Data Privacy Policy

We do not collect any personally identifiable information (PII) from students. This includes:

• No real names
• No email addresses
• No dates of birth
• No phone numbers
• No school IDs
• No home addresses

Each student is represented by:

• A pseudonym — a randomly generated nickname (e.g., "Giggly Panda 07")
• A student token — a cryptographic secret stored only on the student's device
• A hashed token — we store only a one-way hash; the raw token is never saved on our servers
• Activity logs (food, movement, sleep) linked only to the pseudonym

To protect privacy, per-pseudonym detail is only shown when a class has 5 or more active students. For smaller classes, only aggregated class averages are displayed.

Student data is automatically deleted 30 days after the class project end date (configurable by the institution admin). A nightly cleanup process permanently removes expired student records and logs.

Students can:

• Opt out — stop participation; data retained until retention period ends
• Delete permanently — immediately and irreversibly remove all data

Teachers and admins can also delete any student's data on request.

All data is transmitted over TLS (HTTPS). Student tokens are hashed with SHA-256 and a per-student salt. Audit logs store only pseudonyms — never tokens or PII. No third-party analytics receive pseudonyms or tokens.

COPPA: Classes for children under 13 require parental consent acknowledgment before joining. True verifiable parental consent may require additional processes — consult legal counsel.

FERPA: We do not accept school rosters to avoid FERPA obligations. Students self-enroll via class codes.

HIPAA: If integrating with school health providers, a Business Associate Agreement (BAA) and legal review are required.