Privacy notice

Who is responsible

Each school that uses Presumptuous Learning decides who uses it and what it's used for, and is responsible for its students' records. Presumptuous Learning stores and processes those records on the school's behalf. Questions about a student's records go to the school first.

What we store

• Accounts: names, grade, school username, and email addresses for adults. Passwords are stored only in scrambled (hashed) form.
• Learning records: assessment answers and results, learning plans, lessons taken, practice and mastery checks, skills mastered.
• The school day: daily check-ins (mood and goal), reflections, attendance, assignments, and notes written by coaches.
• Student work: photos, recordings, videos and writing handed in to the portfolio, and project proposals and milestones.
• Activity records: who viewed or changed a student's records and when (the audit log).

Who can see it

• The student sees their own records.
• Parents linked with the school's family code see their own children's records, and only notes a coach chose to share.
• Coaches see students in their classes. School admins see all students in their school.
• No one at one school can see another school's records. The Launch Day showcase shows approved project titles with a first name and last initial, only to people at the same school.

AI features

Some features use Claude, an AI service made by Anthropic:

• Lessons and practice questions are written from the skill and grade only. No student information is sent.
• The AI tutor sends the practice question, its answer choices, the student's choice and their grade.
• Project ideas send the student's answers to the discovery questions and their grade. Students are asked not to include names or addresses.

Student names, usernames and email addresses are never sent to the AI service. Schools can require a parent's consent before a student uses the AI tutor or project ideas.

Email and sign-in

Emails (password resets, the weekly parent email and invoices) are sent through Resend, which receives the recipient's email address and the email's content. The weekly email includes the child's first name and their progress that week. Parents can stop it with one click from any weekly email or from Account.

Staff and parents can choose to sign in with Google or Microsoft. We receive only that account's ID, name and email address, and never see its password. Students don't use Google or Microsoft sign-in. A student's printed QR sign-in card works like a password; schools can replace a lost card at any time.

Where it's stored

Records are stored in a database hosted by Railway. AI requests are processed by Anthropic and emails are sent by Resend. All three currently process data in the United States. Schools that need data kept in Canada should raise this before signing up.

How long we keep it

Records are kept while the student is enrolled with their school, unless the school deletes them sooner. When a school deletes a student, their account, records and files are removed permanently. The audit log keeps a record that the deletion happened.

Your choices

• Consent: parents can give or withdraw consent for platform use and for AI features from their dashboard, at any time.
• A copy of the data: parents and school admins can download everything stored about a student.
• Deletion: parents can ask the school to delete their child's data from their dashboard. The school confirms and carries it out.
• Corrections: ask the school to correct anything that's wrong.

Security

Connections are encrypted. Passwords are hashed. Sign-in attempts are limited. Uploaded files are checked and only shown to people allowed to see that student. Every view of a student's records by staff or parents is logged.

Contact

Contact your child's school first. To reach Presumptuous Learning: [contact email to be added].