Privacy Policy

1. Information We Collect

When you use AdaptEdQuest, we collect:

• Account information (name, email)
• Google Classroom data (courses, student rosters, assignments)
• Educational content and assessment data
• Usage information

2. Google API Data Usage and Sharing

We access and use the following Google APIs and scopes:

• Google Sign-In (openid, .../auth/userinfo.email, .../auth/userinfo.profile)
• Google Classroom Course Management (.../auth/classroom.courses.readonly)
• Student Coursework Access (.../auth/classroom.coursework.students)
• Class Roster Access (.../auth/classroom.rosters)
• Student Profile Information (.../auth/classroom.profile.emails)
• Google Drive file access (.../auth/drive.file) — limited to files AdaptEd creates in the teacher's own Drive (e.g., exported lesson documents)
• Google Forms (.../auth/forms) — requested only if a teacher connects the optional Google Forms export

Data Sharing and Third-Party Disclosure:

• We do not sell, rent, lease, or trade Google user data to third parties
• We share Google user data only with:
  • Authorized school administrators and teachers within your institution (for educational purposes only)
  • Google Classroom API (for syncing courses, assignments, and grades)
  • Essential service providers who help operate our platform, under strict confidentiality and data protection agreements
  • Legal authorities when required by law, regulation, or valid legal process
• All third-party service providers:
  • Are contractually bound to use the information solely for providing services to us
  • Must maintain strict confidentiality and security measures
  • Are prohibited from using the data for their own purposes

3. Third-Party Service Providers

AdaptEd uses the following third-party services to deliver educational features:

• OpenAI (content generation, AI-assisted grading, AI tutoring) — Data Processing Addendum
• Google AI / Gemini (content analysis and generation) — Data Processing Addendum
• Google Cloud Text-to-Speech (read-aloud of question text; no student identity is transmitted)
• YouTube (teacher-selected educational videos embedded in lessons; video metadata via the YouTube Data API) — governed by Google's privacy policy
• Pexels (royalty-free images for educational content) — no student data is transmitted
• Google Classroom (roster and grade sync, when connected by teacher) — governed by your school's Google Workspace agreement
• Stripe (subscription billing for teachers and schools) — no student data is transmitted
• Namecheap PrivateEmail (SMTP delivery of account, consent, and parent-notification email)
• MathSteps API (step-by-step solutions for math expressions typed into the Math Solver tool; no student identity is transmitted)

These services process data solely for delivering educational functionality. No student data is sold, shared with advertisers, or used for non-educational purposes.

AI processing disclosure: Some features send content to OpenAI and Google (Gemini) APIs to generate, personalize, or grade educational material. We do not include student names, email addresses, or other contact information in AI requests. Content that may be processed includes student responses (for AI-assisted grading and tutoring) and limited learning-profile context such as reading level, interests, instructional accommodations, and teacher-entered instructional notes (for personalization). Disability or program-status designations are never sent — only the instructional adjustments they call for. Under OpenAI's and Google's API terms, data submitted through these APIs is not used to train their models. Teacher-created AI content is reviewed by the teacher before it is assigned to students; the AI tutor responds in real time within instructional guardrails.

4. Data Protection

We protect your data through:

• Secure HTTPS encryption
• Restricted data access
• Regular security updates
• Data encryption at rest and in transit
• Regular security audits and monitoring
• Employee training on data protection

5. Limited Use Disclosure

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we:

• Only use Google user data to provide or improve our services
• Don't transfer this data to others except as necessary to provide or improve our services
• Don't use the data for advertising purposes
• Don't allow humans to read the data unless:
  • We have your affirmative agreement
  • It's necessary for security purposes
  • It's required to comply with applicable laws

6. Your Rights

You can:

• Access your data (self-service export from your profile, or by request)
• Request correction (amendment) of inaccurate records
• Request data deletion
• Revoke Google account access at any time from your Google security settings
• Request information about how your data is shared

To exercise any of these rights, use the data request form or email support@adaptedquest.com.

7. Data Retention & Deletion

Student data is retained while needed to provide educational services and according to the school or district's applicable records schedule. When a class is archived, Google Classroom synchronization stops and the class becomes read-only. Unless a school or district requires a different period, detailed class activity is scheduled for deletion 395 days after archival, with at least a 30-day recovery period before an administrator-triggered purge.

A purge removes student-identifying roster fields and detailed activity such as answers, Pod sessions, review activity, mastery history, communications, accommodations, and teacher notes associated only with that archived enrollment. Teacher-created instructional content may be retained separately. To measure instructional effectiveness without retaining student records, AdaptEd may retain one compact, de-identified effectiveness rollup per Pod containing aggregate scores, sample counts, component summaries, calculation dates, and methodology version. These rollups do not contain student names, identifiers, individual answers, individual grades, or Google identifiers. Valid legal holds, audits, open records requests, and longer district retention requirements suspend deletion.

Upon account deletion or an approved request from a parent, guardian, school, district, or eligible student, data that is not legally required to be retained is removed from active systems. Operational backups expire under the documented backup schedule, targeted at no more than 90 days. Parents and eligible students may request access or deletion at any time by visiting adaptedquest.com/privacy/datarequest.

Teacher-created content (lessons, pods, assessments) is retained as long as the teacher's account is active.

We retain Google user data only for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Maintain security and prevent fraud

After the applicable retention period ends, we securely delete or irreversibly anonymize the data. Identifiable Google user data is not retained indefinitely for possible future use.

8. Regulatory Compliance

AdaptEdQuest is designed to comply with key educational privacy and safety regulations:

Family Educational Rights and Privacy Act (FERPA)

We protect the privacy of student educational records in accordance with FERPA through:

• Role-based access controls that restrict data access to authorized personnel only
• Data deletion capabilities that allow removal of student records upon legitimate request
• Data breach notification protocols to ensure confidentiality of educational records
• Comprehensive documentation of all data practices in this privacy policy

Children's Online Privacy Protection Act (COPPA)

For users under 13 years of age, we implement:

• An age screen during the registration process
• Verifiable parental consent workflows (email confirmation or a signed consent form) before a child's direct sign-up is completed
• Limited collection of only information necessary for educational purposes
• Parental rights to review, delete, and control their child's information

School-authorized accounts: When student accounts are created by a school — through Google Classroom roster import or a teacher's class join code — for use solely within the school's educational program, the school may provide consent on the parent's behalf, as permitted by FTC COPPA guidance for the educational context. In that case the school, not AdaptEd, is responsible for notifying parents about the school's use of the platform, and we process student data only for the school's educational purposes — never for marketing or profiling. Children under 13 who sign up directly (outside a school) always require verifiable parental consent.

Children's Internet Protection Act (CIPA)

AdaptEd supports schools in meeting their CIPA compliance obligations. As an educational platform that does not provide open internet browsing, AdaptEd operates as a controlled, walled-garden environment. Our CIPA-supportive measures include:

• Controlled content environment: All educational content is either teacher-created or AI-generated within structured, curriculum-aligned templates — students cannot access open internet content through our platform
• AI content guardrails: AI-generated educational materials are produced within structured, curriculum-aligned templates and instructional guardrails designed to keep output age-appropriate
• Teacher oversight: Teachers review and approve lesson content before it reaches students, providing a human layer of content quality assurance
• No open browsing or social features: Students interact with platform content only — there is no student-directed pathway to open internet browsing. Lessons may include teacher-selected embedded educational videos (YouTube), which teachers preview when building the lesson
• Activity monitoring: All student activity within the platform is logged for teacher and administrator review, supporting schools' monitoring requirements
• Age-appropriate design: The platform is designed specifically for K-12 educational use, with age-appropriate interfaces and content standards

While AdaptEd supports CIPA compliance, schools remain responsible for implementing comprehensive internet safety policies, including any required technology protection measures for general internet access beyond our platform.

ADA/Section 508 Accessibility Standards

We maintain accessibility for users with disabilities through:

• Keyboard navigation support throughout the platform
• Screen reader compatibility with proper ARIA attributes
• Accessible form controls and interactive elements
• Regular accessibility audits and improvements

9. Contact Us

For privacy concerns, compliance questions, or to exercise your data rights:

• Email: support@adaptedquest.com
• Website: adaptedquest.com

We aim to respond to all privacy-related requests within 30 days.