App Vetting Profile for SchoolAI

Product: SchoolAI

Vetted by Data Privacy, Data Privacy Team at 1EdTech

App Vetting Capability: Intermediate (Self Rated)

Privacy Rubric Results

This product has met the criteria required to achieve the 1EdTech Data Privacy Seal.

N/A
UNMET
PARTIAL
MEETS

Data Collection

Security

3rd Party Data

Advertising

Certified

Rubric Area	Expectations
General	Meets	Partially Meets	Doesn't Meet
User Notes User Notes GEN1 - How are changes to key policies managed? ANSWER: Notification is provided to the user in advance and a history of policy revisions are available User Notes: "School AI reserves the right to update our policies at any time. We will notify you of significant changes by posting updates on our website and, where applicable, by informing you when you log into your account or sending an email to the address we have on record." "School AI reserves the right to update our policies at any time. We will notify you of significant changes by posting updates on our website and, where applicable, by informing you when you log into your account or sending an email to the address we have on record."	Answer Meets Expectations	Unselected Option:	Unselected Option:
Data Collected	Meets	Partially Meets	Doesn't Meet
User Notes User Notes DCQ1 - Do the policies list all data collected? ANSWER: Policies list the data collected OR policies state no data is collected User Notes: " Information We Collect To provide our Service, we collect information in the following categories: a. Account Information: When you create an account with SchoolAI, we collect your name, email address, and password. If you are an educator or administrator, we may also collect your role and the name of your educational institution. b. Student Data: We collect information about students provided by the educational institution, educators, or students themselves. This may include student names, grades, and school-related performance data. We collect only the minimum amount of information necessary to provide our Service. c. User-generated Content: When you interact with the SchoolAI platform, we collect the questions you ask, the responses generated by the AI, and any feedback you provide. d. Usage Data: We collect information about how you interact with our Service, such as the features you use, the time you spend on the platform, and the device you use to access the Service. e. Technical Data: We collect technical data, including your IP address, browser type, device information, and operating system, to improve our Service and ensure compatibility with various devices." " Information We Collect To provide our Service, we collect information in the following categories: a. Account Information: When you create an account with SchoolAI, we collect your name, email address, and password. If you are an educator or administrator, we may also collect your role and the name of your educational institution. b. Student Data: We collect information about students provided by the educational institution, educators, or students themselves. This may include student names, grades, and school-related performance data. We collect only the minimum amount of information necessary to provide our Service. c. User-generated Content: When you interact with the SchoolAI platform, we collect the questions you ask, the responses generated by the AI, and any feedback you provide. d. Usage Data: We collect information about how you interact with our Service, such as the features you use, the time you spend on the platform, and the device you use to access the Service. e. Technical Data: We collect technical data, including your IP address, browser type, device information, and operating system, to improve our Service and ensure compatibility with various devices."	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ2 - Do the policies indicate how data is collected? ANSWER: Policies state specifically how data is collected OR policies state no data collected User Notes: Policies state specifically how data is collected Policies state specifically how data is collected	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ3 - Do the policies state who owns the data? ANSWER: Policies state the user owns the data alone OR policies state no data collected User Notes: Student Data is owned and controlled by the Educational Institution, not by us. Our collection and use of Student Data is governed by our agreements with the Educational Institutions and applicable privacy laws. For instance, we act as a “School Official” under FERPA when providing our Services, and we collaborate with Educational Institutions to ensure the protection of personal data from students’ educational records, in compliance with FERPA requirements. Student Data is owned and controlled by the Educational Institution, not by us. Our collection and use of Student Data is governed by our agreements with the Educational Institutions and applicable privacy laws. For instance, we act as a “School Official” under FERPA when providing our Services, and we collaborate with Educational Institutions to ensure the protection of personal data from students’ educational records, in compliance with FERPA requirements.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ4 - Do the policies allow users to delete their data entirely? ANSWER: Policies allow users to delete data entirely after a period of time OR policies state no data collected User Notes: Parents or guardians have the right to review their child's personal information collected by our Service, correct any inaccuracies, and request the deletion of information that violates privacy laws. To exercise these rights, please contact us at hello@schoolai.com or the student's educational institution. Parents or guardians have the right to review their child's personal information collected by our Service, correct any inaccuracies, and request the deletion of information that violates privacy laws. To exercise these rights, please contact us at hello@schoolai.com or the student's educational institution.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ5 - Do the policies state the retention of data? ANSWER: Policies have a 60-day or less retention policy OR policies state no data collected User Notes: """Customer Data is retained for as long as the account is in active status. Data aneters an """"Expired"""" state when the account is voluntarily closed. Expired account data will be retained for 60 days. After this period, the account and related data will be removed. If a district requests data to be deleted, we will do that within 60 days. """ """Customer Data is retained for as long as the account is in active status. Data aneters an """"Expired"""" state when the account is voluntarily closed. Expired account data will be retained for 60 days. After this period, the account and related data will be removed. If a district requests data to be deleted, we will do that within 60 days. """	Answer Meets Expectations	Unselected Option:	Unselected Option:
Security	Meets	Partially Meets	Doesn't Meet
User Notes User Notes SECQ1 - Do the policies state how data is protected? ANSWER: Policies list the steps taken to protect data or OR policies state no data collected User Notes: We employ industry-standard security measures to protect your personal information, including encryption, hashing, and salting. We regularly review and update our security practices to address evolving threats and vulnerabilities We employ industry-standard security measures to protect your personal information, including encryption, hashing, and salting. We regularly review and update our security practices to address evolving threats and vulnerabilities	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SECQ2 - Do the policies state all confidential & sensitive information is encrypted throughout? ANSWER: Data encrypted throughout OR passes an encryption test with no vulnerabilities OR policies state no data collected User Notes: SSL Lab shows an overall A grade SSL Lab shows an overall A grade	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SECQ3 - Do the policies state whether or not it enforces strong password creation? ANSWER: Supplier enforces strong password creation OR supplier user base exempt from password requirements or OR no account creation required User Notes: "SchoolAI provides two types of account: Individual accounts or institution accounts. Both account types are intended for Educators and Administrators. Each account type offers multiple tiers for usage and features. Students do not need accounts for use cases that may be enabled by Educators and Administrators." "SchoolAI provides two types of account: Individual accounts or institution accounts. Both account types are intended for Educators and Administrators. Each account type offers multiple tiers for usage and features. Students do not need accounts for use cases that may be enabled by Educators and Administrators."	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SECQ4 - Do the policies indicate whether or not it leverages 2 step (or other forms of multifactor) authentication? ANSWER: Supplier uses SSO or an LTI launch OR no account creation is required OR supplier user base exempt from 2-step authentication requirements User Notes: No student account creation available No student account creation available	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SECQ5 - Do the policies state the use of cookies? ANSWER: Policies list all cookies used and each cookie's purpose OR policies state that it only uses cookies that are crucial for app functionality User Notes: Supplier shows that it only uses cookies that are crucial for app functionality Supplier shows that it only uses cookies that are crucial for app functionality	Answer Meets Expectations	Unselected Option:	Unselected Option:
Third Party Data	Meets	Partially Meets	Doesn't Meet
User Notes User Notes SHRQ1 - Do the policies state the use of third parties? ANSWER: Policies list each third party separately OR policies state third party use strictly for app functionality OR policies state that they do not use third parties User Notes: Service Providers: We may share your information with third-party service providers that help us operate and maintain our Service, such as hosting providers and security services. These providers are required to protect your information and use it only for the purposes for which it was disclosed. Service Providers: We may share your information with third-party service providers that help us operate and maintain our Service, such as hosting providers and security services. These providers are required to protect your information and use it only for the purposes for which it was disclosed.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ2 - Do the policies state what information is shared with each 3rd party? ANSWER: Policies list the data it shares with each third party separately OR policies state that it does not share any data with any third party User Notes: Policies state 3rd party use strictly for app functionality Policies state 3rd party use strictly for app functionality	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ3 - Do the policies state whether or not users can opt out of 3rd party data sharing? ANSWER: Policies include an easy opt out process for users OR policies state that it does not share any data with any third party User Notes: Policies state 3rd party use strictly for app functionality Policies state 3rd party use strictly for app functionality	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ4 - Do the policies state if the supplier requires 3rd parties to adhere to the terms of the vendor/customer agreement? ANSWER: Supplier claims responsibility for third party privacy practices OR policies state that it does not share any data with any third party User Notes: Educators may include links in student spaces or materials generated by School AI at their own discretion but this does not imply our endorsement of those sites, their content, or any services they offer. By clicking on such a link, you will be redirected away from our site and may encounter third-party sites that may collect your data, including personally identifiable information (PII). Please note that the terms of this Privacy Policy do not apply to these external sites or to any data collected after you leave our site. We recommend reviewing the privacy policy of any third-party website you visit to understand how your information is handled. Educators may include links in student spaces or materials generated by School AI at their own discretion but this does not imply our endorsement of those sites, their content, or any services they offer. By clicking on such a link, you will be redirected away from our site and may encounter third-party sites that may collect your data, including personally identifiable information (PII). Please note that the terms of this Privacy Policy do not apply to these external sites or to any data collected after you leave our site. We recommend reviewing the privacy policy of any third-party website you visit to understand how your information is handled.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ5 - Do the policies state whether or not user is notified of a change in third parties? ANSWER: Supplier changes third party and keeps the same data sharing terms OR supplier does not use any third parties User Notes: School AI reserves the right to update our policies at any time. We will notify you of significant changes by posting updates on our website and, where applicable, by informing you when you log into your account or sending an email to the address we have on record. School AI reserves the right to update our policies at any time. We will notify you of significant changes by posting updates on our website and, where applicable, by informing you when you log into your account or sending an email to the address we have on record.	Answer Meets Expectations	Unselected Option:	Unselected Option:
Advertising	Meets	Partially Meets	Doesn't Meet
User Notes User Notes ADVQ1 - Do the policies indicate if advertisements are displayed? ANSWER: No ads are displayed User Notes: Rest assured, we never sell Student Data. We also don't display any advertising to students on SchoolAI. Furthermore, we strictly prohibit any third parties from engaging in behavioral tracking on SchoolAI for targeted advertising purposes or displaying ads on our platform. Rest assured, we never sell Student Data. We also don't display any advertising to students on SchoolAI. Furthermore, we strictly prohibit any third parties from engaging in behavioral tracking on SchoolAI for targeted advertising purposes or displaying ads on our platform.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ2 - Do the policies indicate whether or not users are targeted for advertisement? ANSWER: Policies guarantee no ad targeting OR Policies state no ads are used on its platform User Notes: Rest assured, we never sell Student Data. We also don't display any advertising to students on SchoolAI. Furthermore, we strictly prohibit any third parties from engaging in behavioral tracking on SchoolAI for targeted advertising purposes or displaying ads on our platform. Rest assured, we never sell Student Data. We also don't display any advertising to students on SchoolAI. Furthermore, we strictly prohibit any third parties from engaging in behavioral tracking on SchoolAI for targeted advertising purposes or displaying ads on our platform.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ3 - Do the policies indicate whether or not any 3rd parties track or collect information for advertisement? ANSWER: Policies state third parties are not used for ads or tracking User Notes: Policies state no ads are used on its platform Policies state no ads are used on its platform	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ4 - Do the policies indicate whether or not web beacons or other tracking methods are used for ad purposes? ANSWER: Policies state that it only tracks interactions within its application OR policies state that it does not use any tracking technologies for ads User Notes: Policies state no ads are used on its platform Policies state no ads are used on its platform	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ5 - Do the policies state whether or not users can opt out of sharing data with advertisers? ANSWER: Policies state in detail how users can opt out of sharing data with advertisers OR policies state no ads are used on its platform User Notes: Policies state no ads are used on its platform Policies state no ads are used on its platform	Answer Meets Expectations	Unselected Option:	Unselected Option:

Vetting Context

Policies Cited

The following urls were cited as a basis for this information.

The person providing this information is NOT using the product.
The supplier was NOT consulted about this evaluation.

Geographical Context

(Laws and regulations can vary across regions)

Utah

United States

Regulatory Compliance

The information below provides insight into compliance with various regulatory policies.

GDPR Compliant: Yes
FERPA Compliant: Yes
COPPA Compliant: Yes

This application can be used by children under the age of 13.

The views and opinions expressed in this information are those of the authors and do not necessarily reflect the official policy or position of 1EdTech. The information provided is intended to surface trends about the policies and procedures of systems leveraged by the educational community. It should not be considered legal advice.

Disclaimer: 1EdTech Trusted Apps provides a vetting of a product's data policy according to the 1EdTech Trusted Apps Rubric. Achieving the TrustEd Apps Certified Seal indicates adherence to a baseline level of privacy. Institutions should review an application's detailed vetting results before approving it for use.

App Vetting Rubric Version: 2

ABOUT US

TrustEd Apps Profile for SchoolAI