Privacy for schools

This page explains how Flashdrop handles student data for schools on a School License. It adds to our main Privacy Policy, which applies to everyone.

Our promises

• No ads. Flashdrop never shows ads to students and never uses student data for advertising.
• We never sell student data. Not to advertisers, data brokers or anyone else.
• Used only to run the app. Student notes, photos and answers are used only to read the notes, make quizzes and show progress to that student.
• No profiles for anything else. We don't build profiles of students except to run the app for them (for example, learning their handwriting to read it better).
• Schools stay in control. A school can ask us to delete all of its students' data at any time, and we will.

What we collect from students

• Their school Google account name and email (to sign in and to match them to your school by email domain).
• Birth month and year, to confirm they're 13 or older.
• The notes, photos and pages they add, the text we read from them, their quizzes, answers and study progress.
• How many pages they scan each month, so the school can see usage and fair-use limits work.

Who can see student data

Each student's notes and quizzes are private to them unless they choose to share a quiz. School admins and teachers on the dashboard see each student's email, when they were last active and how many pages they used this month. They don't see students' notes or answers.

Paper tests graded with Test Maker

When a teacher grades paper tests, the scanned answer sheets, the names on their roster and the scores are private to that teacher. Other teachers and school admins can't see them. Bubbles are read on the teacher's own device; only the written-answer boxes (and the name line, when there's no roster) are sent to Anthropic's Claude to suggest points, which the teacher approves. If the teacher returns results, each student opens only their own result with a private link. Deleting the class set, or the teacher's account, deletes the sheets and scores.

Service providers

We use a small number of providers to run Flashdrop: Supabase (database and storage), Vercel (hosting), Anthropic (the AI that reads notes and writes questions; it does not train on this data) and Google (sign-in). Stripe handles the school's invoices; it doesn't receive student data.

Deleting your school's data

A school admin can email schools@flashdropai.com from a school address to delete all data for the school's students, or for specific students. We confirm when it's done. Students can also delete their own account in Settings at any time.

Student Data Privacy Agreement

Many districts require a signed Student Data Privacy Agreement (DPA). Ours is being prepared with a lawyer. See the DPA page for its status, or email us your district's agreement to review.