Test Environment

Privacy Policy

Effective Date: February 15, 2026

K12.io ("we," "us," or "our") is committed to protecting the privacy of educators, students, and school administrators who use our platform. This Privacy Policy explains how we collect, use, and safeguard your information.

1. Information We Collect

Account Information

  • Name, email address, and role (teacher, administrator, student)
  • School or district affiliation
  • Authentication credentials (passwords are hashed and never stored in plain text)

Usage Data

  • Apps you create, publish, or interact with
  • Feature usage and platform interactions
  • Device and browser information

Payment Information

  • Stripe processes all payments; we do not store credit card numbers
  • Transaction history and payout records for marketplace sellers

2. How We Use Your Information

  • Provide and maintain your account and the K12.io platform
  • Power AI-assisted app creation and personalization features
  • Process marketplace transactions and seller payouts
  • Facilitate rostering and single sign-on through school districts
  • Communicate service updates and respond to support requests

3. Your Data Stays Yours

We never sell your data — or your students' data. We never share it with advertisers, and we never use it to train AI models. Your information is used only to run the platform and the features you ask for.

We do not share your information with third parties for their own marketing or advertising purposes. The only third parties that receive your data are the service providers listed in section 5 below, and only the minimum data necessary for each integration to function.

4. Cookies & Analytics

We use a small number of cookies — but only to keep the platform working. We set session cookies to keep you signed in (or to remember your guest session while you build), and our sign-in and payment partners (Google, Microsoft, Clever, ClassLink, and Stripe) may set their own cookies when you use single sign-on or make a purchase.

We do not use advertising or tracking cookies, and we do not run any third-party analytics or tracking scripts. There is nothing to opt out of, because we do not track you.

5. Third-Party Services

We integrate with the following services to operate the platform:

  • Stripe — Payment processing and marketplace payouts
  • RosterStream — Class roster syncing with school information systems
  • OpenAI, Anthropic & DeepInfra — AI-powered app generation (prompts may be sent to these services; no student data is included)
  • Google, Microsoft, Clever, ClassLink — Single sign-on authentication
  • Resend — Transactional email delivery (verification codes, password resets, purchase receipts)

Each third-party service operates under its own privacy policy. We share only the minimum data necessary for each integration to function.

6. Student Privacy (COPPA & FERPA)

K12.io is designed for use by educators and school administrators. We are committed to compliance with the Children's Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA).

There are no ads in K12.io: we show no ads to students, we run no ad networks, and student data is never sold, licensed, or shared for advertising purposes.

  • We do not knowingly collect personal information from children under 13 without verifiable parental or school consent
  • Student roster data synced through RosterStream is used solely for educational purposes and is governed by agreements with school districts
  • Educators control what student-facing content they create and share

7. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (TLS), hashed passwords, and secure infrastructure. While no system is 100% secure, we continuously work to safeguard your information.

8. Data Retention & Deletion

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data by contacting us. Upon deletion, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., transaction records). Backup copies may retain deleted data for up to 90 days before being overwritten in the normal backup rotation cycle.

9. Your Rights

  • Access, correct, or delete your personal information
  • Export your data in a portable format
  • Opt out of non-essential communications
  • Request information about what data we hold about you

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via a prominent notice on the platform. K12.io has no marketing-email pipeline; the only emails we send are transactional (verification codes, password-reset links, contact-form replies, and purchase-related receipts).

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at privacy@k12.io.