Algebro

For schools, charters, and district privacy offices

Algebro for Schools and Districts

Everything you need to vet Algebro, whether you are a 300-student charter or a district privacy office: who touches student data, how it is protected, and how to reach the person responsible. That person is me. I'm Justin Korwin, the founder, and I answer every privacy email myself.

Last updated: August 3, 2026

Start My SchoolOpen the school dashboard
US subprocessors, listed publicly
6
Student email addresses collected
0
Grade 6-8 benchmarks covered
114

The short version

  • Students sign in with a username only. We never collect student email addresses.
  • We do not sell data, serve ads, or build advertising profiles. Ever.
  • Six vendors process data on our behalf, all in the United States. They are all listed publicly.
  • No personally identifiable information is ever sent to the AI provider.
  • Deletion requests go to a person, not a queue: jkorwin@algebro.ai.

What your school actually gets

Teachers

A class dashboard showing performance by student and by standard.

See the teacher view

School admins

School-wide performance by benchmark, filterable by grade.

See the admin view

Students

Lessons, targeted practice, and a full-length adaptive FAST practice test for grades 6, 7, and 8: all 114 benchmarks.

No tiers

Nothing on this platform is quote-only or locked behind an upgrade. Families pay $10 a month; schools are priced by student count.

See pricing

Who processes student data

Algebro runs on six third-party providers. No other company receives student data, and none of them may use it for anything beyond providing their service to Algebro.

Supabase

Primary database. Holds the educational records: student names, usernames, progress, scores, and answers. Hosted in the United States (us-east-1).

Clerk

Authentication. Holds usernames, password hashes, and session tokens. Student accounts have no email address attached.

Vercel

Web hosting and CDN. All platform traffic passes through Vercel infrastructure.

OpenAI

Powers the AI tutor and quiz feedback. Receives math problems, student answers, and lesson context only. No names, usernames, emails, or other personally identifiable information is ever sent. API data is not used to train OpenAI models.

Stripe

Payment processing for parent subscriptions only. No student, teacher, or school account data touches Stripe.

Resend

Email delivery for account notifications and the opt-in newsletter. Adults only: parents, teachers, and school administrators. Students never receive email.

The full list, including exactly what data each provider receives, where it is processed, and links to each provider's data processing and security documentation, is on our Subprocessors page. We give advance notice before adding a subprocessor or changing what one does. If your district needs to be on that notice list, email me and I'll add you.

Algebro maintains a Data Processing Agreement with every provider on that list: executed directly with Supabase and OpenAI (July 2026), and incorporated into the service terms of Clerk, Vercel, Stripe, and Resend. Copies and our internal review of each agreement are available to district privacy officers on request.

FERPA and COPPA posture

Student accounts are username-only. We collect a student's first name, last name, username, and password. We do not collect student email addresses, phone numbers, or physical addresses, and we do not condition participation on providing more information than that.

When a school or district uses Algebro, we operate as a “school official” with a legitimate educational interest under FERPA's school-official exception (34 CFR § 99.31(a)(1)). Education records remain the property of the school or district, and we use them only for the purposes the school authorizes.

For students under 13, school-created accounts rely on COPPA's school consent exception (16 CFR § 312.5(c)(4)): the school consents on behalf of parents, for educational purposes only. Parent-created student profiles rely on direct verifiable parental consent instead. Either way, we comply with Florida's student privacy law (FSOPIPA, Fla. Stat. § 1006.1494): no targeted advertising, no profiling outside K-12 purposes, no selling or renting student information.

The complete details, including retention periods and parental rights, are in our Privacy Policy.

Security overview

Authorization on every request

Every read and write of user data is authorized server-side in application code. Teachers can see only their own classes; students can see only their own work.

Deny-all row-level security

The database enforces deny-all row-level security policies. No browser or client ever queries the database directly; all access goes through server-side code, so a compromised or modified client still cannot read another user’s rows.

Encryption

All traffic is encrypted in transit (HTTPS/TLS) and data is encrypted at rest in the database.

Passwords

Handled by Clerk, never stored in plain text, never visible to Algebro.

No analytics on student surfaces

Web analytics load only on public marketing pages and adult (teacher, parent, admin) dashboards, never on student-facing pages.

AI data protection

Requests to our AI provider carry no student names, usernames, or identifiers; response storage is disabled on every call; and API data is never used to train AI models.

Security audit

I ran a full security audit of the platform in June 2026 and applied its fixes.

If you believe you have found a security issue, email jkorwin@algebro.ai and I will respond promptly.

Rostering and single sign-on

ClassLink

In certification

In certification. ClassLink single sign-on is built and is going through ClassLink's certification process now.

Google

Live for sign-in

Teachers and parents can sign in with Google today. Roster import from Google Classroom is on the roadmap.

If your school or district uses a rostering setup not listed here, email me. Manual class setup with teacher-generated join codes works everywhere without any integration. Google Workspace admins who need our OAuth client IDs before rollout can email me for them.

What happens if you email me

  1. You tell me your school and a rough student count.

  2. I create your school and send you one school code.

  3. Your teachers sign up with that code and each generate class codes.

  4. You get a school admin account: every class, every teacher, and school-wide performance by benchmark in one view. That's the dashboard you just clicked through

  5. Students join with the class code. Usernames only, no student emails, no IT ticket.

Most schools are running the same week.

Start my school →

Reply with your school name and a rough student count. That's the whole first step.

Data deletion and privacy requests

Schools, districts, and parents can request deletion or export of student data at any time. On a verified request, I delete the covered student information within a reasonable time, subject only to records the law requires us to keep. When a district tells us a student is no longer enrolled, the same deletion applies.

I also sign district data privacy agreements. Send yours over, or ask for our documentation, and you will be dealing with me directly rather than a legal inbox.

Algebro LLC

Privacy, DPA, deletion, and security contact: jkorwin@algebro.ai

See also our Privacy Policy, Subprocessors, and Terms of Service.

Send Me Your School Name and a Student Count

That is the whole first step. I create the school, send one code, and your teachers are generating class codes the same day.

Email About My SchoolOpen the School Dashboard

Schools and districts do not use the public family trial. Pricing is by student count, and I answer the email myself.

Algebro for Schools and Districts | Data Privacy and Security