Privacy

What we collect

TextTrek collects the minimum data necessary to deliver adaptive reading practice and display progress to teachers. In Pilot Mode (the default for new school partnerships), we collect even less.

What we never collect

This list is exhaustive. For the formal, contractual version, see our Data Minimization Addendum (available to school districts on request).

Belt-and-suspenders. Phone, email, and address are not collected as form fields anywhere in the application. The optional content-feedback channel (described below) is the only place a student could type free text. If a student does type a phone number, email, or street address into that field, the application automatically replaces it with a placeholder like [email] or [phone] before the message is stored, so the value never reaches the database in the first place.

Content-feedback channel

When a student is on a specific question or passage, they can submit a category-gated feedback item (categories: incorrect question, too easy / too hard, topic suggestion, other) with an optional ~3-line note. This is the only path by which a student's free text leaves their device. There are no chat, comment, DM, forum, or social-feed features anywhere in the application.

Two-tier teacher review. Every student feedback item is held in a pending state. The classroom teacher reviews it before any further routing and may:

• Resolve it locally (no further forwarding)
• Redact the message text and forward (replaces it with [redacted by teacher])
• Forward to the principal / media specialist queue
• Forward to TextTrek (the vendor) for product follow-up
• Or any combination of the above

Vendor visibility is opt-in by the school. TextTrek (the vendor) only sees feedback items the classroom teacher has explicitly routed to the vendor queue. The vendor view is also de-identified at the school level (school identities are replaced with anonymous indices like “School #1”).

PPRA. The channel does not solicit any of the eight protected categories under 20 U.S.C. §1232h(b) (political affiliation, mental health, sex, illegal behavior, family appraisals, privileged relationships, religion, income). Submissions are student-initiated, not vendor- or school-administered, which puts them outside PPRA's “survey or evaluation” wording. Teacher review is the operational backstop if a student spontaneously volunteers protected-category content.

No advertising. Ever.

TextTrek has no advertising infrastructure. No ad networks, no tracking pixels, no behavioral profiling, no data brokers. Student data is never sold, shared, or used for any purpose other than delivering reading practice and displaying progress to the student and their teacher. This is consistent with SOPIPA (Fla. Stat. 1006.1494).

No AI on student data

TextTrek uses AI (Anthropic Claude) to pre-generate reading passages and questions before publication. All AI-generated content is human-reviewed against Florida content standards before students see it. AI is never called at runtime, never receives student data, and never processes student responses. The adaptive engine uses deterministic scoring — no machine learning on student data.

Pilot Mode

In Pilot Mode (the default for new school partnerships), TextTrek never receives real student names. Students sign in under pseudonyms built from the teacher's last name and class period (e.g. smith-3-01, smith-3-02, etc.) with system-generated PINs. The school retains the only mapping between pseudonym and student. TextTrek's systems contain no input mechanism, API endpoint, or database field by which a real student name can be entered for a Pilot Mode account. A worst-case data breach of TextTrek in Pilot Mode yields: “smith-3-05 got 7 out of 10 on a passage about sharks” — with no way to identify the actual student.

Where data is stored

• All data stored in the United States (AWS US-East via Supabase, Vercel US)
• Encrypted at rest (AES-256) and in transit (TLS 1.2+)
• Access controlled by Row-Level Security — students see only their own data
• No data leaves the US at any point in the processing chain

Data deletion

Student data is deleted within 30 days of contract termination or upon District request. Specific student data can be deleted within 3 calendar days of request. Pilot Mode includes a “Close Pilot Class” function that permanently deletes all associated student records instantly.

Compliance

• FERPA (20 U.S.C. §1232g; 34 CFR Part 99) — TextTrek's pseudonymous pilot architecture avoids receiving student education records; where a district instead elects a data-sharing agreement, the school-official exception for outside contractors at 34 CFR §99.31(a)(1)(i)(B) applies
• COPPA (15 U.S.C. §§6501-6506; 16 CFR Part 312) — school-authorization mechanism recognized by the FTC's “Complying with COPPA: Frequently Asked Questions” (section on COPPA and Schools); no direct data collection from children
• Florida Statutes §§1002.22, 1002.222 — student-records rights and prohibited-data-category limits
• SOPIPA (Fla. Stat. §1006.1494) — no advertising, no data sales, no non-educational profiling
• WCAG 2.1 AA — Section 508 accessibility compliance

Questions?

For security concerns, see our responsible disclosure policy. For privacy questions, contact your school's designated Data Protection Officer or reach us at the contact information provided in your school's Data Sharing and Privacy Agreement.