Privacy Policy
Last updated: February 6, 2026
Our Commitment to Privacy
SparkSchool AI ("we," "our," or "us") is committed to protecting the privacy of schools, educators, and students who use our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered educational platform. We are committed to complying with applicable privacy laws including FERPA, COPPA, and other child data protection regulations.
FERPA Compliance
SparkSchool AI is committed to compliance with the Family Educational Rights and Privacy Act (FERPA). We operate as a "school official" with a "legitimate educational interest" under FERPA when providing services to schools.
Our FERPA Commitments:
- We use student education records only for the purposes for which disclosure was made
- We do not disclose student information to third parties without proper consent or authorization
- We provide parents and eligible students access to their data upon request
- We maintain appropriate security safeguards to protect student records
- We return or destroy student data at the school's request
- We sign Data Privacy Agreements (DPAs) with schools upon request
COPPA Compliance
We comply with the Children's Online Privacy Protection Act (COPPA) to protect the privacy of children under 13 years of age.
Our COPPA Commitments:
- School-based consent: We rely on schools to obtain verifiable parental consent for students under 13
- Data minimization: We collect only the minimum information necessary to provide our educational services
- No behavioral advertising: We do not use children's data for targeted advertising
- No selling of data: We never sell personal information of children
- Parental access: Parents can review, request deletion, or refuse further collection of their child's data
- Security measures: We implement reasonable security measures to protect children's information
Additional Data Protection Compliance
In addition to FERPA and COPPA, we follow these data protection standards:
- GDPR: For users in the European Union, we comply with General Data Protection Regulation requirements
- India DPDP Act: We comply with the Digital Personal Data Protection Act, 2023 for Indian users
- Student Privacy Pledge: We support the principles of the Student Privacy Pledge
- SOC 2 Type II: Our infrastructure provider maintains SOC 2 Type II compliance
- State Student Privacy Laws: We comply with applicable state-level student privacy laws (California SOPIPA, New York Ed Law 2-d, etc.)
Information We Collect
Account Information
- Name, email address, and school affiliation
- Role (teacher, administrator, coordinator)
- Subjects and grade levels taught
- School name and location
Usage Information
- Content created using our AI tools (lesson plans, assessments, etc.)
- Feature usage patterns and preferences
- Device and browser information
- IP address and access timestamps
Student Data (when applicable)
- Performance analytics aggregated at class level
- Assessment responses (only when explicitly shared by teachers)
- We minimize direct student data collection
- No personally identifiable student information is shared with AI providers
How We Use Your Information
- To provide and improve our AI-powered educational tools
- To generate curriculum-aligned content based on your preferences
- To provide analytics and insights for classroom improvement
- To send important product updates and support communications
- To ensure platform security and prevent misuse
Data Security
We implement industry-standard security measures to protect your data:
- All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access controls and authentication for all data access
- Regular security audits and vulnerability assessments
- Data is stored on secure, SOC 2 compliant infrastructure
- Role-based access controls (RBAC) for schools
- Regular penetration testing and security reviews
Data Sharing
We do not sell your personal information. We may share data only:
- With AI service providers (OpenAI, Anthropic) to generate content - no student PII is shared
- With infrastructure providers (cloud hosting) under strict data protection agreements
- When required by law or to protect safety
- With your school administration (for school accounts)
Data Retention & Deletion
You have control over your data:
- Account data is retained while your account is active
- You may request data export or deletion at any time
- Upon school contract termination, all data is deleted within 30 days
- Anonymized usage analytics may be retained for product improvement
- Parents can request deletion of their child's data at any time
Your Rights
Under applicable data protection laws, you have the right to:
- Access and receive a copy of your personal data
- Correct inaccurate personal data
- Request deletion of your personal data
- Object to or restrict certain processing
- Data portability
- Lodge a complaint with a supervisory authority
Contact Us
For privacy-related questions or to exercise your rights, contact us at:
Email: privacy@sparkschool.ai
Data Protection Officer: dpo@sparkschool.ai
Address: SparkSchool AI, Ahmedabad, Gujarat, India
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notification. Continued use of the platform after changes constitutes acceptance of the updated policy.