CLASSPAL STUDENT DATA PRIVACY POLICY

Effective Date: August 3, 2026
Last Updated: August 3, 2026

1. Introduction

Welcome to ClassPal, a digital education improvement ecosystem owned and operated by Digjy LLC (“ClassPal,” “Company,” “we,” “our,” or “us”).

Protecting student information is one of our highest priorities. This Student Data Privacy Policy explains how ClassPal collects, uses, stores, protects, shares, and manages student information when providing educational services.

This Policy applies to all student information processed through:

• The ClassPal website
• Student accounts
• Parent accounts
• School accounts
• AI tutoring services
• Educational dashboards
• Assignments
• Assessments
• Learning analytics
• Mobile applications (if available)
• APIs
• Future ClassPal educational services

This Policy should be read together with our:

• Terms of Service
• Privacy Policy
• Cookie Policy
• Security Policy
• AI Terms of Use
• Responsible AI Policy
• School Agreement

Where a written agreement with a school or educational institution conflicts with this Policy, the school agreement governs for data processed under that agreement.

2. Our Commitment

ClassPal is designed with student privacy and educational trust in mind.

We are committed to:

• Protecting student information.
• Supporting educational institutions.
• Respecting parental rights.
• Limiting data collection to legitimate educational purposes.
• Implementing reasonable administrative, technical, and organizational safeguards.
• Complying with applicable student privacy laws.
• Continuously improving our privacy and security practices.

3. Scope

This Policy applies to information relating to students who use ClassPal directly or through a participating educational institution.

It covers:

• Personal information
• Educational records
• Learning activity
• AI tutoring interactions
• Assignments
• Assessments
• Communications
• Technical information
• School-provided information
• Parent-linked information

4. Student Information We Collect

Depending on how ClassPal is used, we may collect:

Account Information

• First name
• Last name
• Username
• Email address
• Date of birth or age range, where appropriate
• Grade level
• School affiliation
• Classroom information
• Profile preferences
• Parent-linked account information

Educational Information

• Assignments
• Homework
• Quiz results
• Assessment scores
• Practice exercises
• Learning progress
• Educational goals
• Teacher feedback
• Learning recommendations
• Study history

AI Tutoring Information

• Questions submitted to the AI
• Uploaded educational materials
• AI conversations
• AI-generated responses
• Educational prompts
• Personalized tutoring interactions

Technical Information

• Device information
• Browser type
• Operating system
• Login activity
• IP address
• Session information
• Platform usage
• Error logs

5. Information We Receive From Schools

Participating schools may provide information including:

• Student rosters
• Grade levels
• Course enrollment
• Classroom assignments
• School identifiers
• Teacher assignments
• Student educational records necessary to provide ClassPal services

Schools remain responsible for determining what information is shared with ClassPal.

6. Information We Receive From Parents

Parents or legal guardians may provide:

• Contact information
• Student account information
• Permission settings
• Communication preferences
• Account management information

Parents are responsible for ensuring that information they provide is accurate.

7. How We Collect Student Information

Student information may be collected:

• During account registration
• Through school integrations
• From parents or guardians
• During AI tutoring sessions
• Through assignments and assessments
• Through educational activities
• Through communications
• Through cookies and similar technologies
• Through platform usage
• Through technical logs necessary for security and operation

8. How We Use Student Information

Student information is used only for legitimate educational, operational, security, contractual, and legal purposes.

Examples include:

• Creating student accounts.
• Delivering AI tutoring.
• Personalizing learning.
• Tracking educational progress.
• Providing assignments.
• Supporting assessments.
• Delivering educational recommendations.
• Supporting school administration.
• Providing parent dashboards.
• Improving platform functionality.
• Maintaining security.
• Preventing fraud.
• Detecting misuse.
• Complying with applicable law.
• Enforcing our agreements.

We do not sell student personal information.

9. Artificial Intelligence Processing

ClassPal AI may process student information to:

• Generate educational responses.
• Personalize tutoring.
• Adapt explanations.
• Recommend study materials.
• Identify learning gaps.
• Improve educational experiences.
• Support individualized learning.

AI processing is designed to assist learning and is not intended to replace teacher judgment or make solely automated decisions with legal or similarly significant effects concerning students.

10. Student Educational Records

Student educational records may include:

• Coursework
• Assignments
• Grades entered into the Platform
• Assessment results
• Quiz scores
• Learning progress
• AI tutoring history
• Educational feedback
• Teacher comments
• Parent-linked educational information

Educational records remain subject to applicable laws and any agreements with participating educational institutions.

11. FERPA Compliance

When ClassPal is used by or on behalf of schools subject to the Family Educational Rights and Privacy Act (FERPA):

• We process education records only for authorized educational purposes.
• Schools retain responsibility for determining disclosures and obtaining any required permissions.
• We do not claim ownership of school education records.
• We support schools in meeting applicable FERPA obligations through appropriate contractual and operational measures.

Nothing in this Policy transfers a school’s legal responsibilities under FERPA to Digjy LLC.

12. COPPA Compliance

Where applicable, ClassPal is designed to support compliance with the Children’s Online Privacy Protection Act (COPPA).

For children under the age of 13, we collect personal information only when we have an appropriate legal basis, such as:

• Verifiable parental consent;
• Authorization from a school acting on behalf of a parent where permitted by law; or
• Another lawful basis recognized under COPPA.

Parents may request access to, correction of, or deletion of their child’s eligible personal information, subject to applicable law and school agreements.

13. Parent Rights

Subject to applicable law and school agreements, parents and legal guardians may have the right to:

• Review their child’s personal information.
• Request correction of inaccurate information.
• Request deletion of eligible information.
• Manage permissions.
• Review educational activity made available through the Platform.
• Contact ClassPal regarding privacy concerns.

Identity verification may be required before processing requests.

14. Information Sharing

We disclose student information only when necessary to provide the Platform or as otherwise permitted or required by law.

Depending on the circumstances, information may be shared with:

• Participating schools.
• Parents or legal guardians.
• Authorized service providers.
• Cloud hosting providers.
• Authentication providers.
• AI infrastructure providers.
• Customer support providers.
• Security service providers.
• Government authorities when legally required.

We do not sell student personal information.

15. Service Providers

Service providers may process student information only to perform services on our behalf, such as:

• Secure hosting
• Authentication
• Artificial intelligence processing
• Email delivery
• Security monitoring
• Platform maintenance
• Backup and disaster recovery

Where applicable, service providers are required by contract to safeguard the information they process.

16. Data Security

We maintain administrative, technical, and organizational safeguards designed to protect student information.

Security measures may include:

• Encryption in transit using industry-standard protocols.
• Encryption of sensitive data at rest where appropriate.
• Role-based access controls.
• Secure authentication.
• Multi-factor authentication for privileged administrative access where feasible.
• Security monitoring.
• Audit logging.
• Regular software updates.
• Vulnerability management.
• Backup and disaster recovery procedures.

Although we work to protect student information, no security system can guarantee absolute security.

17. Data Retention

Student information is retained only for as long as reasonably necessary to:

• Provide educational services.
• Support participating schools.
• Meet contractual obligations.
• Resolve disputes.
• Protect against fraud and abuse.
• Comply with legal and regulatory requirements.

Retention periods vary depending on the nature of the information and applicable legal obligations.

18. Data Deletion

Eligible student information may be deleted upon request, subject to:

• Applicable law.
• School agreements.
• Recordkeeping obligations.
• Security requirements.
• Pending legal claims.
• Legitimate operational needs.

Where deletion is not possible, information may be retained only for those limited purposes and protected accordingly.

19. Student Privacy Rights

Subject to applicable law, students and parents may have rights to:

• Access eligible personal information.
• Request correction of inaccurate information.
• Request deletion of eligible information.
• Receive copies of certain information where required by law.
• Contact us regarding privacy concerns.

Requests may require verification of identity to protect student information.

20. Changes to This Policy

We may update this Student Data Privacy Policy to reflect changes in:

• Educational services.
• Platform features.
• Technology.
• Security practices.
• Applicable laws.
• Regulatory guidance.

When material changes are made, we will update the Last Updated date and provide additional notice where required by applicable law.

21. Contact Information

If you have questions regarding this Student Data Privacy Policy, please contact:

Digjy LLC
ClassPal Privacy Office

Website: https://classpal.digjy.xyz (update if your production domain changes)

Email: contact@classpal.digjy.xyz (or replace with a dedicated privacy email such as privacy@classpal.digjy.xyz if established)

You may contact us regarding:

• Student privacy
• FERPA
• COPPA
• Parent rights
• Data access requests
• Data correction requests
• Data deletion requests
• Security concerns
• General privacy questions

22. Final Statement

Digjy LLC is committed to protecting student privacy and fostering trust with students, parents, schools, and educators. We continuously evaluate and strengthen our privacy and security practices to support a safe, secure, and effective educational environment while complying with applicable student privacy laws and educational standards.