Student Data Privacy

• Students never create accounts or use Bellready. Only teachers enter student information.
• Last names are not required. First or preferred names are enough.
• We never sell student data.
• We never use student data for advertising or to build profiles for non-educational purposes.
• We don't use student data to train AI models.
• Teachers can download or permanently delete their data at any time.
• Data is encrypted in transit and at rest, and stored in the United States.

All student information is entered by the teacher and is limited to what the teacher chooses to record:

• First or preferred names
• Optional flags, such as IEP, 504, ELL, speech, OT, or medical and allergy notes
• Private teacher notes and substitute notes
• Attendance, groups, and lesson outcomes or mastery

The classroom projection screen is displayed by the teacher. Students view it on the classroom display; they don't sign in or interact with Bellready's systems.

• Data is stored in the teacher's browser and synced to our database (Supabase, hosted in the United States) so it is available on the teacher's devices.
• Access controls limit each teacher's data to that teacher's account.
• Data is encrypted in transit (HTTPS) and encrypted at rest by our database provider.
• Teachers sign in by an emailed magic link; there are no shared passwords.

We use a small number of service providers (subprocessors):

• Supabase: database and sign-in
• Vercel: hosting
• Anthropic: optional AI features. When drafting parent messages, the student's name is replaced with a placeholder before anything is sent. Other AI features send the lesson and planning content the teacher provides. Anthropic does not use API data to train its models.
• Google (YouTube Data API / search): receives search queries for resource suggestions only. No student data.

Tip for teachers: keep student names and identifying details out of free-text AI prompts.

A teacher can create a link so a substitute can view the sub plan. The link carries the sub plan and only the student information the teacher chooses to include. It uses a random, unguessable token, expires within 7 days, and can be revoked at any time. Anyone with the link can view it until then, so it should be shared only with the substitute or school staff.

Under the Family Educational Rights and Privacy Act, schools may share education records with providers acting as "school officials" with a legitimate educational interest. Bellready operates in that role:

• We use student data only to provide Bellready to the teacher and school, under their direction.
• The school and teacher keep ownership and control of student records.
• We don't disclose student data except to the subprocessors listed above, or as required by law.

Teachers are responsible for entering student information in line with their school's or district's policies.

Bellready is not directed to children, and children do not create accounts or provide information to us. Student information is entered by teachers for educational purposes on behalf of their school, and is used only to provide the service to that school, never for commercial purposes such as advertising.

Washington's student user privacy law (RCW 28A.604) sets rules for school service providers. Consistent with it, we:

• Don't sell student personal information
• Don't use it for targeted advertising or to build profiles for non-educational purposes
• Use it only for the educational purposes of the service
• Protect it with reasonable security measures
• Delete it when the teacher or school asks
• Give notice before making material changes to how we handle student data

We follow the same core commitments found in California's SOPIPA and AB 1584, and in similar laws in other states:

• No targeted advertising based on student data
• No selling student data
• No profiling students for non-educational purposes
• The school and teacher own and control student records
• Students' parents or guardians can review and correct information through the school
• Reasonable security, and notice to affected teachers and schools if there is a breach
• Deletion of student data on request or when an account is deleted

If you want to review, correct, or delete information about your child, please contact your child's teacher or school. They control the records, and we will help them complete your request. You can also reach us at hello@bellready.app and we will work with the school.

• Export: Settings → Download my data gives the teacher a complete JSON copy of their data.
• Delete: Settings → Delete my account permanently deletes the account and synced data from our database immediately. Backup copies are overwritten on our providers' standard schedule.
• By request: teachers and schools can email hello@bellready.app to access, correct, or delete data.

If we learn of a security incident affecting student data, we will notify affected teachers and schools without undue delay and as required by law.

District privacy officers: we're happy to support your review. On request, we will sign the Student Data Privacy Consortium (SDPC) National Data Privacy Agreement or the Washington Data Privacy Agreement.

Email hello@bellready.app with your district name and the agreement you'd like to use, and we'll get back to you. We can also answer security questionnaires and provide our current subprocessor list.

For full details, see our Privacy Policy and Terms of Service.