Privacy Policy - School Edition

Last Updated: August 16, 2026

DAILE Learning Inc. is committed to protecting the privacy and security of student, teacher, and school data. For School Edition, we act as a school official under FERPA and a third-party contractor under New York Education Law §2-d when a school contracts with us. This page describes our practices. It is not a signed Data Privacy Agreement (DPA) or a Parents’ Bill of Rights. The school’s contract controls if it conflicts with this page. New York schools should also read Education Law §2-d.

1. Introduction

This Privacy Policy ("Policy") applies to anyone using DAILE Learning Inc.’s School Edition product. The Company's website is a data and artificial intelligence literacy education site. By using the Company website, you consent to the data practices described in this statement.

2. FERPA & New York State Education Law §2-d Data Privacy Policy

The opening of this page states our role. The rest of this section lists what we collect, how we use it, and the safeguards we apply in the product.

2.1 Scope of Policy

This policy applies to all data collected through our educational platform, including:

  • Interactive student lessons (grades K–5)
  • Teacher-facing analytics dashboards
  • Related services provided to schools, teachers, students, or parents

2.2 Compliance with Applicable Laws

School Edition is designed to support schools that must follow:

A New York educational agency still needs a written contract or DPA. Website terms alone are not that contract.

2.3 Types of Data Collected

We collect only the minimum necessary data to provide our educational services.

Student Data
  • Email address (used as the sign-in username)
  • First name, last name, or display name (when provided)
  • Grade level
  • Optional school student ID, if the school includes it on a roster
  • Lesson activity (which activities were completed, scores, and time spent)
Teacher/Admin Data
  • Name and email address
  • Class rosters (if provided by the school)
  • Student performance summaries

Note: We do not collect sensitive personal data such as Social Security numbers, biometric data, or unrelated financial information.

2.4 Data Use and Purpose

We use data solely for educational purposes, including:

  • Delivering grade-appropriate lessons the school has licensed
  • Enabling teachers to track student progress
  • Operating, securing, and improving the educational service

We do not use data for marketing, behavioral targeting, or commercial profiling of students.

2.5 Data Sharing and Third Parties

We do not sell or share student data with third parties for advertising or commercial use. Limited third-party service providers (hosting, database, transactional email, and school billing) may have access to data solely for operating the platform. They may use it only to provide that service. We encrypt data in transit (TLS) and encrypt database storage at rest. District contracts (including a §2-d DPA) set additional processor terms for New York schools.

2.6 Data Security and Encryption

We take the following measures to protect data:

  • Encryption in transit (TLS) and encryption at rest for database storage
  • Role-based access in the product (student, teacher, school admin)
  • Invite-only student accounts; hashed passwords; hashed, expiring invite PINs
  • Multi-factor authentication for DAILE staff on GitHub, Vercel, and Supabase dashboards (not required for student or teacher logins)
  • Authentication and last-sign-in records in our identity provider; hosting and deploy logs at Vercel and GitHub; billing events at Stripe. We do not keep a product-wide log of every database row that is read.

2.7 Data Retention and Deletion

We retain student data only as long as necessary to fulfill educational purposes or as required by the school district’s contract. Upon request from a school or at contract termination:

  • Student data will be securely deleted within 60 days
  • Permanent deletion will be confirmed in writing

2.8 Parental and Student Rights

Under FERPA and Ed Law 2-d:

  • Parents have the right to review their child’s educational records upon request
  • Schools or parents may request corrections or deletions of inaccurate student data
  • Student accounts are invite-only. Children cannot create an account through a public sign-up form.

Requests can be made by contacting: info@dailelearning.com
Subject line: Data Privacy Request

2.9 Data Breach Notification Protocol

In the event of a data breach or unauthorized release of student PII:

  • We notify the educational agency in the most expedient way possible and within seven calendar days, as Education Law §2-d requires of third-party contractors
  • The school then notifies parents and NYSED on the timelines that apply to educational agencies

3. California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"):

  • Right to Know: You may request details on what personal data we collect, use, and share.
  • Right to Delete: You can request deletion of personal data, subject to certain legal exceptions.
  • Right to Correct: You may request corrections to inaccurate personal information.
  • Right to Opt-Out: You can opt out of the sale or sharing of personal data for advertising.
  • Right to Restrict Sensitive Data Use: You may limit the use of sensitive personal information.
  • Right Against Retaliation: The Company will not discriminate against you for exercising your rights.

4. Types of Information We Collect

Student Data

  • Email address (used as the sign-in username)
  • First name, last name, or display name (when provided)
  • Grade level / assigned teacher
  • Optional school student ID, if provided by the school
  • Lesson activity (completed activities, scores, time spent, completion timestamp)

Teacher Data

  • Name and school email address
  • Class rosters (if provided)
  • Student performance summaries

Admin Data

  • Subscription manager name, phone number, and email address.

5. Use of Information

Your data is used only for educational or service-related purposes:

  • Deliver grade-appropriate lessons
  • Enable teacher oversight and progress tracking
  • Operate and improve our platform
  • Communicate account or service updates
  • Respond to your inquiries

We do not use student data for marketing, behavioral targeting, or commercial profiling.

6. Data Sharing and Third Parties

We do not sell or lease personal or student data. We may share limited information with contracted vendors (hosting, database, email, payments) so they can provide those services. New York district DPAs set additional processor terms.

We may disclose data if required by law or in emergency circumstances to protect public safety or our legal rights.

7. Use of Cookies

DAILE Learning Inc. may use cookies to enhance functionality. Cookies cannot be used to run programs or deliver viruses to your computer. You may decline cookies through your browser settings, but this may limit some interactive features.

8. Data Security

DAILE Learning Inc. secures your personal information from unauthorized access, use, or disclosure. Measures include:

  • TLS encryption in transit and encryption at rest for database storage
  • Role-based access in the product
  • Invite-only student accounts; hashed passwords; hashed, expiring invite PINs
  • Multi-factor authentication for DAILE staff on GitHub, Vercel, and Supabase dashboards (not required for student or teacher logins)
  • Authentication and last-sign-in records in our identity provider; hosting and deploy logs at Vercel and GitHub; billing events at Stripe. We do not keep a product-wide log of every database row that is read.

9. Data Retention and Deletion

We retain data only as long as needed to provide services or meet legal/contractual obligations. Upon request by a school or upon contract termination:

  • Student data is deleted within 60 days
  • We confirm permanent deletion in writing

Under the CCPA and CPRA, you have the right to request that the Company, and any third parties with whom your personal information is sold or shared, delete any personal information that has been collected about you. To exercise your rights, contact us at info@dailelearning.com.

Please note that we may not be able to comply with requests to delete your personal information if it is necessary to:

  1. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
  2. Debug to identify and repair errors that impair existing intended functionality;
  3. Comply with the California Electronic Communications Privacy Act;
  4. Comply with an existing legal obligation.

10. Children's Privacy (Under Age 13)

Child data for School Edition is handled as described in our COPPA notice and Education Law §2-d page. Student accounts are created by school invite. Under FTC guidance, the school may consent as the parent’s agent for school-authorized educational use only. New York schools still need a signed DPA; this website is not that contract.

DAILE Learning Inc. collects personally identifiable information from children under the age of 13, including the child’s email address used as a sign-in username. If we discover that we have collected a child's personal data without the required consent, we will delete it as soon as possible, unless we have a legal obligation to keep it. If you are under the age of 13, you must ask your parent or guardian for permission to use this website. If you are a parent and you have questions regarding our data collection practices, please contact us using the information provided at the end of this Policy.

11. Email Communications

From time to time, DAILE Learning Inc. may contact school administrators and teachers via email for the purpose of providing announcements, service alerts, confirmations, and/or other operational communication. We do not send promotional or marketing email to student accounts. In order to improve our services, we may receive a notification when you open an email from DAILE Learning Inc. or click on a link therein. You can unsubscribe at any time.

12. Changes to This Statement

DAILE Learning Inc. reserves the right to change this Policy periodically. For example, when there are changes in our services, changes in our data protection practices, or changes in the law. When changes to this Policy are significant, we will inform you. You may receive a notice by sending an email to the primary email address specified in your account, by placing a prominent notice on our DAILE Learning Inc., and/or by updating any privacy information.

Your continued use of the website and/or services available after such modifications will constitute your:

  • (a) acknowledgment of the modified Policy; and
  • (b) agreement to abide by and be bound by that Policy.

13. Contact Information

If you have questions or concerns regarding this Policy, please contact:

DAILE Learning Inc. Email: info@dailelearning.com
Subject line: Privacy Policy Inquiry

The DAILE Learning Team