data beyond what you explicitly authorize
Your authentication is handled securely through the respective service's protocols

Authentication Service Privacy and Control

Your Control Over Information

You may revoke Classroom Hero's access to your account on any Authentication Service at any time by:

Updating the appropriate settings in the account preferences of your Google or Apple account
Managing third-party app permissions in your authentication service settings
Contacting us directly to disconnect the authentication service from your Classroom Hero account

Privacy Settings and Data Access

You should check your privacy settings on each Authentication Service to understand and change the information sent to us through each Authentication Service. Please review each Authentication Service's terms of use and privacy policies carefully before using their services and connecting to our Service.

For Google Sign-In:

Review your Google Account permissions and third-party app access
Manage what information Google shares with Classroom Hero
Your use of Google Sign-In is subject to Google's terms of service and privacy policy

For Apple Sign-In:

Review your Apple ID privacy settings and app permissions
Control what information Apple shares with Classroom Hero
Your use of Apple Sign-In is subject to Apple's terms of service and privacy policy

Revoking Access

If you revoke Classroom Hero's access to your Authentication Service:

You can still access your Classroom Hero account using your email and password
Your existing account data and classroom information will remain intact
You may need to create a direct password for future logins to Classroom Hero

Important Security Considerations

Enhanced Security:

Authentication Services often provide stronger security than traditional passwords
Two-factor authentication from your Google or Apple account extends to your Classroom Hero access
We benefit from the robust security infrastructure of major authentication providers

Account Security:

Your Classroom Hero account security is linked to your Google or Apple account security
Keep your authentication service account secure with strong passwords and two-factor authentication
Monitor your authentication service account for any suspicious activity

Educational Environment Protection:

Teachers and School Leaders can use trusted authentication services while maintaining full control over classroom data
Student privacy is protected by not using authentication services for student accounts
School policies about authentication services can be respected while using Classroom Hero

Third-Party Service Considerations

Your use of Authentication Services is subject to the applicable third-party terms and privacy policies:

Google Sign-In:

Subject to Google's Privacy Policy and Terms of Service
Google may collect additional information about your use of their authentication service
Review Google's educational privacy policies if using a Google for Education account

Apple Sign-In:

Subject to Apple's Privacy Policy and Terms of Service
Apple may collect information about your use of their authentication service
Apple's privacy-focused approach aligns with our commitment to user privacy

Data Processing: The Authentication Service may collect certain other information from you in your use of that particular service. We do not control what additional data Google or Apple may collect when you use their authentication services, so please review their privacy policies directly.

Platform-Specific Availability

Web Platform:

Google Sign-In available for teachers, School Leaders, and parents
Apple Sign-In not available on web (per Apple's technical requirements)

iPhone App:

Both Google Sign-In and Apple Sign-In available
Teachers, School Leaders, and parents can choose their preferred method
Students still access through teacher-provided classroom codes only

Android and Other Platforms:

We currently focus on web and iPhone platforms
Authentication service availability may vary as we expand platform support

Basically,
We allow teachers, School Leaders, and parents to register on our Service through Google Sign-In (web and iPhone) or Apple Sign-In (iPhone only). If you choose to do so, we collect basic personal information (name, email, and optional photo) that is already associated with your connected Authentication Service, and you give us permission to use and store this information consistent with this Privacy Policy. Students do not use authentication services and access Classroom Hero only through teacher-provided classroom codes. You can revoke our access to your Authentication Service account at any time by updating the appropriate settings in your Google or Apple account.

Third Party Services

The Classroom Hero Service may contain limited links to websites, applications, services, or other content provided by third parties in specific contexts such as our main website, help documentation, or support materials. However, teachers and School Leaders cannot place third-party links anywhere within the platform that students would access.

Important Platform Limitation: Unlike some educational platforms, Classroom Hero does not allow teachers or School Leaders to embed external links, videos, or third-party content within the classroom environment that students access. This design choice provides enhanced security and privacy protection for students by:

Preventing accidental exposure to external websites
Maintaining a controlled educational environment
Reducing privacy risks from third-party data collection
Ensuring all student interactions remain within our secure platform

Where Third-Party Content May Appear

Limited Third-Party Integration

The only third-party content that may appear in Classroom Hero includes:

Authentication Services:

Google Sign-In and Apple Sign-In for teacher, School Leader, and parent account access only
Students do not interact with these authentication services

Essential Service Providers:

DigitalOcean for secure database hosting (not visible to users)
Stripe for teacher and School Leader subscription processing (not accessible to students)
Anonymous analytics services (PostHog, Google Analytics) that students do not interact with

Support and Documentation:

Our help documentation or support materials may contain links to external resources for teachers and School Leaders
These materials are not accessible to students through the platform

No Student Exposure to Third-Party Content

Students using Classroom Hero will not encounter:

External website links embedded in their classroom experience
Third-party video players or embedded content
External educational resources linked by teachers within the platform
Social media integrations or external service connections

Privacy and Security Protections

Controlled Environment Benefits

By not allowing third-party links within the student-accessible areas of the platform, we provide:

Enhanced Privacy Protection:

No risk of student data being shared with unknown third parties
No tracking cookies from external websites
No accidental disclosure of student information to external services

Security Benefits:

Reduced risk of malicious links or inappropriate content
No external dependencies that could compromise platform security
Complete control over the student educational experience

Compliance Advantages:

Easier compliance with COPPA and educational privacy regulations
Clear data flow with no unknown third-party integrations
Simplified privacy policy without complex third-party considerations

Teacher and School Leader Considerations

Platform Limitations:

Teachers cannot embed YouTube videos or other external media within student assignments
External educational resources cannot be linked directly within the classroom gamification environment
Third-party educational tools cannot be integrated into the Classroom Hero platform

Alternative Approaches:

Teachers can reference external resources in their offline lesson plans
Schools can use their existing systems (like learning management systems) for external content
Teachers can mention external resources verbally without embedding them in the platform

Legal and Privacy Implications

Third-Party Privacy Policies

For the limited third-party services we do use (authentication, hosting, payment processing), users should be aware that:

Authentication Services:

Google Sign-In and Apple Sign-In are subject to their respective privacy policies
Only teachers, School Leaders, and parents interact with these services
Students are completely isolated from external authentication requirements

Service Providers:

Essential service providers like DigitalOcean and Stripe have their own privacy policies
These services operate behind the scenes and students do not interact with them directly
We maintain contractual agreements to protect user data with all service providers

Our Responsibility and Limitations

What We Control:

The security and privacy of all content within the Classroom Hero platform
All interactions between teachers, students, and parents within our service
Data protection for all user-generated content and platform activity

What We Don't Control:

Any external websites teachers may reference outside our platform
Third-party authentication service policies (though we limit data sharing)
Other educational technology tools schools may use alongside Classroom Hero

Platform Design Philosophy

Security-First Approach

Our decision to not allow third-party links within the student-accessible platform reflects our commitment to:

Student privacy and data protection
Simplified and secure educational technology
Teacher and school control over the learning environment
Compliance with educational privacy regulations

Educational Focus

By maintaining a closed educational environment, we ensure that:

All student interactions support the gamification and learning objectives
Teachers maintain complete control over the classroom experience
Students can focus on educational activities without external distractions
Privacy risks are minimized through platform design

Future Considerations

While we currently maintain a closed platform without third-party integrations in the student environment, we continuously evaluate our approach based on:

Educational effectiveness and teacher feedback
Privacy and security best practices
Regulatory requirements and compliance needs
Technical capabilities that maintain our privacy-first approach

Any future decisions to allow third-party content would be made with careful consideration of student privacy, security implications, and educational value.

Basically,
Unlike many educational platforms, Classroom Hero does not allow teachers or School Leaders to place third-party links anywhere within the platform that students can access. This design choice provides enhanced privacy and security protection for students by maintaining a completely controlled educational environment. The only third-party services we use are essential for platform operation (like secure hosting and payment processing) and authentication services for adult users only - students never interact with external services through our platform.

Is Classroom Hero a controller?

Classroom Hero processes personal information both as a Processor and as a Controller, as defined in the GDPR and/or used under the CCPA or other applicable privacy laws.

When Classroom Hero Acts as a Processor

When the Classroom Hero Services are used in connection with school use, Classroom Hero acts as a Processor (or service provider as defined under CCPA or other applicable privacy laws) and we will process personal information, including Student Data, only at the direction and control of the school. Additionally, Classroom Hero will only delete personal information and Student Data or education records per the school's specific instructions.

School-Directed Processing

For Student Data and Educational Activities:

Student account creation and management through teacher-provided classroom codes
Points awarded through teacher-defined Actions and classroom activities
Virtual marketplace transactions and gamification features
Avatar customizations and Mysteria game progress
AI-generated quiz completions and educational content interactions
Class Goals progress and collaborative classroom achievements

Teacher and School Control:

Teachers act as agents of the school and have complete control over student data
Schools direct how long student information is retained
Schools determine what student data should be deleted and when
All student data processing follows school policies and educational compliance requirements

Making Requests as a Processor

As a student, teacher, or parent making a request about a student's personal information, you should direct any requests for access, correction or deletion of personal information through the school as further detailed in our "Parental Choices" section. If we receive a request relating to personal data that we hold on behalf of a school acting as the data Controller, we will either refer you to the school or handle the request directly if authorized by the school.

Process for Data Requests:

Student Data Requests: Contact the student's teacher or school administration first
School Authorization: Schools determine whether requests should be implemented
Teacher Action: Teachers can immediately delete or modify student data through their dashboard
Direct School Request: Schools can contact us directly for data management assistance

When Classroom Hero Acts as a Controller

Classroom Hero will generally be the Controller when:

Account Registration and Management

Teachers, School Leaders, and Parents enter personal information directly into our Service when registering for an account, including:

Name, email address, and password for account creation
School affiliation information for verification purposes
Profile photos and account preferences
Subscription and billing information for teachers and School Leaders

Important Note: This does not include personal information provided by teachers, School Leaders, and parents through their school-related use of the Classroom Hero Services (e.g., classroom setup, student management, educational activities).

Limited Parent Account Features

Parent Account Linking: When parents create accounts to view their child's basic progress information, we act as a Controller for:

Parent account registration information
Basic profile data for account linking purposes
Parent preferences for viewing their child's educational progress

Important Limitation: Unlike comprehensive educational platforms, Classroom Hero does not currently offer extensive parent features outside of school use. Our parent functionality is limited to basic account linking and progress viewing, which reduces the scope of Controller responsibilities.

Simplified Data Processing Model

Streamlined Approach

Classroom Hero's simplified platform design results in clearer Controller/Processor distinctions:

Primarily Processor Role:

Most platform activity involves processing Student Data under school direction
Teachers control all student interactions and data management
Educational activities are directed by schools and teachers
Gamification features operate under educational supervision

Limited Controller Role:

Adult user account registration and management
Subscription processing for teachers and School Leaders
Basic parent account linking (when implemented)

Educational Compliance Benefits

This clear separation provides several advantages:

Simplified FERPA Compliance: Clear school control over education records
COPPA Protection: School consent model with teacher oversight
Reduced Liability: Limited Controller responsibilities
Clear Data Governance: Unambiguous roles and responsibilities

Technical and Legal Framework

Data Processing Agreements

Student Data Privacy Addendums: We enter into agreements with schools and districts that clearly define:

Our role as Processor for Student Data
School responsibilities as Controller for educational information
Data retention and deletion procedures
Security and privacy obligations

Regional Compliance

International Considerations:

GDPR compliance for European users with clear Controller/Processor roles
CCPA compliance for California residents with appropriate service provider designations
Other regional privacy law compliance with consistent data processing roles

Service Provider Relationships

When acting as a Processor, our relationships with third-party service providers are structured to maintain the school's Controller status:

DigitalOcean hosts data under our direction as Processor
Analytics providers receive only anonymized data
AI service providers operate under zero data retention contracts

Practical Implications

For Schools and Teachers

As Controller (School) to Processor (Classroom Hero):

Schools maintain ultimate authority over Student Data
Teachers act as agents of schools with immediate platform control
Data Processing Addendums define the relationship clearly
Schools can direct data deletion or retention as needed

For Parents

Simplified Request Process:

Most requests should go through schools first
Teachers can immediately address most data management needs
Limited direct Controller relationship reduces complexity
Clear educational context for all data processing

For Students

Protected Status:

Student data is always processed under school direction
Teachers maintain immediate control over student information
Educational purpose drives all data processing decisions
Strong privacy protections through Processor model

Basically,
Classroom Hero acts as a Processor when handling Student Data and educational activities under school direction, and as a Controller primarily for teacher, School Leader, and parent account registration. This simplified model means schools maintain control over Student Data while we handle the technical platform operations. Most data requests should go through schools first, since teachers have immediate control over student information and can delete or modify it instantly through their dashboard.

What if I'm not in the U.S.?

Classroom Hero is hosted and operated in the United States through our DigitalOcean infrastructure. If you use the Service from the European Union, the United Kingdom, or any other region with laws governing data collection, protection and use that may differ from United States law, please note that you will be transferring your personal information outside of those jurisdictions to the United States. The personal information we or our service providers collect may be stored and processed in servers within the United States, and certain information may be accessible by persons or companies outside of your home country who provide services for us. Prior to transferring your personal information to the United States, Classroom Hero will take appropriate steps to ensure that the personal information will be safeguarded and used only for authorized purposes set out in this Privacy Policy or in accordance with applicable laws.

Data Transfer Safeguards

International Transfer Protections

Additionally, where we transfer, store, and process your personal information outside of the United Kingdom, European Union, or EEA, we have ensured that appropriate safeguards are in place to ensure an adequate level of protection for the rights of data subjects based on the adequacy of the receiving country's data protection laws, for instance by:

Standard Contractual Clauses (SCCs):

We enter into standard contractual clauses when processing data as a Processor for schools
These provide legally binding privacy obligations for international data transfers
Ensures GDPR-level protection even when data is stored in the United States

Alternative Transfer Mechanisms:

EU-U.S. Data Privacy Framework compliance where applicable
Other mechanisms approved by the European Commission (Art. 46 GDPR)
Adequacy decisions and approved certification mechanisms

Service Provider Agreements:

DigitalOcean and other service providers comply with international data transfer requirements
Contractual obligations ensure appropriate privacy protections
Regular review of compliance with international privacy standards

Educational Data Considerations

Student Data Protection: For Student Data transfers, we take additional precautions:

Schools acting as Controllers can direct specific international transfer restrictions
Student Data Privacy Addendums can include location-specific requirements
Additional safeguards for educational data under international privacy laws

Simplified Data Processing: Our streamlined platform reduces international transfer complexity:

Limited third-party integrations mean fewer cross-border data flows
Teacher-controlled environment provides additional oversight
Anonymous analytics ensure no personal data in research sharing

Your Rights and Consent

Acknowledgment and Consent

By using the Service, you acknowledge that your personal information may be transferred outside your home jurisdiction, including to the United States, and to the storage of your personal information in the United States, for the purpose of hosting, using and processing the personal information in accordance with this Privacy Policy. You further acknowledge that these countries may not have the same data protection laws as the country from which you provided your personal information, and that Classroom Hero may be subject to access requests and be compelled to disclose your personal information to government authorities, courts and law enforcement officials outside of your home country (including the United States).

Right to Withdraw Consent

You have the right to withdraw your consent at any time by contacting us at privacy@classroomhero.com. Please note that withdrawing consent may affect your ability to use certain features of the Service.

Educational Context Considerations

For Teachers and School Leaders:

Your school or district may have specific policies about international data transfers
Check with your educational institution about any restrictions on using U.S.-hosted services
We can work with schools to address specific data localization requirements

For Parents:

Student data transfers are governed by school policies and our educational agreements
Parents can discuss data transfer concerns with their child's school
We provide transparency about where and how data is stored and processed

Technical Infrastructure

Hosting and Storage

DigitalOcean Infrastructure:

Primary data storage in DigitalOcean's U.S. data centers
Industry-standard security measures and compliance certifications
Contractual protections for international data transfers

Limited Service Providers: Our minimal third-party integration reduces international transfer complexity:

Stripe: Payment processing (U.S.-based, handles only teacher/School Leader billing)
Analytics Services: PostHog and Google Analytics (receive only anonymized data)
AI Providers: OpenAI and Anthropic (zero data retention contracts for any student information)

Security Measures

Encryption and Protection:

Data encrypted in transit using SSL/TLS
Data encrypted at rest through DigitalOcean's security infrastructure
Access controls limit who can access international data transfers

Regional Compliance

GDPR Compliance (EU/UK)

For European Users:

Full GDPR compliance regardless of U.S. hosting location
Standard Contractual Clauses provide appropriate safeguards
Right to lodge complaints with EU supervisory authorities
Data Protection Impact Assessments for international transfers

Other International Privacy Laws

Global Privacy Standards:

Compliance with Canadian privacy laws (PIPEDA)
Adherence to Australian privacy principles
Alignment with other national privacy frameworks
Regular review of emerging international privacy requirements

Educational Specific Considerations

School Policies and Compliance

International Educational Institutions:

Schools outside the U.S. may have specific data localization requirements
We can work with international schools on Student Data Privacy Addendums
Compliance with local educational privacy laws alongside U.S. hosting

Data Sovereignty Concerns:

Transparent disclosure of data storage locations
Clear documentation of international transfer safeguards
Ability to accommodate specific school data governance requirements

Contact and Questions

Getting More Information

If you have questions regarding our policies and practices with respect to the transfer of your personal information outside of your home country, please contact us at privacy@classroomhero.com.

What We Can Provide:

Copies of safeguards we use for international data transfers
Information about our compliance with local privacy laws
Documentation of our data protection measures
Assistance with school-specific international transfer requirements

Ongoing Compliance

Regular Review:

Continuous monitoring of international privacy law developments
Updates to transfer mechanisms as regulations evolve
Regular review of service provider compliance with international standards
Proactive communication about changes to international transfer practices

Basically,
Our servers are located in the U.S. through DigitalOcean, so if you are using the Service from any other country, your data will be transferred to and stored in the U.S. We have appropriate safeguards in place including Standard Contractual Clauses and other mechanisms to ensure your data receives adequate protection even when stored outside your home country. You can withdraw consent for international transfers at any time, though this may affect your ability to use the Service.

EU-U.S. Data Privacy Framework, Swiss-U.S. Data Privacy Framework, and UK extension to DPF

Important Note: Classroom Hero is currently in the process of pursuing certification under the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the "DPF Programs"). While we are working toward this certification, we currently rely on other appropriate safeguards for international data transfers as described in our "What if I'm not in the U.S.?" section, including Standard Contractual Clauses and other mechanisms approved under GDPR Article 46.

Our Commitment to DPF Compliance

Once certified, Classroom Hero will adhere to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal information received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Classroom Hero will also adhere to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal information received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles (collectively, the "DPF Principles"), the DPF Principles shall govern.

Data Processing Under DPF

Types of Personal Information

Classroom Hero may receive from the EU, UK and Switzerland some or all of the personal information listed in the section "What Information Does Classroom Hero Collect?". This includes:

For Teachers and School Leaders:

Account registration information (name, email address, school affiliation)
Subscription and billing information
Classroom setup and management data
AI tool usage for educational content creation

For Parents:

Basic account linking information
Profile data for viewing student progress

For Students (processed under school direction):

Student names as provided by teachers
Educational gamification data (points, avatar customizations, game progress)
AI-generated quiz responses and educational activity completion
Virtual marketplace transaction records

Controller and Processor Roles

Classroom Hero obtains and processes such personal information as a Controller or Processor, as explained in the section "Is Classroom Hero a controller?" For all types of processing, Classroom Hero commits to the DPF Principles with respect to all personal information received from the EU, UK and Switzerland. We may use the personal information received from the EU, UK and Switzerland for the purposes set forth in this Privacy Policy or as you may otherwise be notified.

As a Processor:

Student Data processing under school direction and control
Educational gamification activities managed by teachers
Classroom management functions operated under school policies

As a Controller:

Teacher, School Leader, and parent account registration and management
Subscription processing and billing for educational services
Limited parent account features for viewing student progress

Third-Party Transfers and Onward Transfer Liability

Classroom Hero may transfer personal information to third parties as described in this privacy policy. Classroom Hero is responsible for the processing of personal data it receives, under the DPF Programs, and subsequently transfers to third parties acting as an agent on its behalf. Classroom Hero complies with the DPF Principles for all onward transfers of personal data from the EU, UK and Switzerland, including the onward transfer liability provisions.

Our Service Providers Under DPF

Essential Service Providers:

DigitalOcean: Database hosting and infrastructure (with appropriate DPF-compliant safeguards)
Stripe: Payment processing for teacher and School Leader subscriptions
Analytics Providers: PostHog and Google Analytics (receive only anonymized data)
AI Providers: OpenAI and Anthropic (with zero data retention contracts for student information)

Onward Transfer Protections:

All service providers are contractually bound to DPF-equivalent protections
Limited data sharing reduces transfer liability exposure
Anonymous analytics ensure no personal data in research transfers
Strong oversight of third-party data processing practices

Regulatory Oversight and Enforcement

With respect to personal data received or transferred pursuant to the DPF Programs, Classroom Hero is subject to the jurisdiction and regulatory enforcement powers of the U.S. Federal Trade Commission and other authorized statutory bodies. In certain situations, Classroom Hero may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Educational Context Considerations

School Protection:

Schools acting as Controllers maintain primary authority over Student Data
Additional protections for educational records under FERPA and similar laws
Transparency about any government data requests affecting educational information

Individual Rights and Complaint Resolution

Access and Rights Exercise

Where appropriate, we will provide you with access to the personal information that we maintain about you and enable you to exercise your rights to your personal information as set out in the "What are Classroom Hero's commitments to providing transparency and rights?" section.

For EU, UK, and Swiss Individuals:

Right to access personal information
Right to correct inaccurate data
Right to delete personal information (subject to educational record requirements)
Right to restrict processing
Right to data portability where applicable

Complaint Resolution Process

Classroom Hero commits to resolve DPF Principles-related complaints about the collection and use of your personal data. EU, UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the DPF Programs should contact us at privacy@classroomhero.com.

Resolution Steps:

Direct Contact: Initial complaints should be directed to Classroom Hero
Independent Recourse: If not resolved satisfactorily, complaints may be referred to an independent dispute resolution provider
Binding Arbitration: Under certain conditions, binding arbitration may be available when other dispute resolution procedures have been exhausted

Alternative Dispute Resolution

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Classroom Hero will commit to refer unresolved complaints concerning our handling of personal data received in reliance on the DPF Programs to an appropriate alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, you may access the independent dispute resolution mechanism. These services are provided at no cost to you.

Educational Data Protections

Enhanced Student Privacy

Additional Safeguards for Educational Data:

DPF protections apply to all Student Data transferred from EU, UK, and Switzerland
Teacher-controlled environment provides additional oversight
School consent model ensures appropriate authority for data processing
Compliance with both DPF principles and educational privacy requirements

Simplified Compliance: Our streamlined platform design enhances DPF compliance:

Limited third-party integrations reduce transfer complexity
Clear Controller/Processor roles simplify accountability
Teacher control ensures immediate response to rights requests
Anonymous analytics prevent unnecessary personal data transfers

Current Safeguards Pending Certification

While pursuing DPF certification, Classroom Hero currently maintains robust international transfer protections:

Standard Contractual Clauses (SCCs):

EU-approved SCCs for all EU/UK data transfers
GDPR Article 46 compliant transfer mechanisms
Regular review and updates as regulations evolve

Additional Safeguards:

Encryption in transit and at rest
Access controls and data minimization practices
Regular security assessments and compliance reviews
Transparency about data storage locations and processing practices

Basically,
Classroom Hero is working toward certification under the EU-U.S. Data Privacy Framework (DPF), UK Extension, and Swiss-U.S. DPF to provide enhanced protections for personal data transferred from the European Union, United Kingdom, and Switzerland. Until certification is complete, we maintain strong alternative safeguards including Standard Contractual Clauses and other GDPR-approved mechanisms. Once certified, the DPF will provide an additional layer of protection for international data transfers, with independent dispute resolution and binding arbitration options available for EU, UK, and Swiss individuals.

Canada Data Privacy

We endeavor to provide privacy protection that is consistent with the applicable privacy laws in Canada, including the Personal Information Protection and Electronic Documents Act ("PIPEDA") and the provincial private sector privacy laws in British Columbia, Alberta and Quebec. For any questions regarding how we comply with PIPEDA, please contact us at privacy@classroomhero.com.

Basically,
Classroom Hero works hard to provide privacy protections consistent with applicable privacy laws in Canada.

U.S. State Data Privacy

Overview

If you are a U.S. resident, we process your personal information in accordance with applicable U.S. State Data Protection Laws. This section of our Privacy Policy contains information required by the CCPA and other U.S. State Data Protection Laws.

Please note that recent changes to the CCPA and other U.S. State Data Protection Laws are set to take effect in 2025; however, the rules implementing some of these laws have not yet been finalized. We are continuously working to better comply with these laws, and we will update our processes and disclosures as these implementing rules are finalized.

Transparency

You have the right to know what kinds of personal information Classroom Hero collects and the sources of that information, how we use that information, and our business purpose for that collection.

Please see the "What Information Does Classroom Hero Collect?" and the "How Does Classroom Hero Use the Information it Collects?" sections of our Privacy Policy for more information on the personal information we collect, the sources of that information and how we use this information. Please also see the "Will Classroom Hero Share Any Information It Collects?" and "How Long Does Classroom Hero Keep Information About Me?" section of our Privacy Policy for more information on when Classroom Hero may disclose personal information and how Classroom Hero retains personal information.

Categories of Personal Information We Collect

Teachers and School Leaders:

Account information (name, email address, password)
School affiliation and verification information
Subscription and billing information
Classroom management data and AI tool usage

Parents:

Basic account linking information (name, email address)
Relationship to student for account verification

Students (processed under school direction):

Names as provided by teachers
Educational gamification data (points, avatar customizations, game progress)
AI-generated quiz responses and completion data
Virtual marketplace transaction records

Your Rights and Choices

If you are a California resident or resident of any other state with an applicable U.S. State Data Protection Law, you have the right to request that Classroom Hero disclose certain information to you about our collection, use, and disclosure of your personal information.

You also have specific rights of access, deletion, correction and data portability regarding your personal information under the CCPA and other applicable U.S. State Data Protection Laws. You have the right to request that Classroom Hero provide the specific pieces of information that we have collected about you. We provide these same rights to all users regardless of location. Please see the "What are Classroom Hero's commitments to providing transparency and rights?" Section for more detail on how to exercise these rights, including how we will verify requests. The VCDPA, CPA and other applicable U.S. State Data Protection Laws also provide the right to opt out of certain forms of profiling and targeted advertising. You may also designate a natural person or business entity registered with the California Secretary of State (or your applicable state) to act on your behalf to exercise these rights.

Non-Discrimination

We will not discriminate against you for exercising any of your rights under CCPA or any other applicable U.S. State Data Protection Law with a similar right. Unless permitted by the CCPA or any other applicable U.S. State Data Protection Law, we will not:

Deny you goods or services
Charge you different prices or rates for goods or services, including granting discounts or other benefits, or imposing penalties
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services

However, we may offer you certain financial incentives permitted by the CCPA, or any other applicable U.S. State Data Protection Law, that can result in different prices, rates, or quality levels. Any CCPA-permitted (or other U.S. State Data Protection Law) financial incentive we offer will be reasonably related to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Basically,
If you are a U.S. resident with an applicable U.S. State Data Protection Law, such as the CCPA, VCDPA, CPA or UCPA, these laws afford you certain rights of access, deletion and data portability - which we also extend to all users. Please see the "What are Classroom Hero's commitments to providing transparency and rights?" Section for more detail on how to exercise these rights, including how we will verify requests. We will not discriminate against you for exercising any of your rights under the applicable U.S. State Data Protection Laws.

Sensitive Personal Information

In certain jurisdictions, you have the right to limit the use or disclosure of your sensitive personal information to certain allowed activities under applicable U.S. State Data Protection Laws. Sensitive personal information is a subset of personal information and is defined differently under applicable U.S. State Data Protection Laws.

Important Note: Classroom Hero does not collect sensitive personal information as defined under state privacy laws. We do not collect:

Social Security numbers or other government identification
Financial account information (except teacher/School Leader billing through Stripe)
Precise geolocation data
Racial or ethnic origin, religious beliefs, or health information
Biometric information or genetic data

If you are a California resident, we do not use or disclose any sensitive personal information for purposes other than those allowed under the CCPA, Section 7027(m).

We Do Not Sell Your Personal Information

As stated throughout this Privacy Policy, Classroom Hero does not sell personal information of any Classroom Hero Services user to any third party for any purpose - including for advertising or marketing purposes. Please note that a sale does not include when we disclose your personal information at your direction or when otherwise permitted under applicable U.S. State Data Protection Laws.

California Privacy Disclosures

In addition to the disclosures listed above in this U.S. State Data Privacy Section, please see the following California specific disclosures.

The CCPA requires a description of data practices using specific categories and specific types of required disclosures. At or before the time of collection, you have a right to receive notice of our practices, including the categories of personal information, the purposes for which such information is collected or used, whether such information is sold or shared, and how long such information is retained.

Do Not Share My Personal Information

Classroom Hero does not share its users' personal information to a third party for cross-context behavioral advertising, as those terms are defined under the CCPA. Furthermore, we do not share or disclose personal information with any third parties except in the limited circumstances described in this Privacy Policy.

If Classroom Hero in the future does share or sell any personal information of a Classroom Hero Services user located in California, we will provide the CCPA required "Do Not Sell or Share my Personal Information" link in the footer of our website as well as honoring an Opt-Out Preference Signal as set forth below. Classroom Hero will not share or sell the personal information of consumers under 16 years of age.

Basically,
Currently, Classroom Hero does not share its users personal information to a third party for cross-context behavioral advertising. If Classroom Hero in the future does share or sell any personal information of a user located in California, we will provide the CCPA required "Do Not Sell or Share my Personal Information" link in the footer of our website as well as honoring an Opt-Out Preference Signal. Classroom Hero will not share or sell the personal information of consumers under 16 years of age.

Do Not Track or Opt-Out Preference Signal

Do Not Track ("DNT") is a privacy preference that users can set in certain web browsers to inform websites and services that they do not want certain information to be "tracked". While some internet browsers offer a "do not track" or "DNT" option that lets you tell websites that you do not want to have your online activities tracked, these features are not yet uniform and there is no common standard adopted by industry groups, technology companies, or regulators. For more information on "do not track," please visit www.allaboutdnt.org. In addition, the industry working group (W3C Tracking Protection) to develop the DNT standard is now closed, so Classroom Hero does not respond to these DNT signals.

There are different (from DNT) opt-out preference signals set forth under the CCPA ("Opt-Out Preference Signals") also called a Global Privacy Control (GPC) Signal. Classroom Hero will respond to Opt-out Preference or Global Privacy Control Signals. This signal will apply to the browser. Classroom Hero takes privacy and meaningful choice seriously and will make efforts to continue to monitor developments around DNT browser technology and the implementation of a standard.

Important Note: Since Classroom Hero does not allow third-party content embedding within the student-accessible platform areas, students will not encounter third-party cookies or tracking technologies during their educational experience.

Basically,
Classroom Hero does not respond to DNT signals as there is lack of industry standard and the working group to resolve these issues is also now closed. However, if you are a user based in California, Classroom Hero will respond to Opt-Out Preference or GPC Signals as those terms and signals are defined under the CPRA. This signal will apply to the browser.

Notice for Minors (Users under 18)

If you are under the age of 18, or the parent of a child using Classroom Hero under the age of 18 residing in California, you are entitled to request removal of content or information you (the minor) have publicly posted on our Service.

Important Platform Note: Classroom Hero does not allow minors to post content that is publicly visible. Students can only:

Customize their avatars within their teacher's classroom
Participate in teacher-assigned educational activities
Play the Mysteria game within their classroom environment
View their own progress and achievements

All student activities remain within the controlled classroom environment and are not publicly accessible.

Minors (or the minor's parents if under 13) have the option to delete personal information associated with their user accounts through their teacher. Since all student accounts are created and managed by teachers, deletion requests should be directed to the student's teacher, who can immediately delete student accounts and all associated data through their dashboard.

If you are a minor, or the parent of a minor under 13, and would like to delete personal information associated with your Student Account, please follow the directions set forth in the "What are Classroom Hero's commitments to providing transparency and rights?" section, which includes contacting your school or teacher first.

Although we offer deletion capabilities on our Service, you should be aware that the removal of content may not ensure complete or comprehensive removal of that content or information posted through the Service, as there may be de-identified or recoverable elements of your content or information on our servers in some form. Additionally, we will not remove content or information that we may be required to retain at the direction of the school or under applicable laws.

Basically,
If you are a minor or parent of a minor, you may delete information by contacting your teacher (who can delete student accounts immediately) or by following the procedures in our "What are Classroom Hero's commitments to providing transparency and rights?" section.

"Shine the Light" Law

Pursuant to California Civil Code Section 1798.83(c)(2), Classroom Hero does not share personal information with third parties for their own direct marketing purposes unless you affirmatively agree to such disclosure. California customers can receive more information about our compliance with this law or to make a request under California Civil Code Section 1798.83 by sending us an email at privacy@classroomhero.com or by writing to us as set forth in "How Can I Contact Classroom Hero with Questions" section below.

How can I contact Classroom Hero with questions?

If you have any questions or concerns about this Privacy Policy, our privacy practices, or how we protect our educational community, please contact us at privacy@classroomhero.com - we'd love to help. If you'd like, you may also write to us at:

Further Privacy and Security Resources

For teachers, School Leaders, parents, or administrators seeking more information on how we provide safety on Classroom Hero, please contact us at privacy@classroomhero.com for additional privacy and security related materials.

For Key Terms that are used in this Privacy Policy and our Terms of Service, please contact us for clarification of any terminology.

Basically,
If you'd like some more safety and privacy resources for your school, please contact us at privacy@classroomhero.com. For definitions of Key Terms used in this policy and our Terms of Service, feel free to reach out to us directly.