Algebro

For schools, charters, and district privacy offices

Algebro for Schools and Districts

Everything you need to vet Algebro, whether you are a 300-student charter or a district privacy office: who touches student data, how it is protected, and how to reach the person responsible. That person is me. I'm Justin Korwin, the founder, and I answer every privacy email myself.

Last updated: September 6, 2026

Start My SchoolOpen the school dashboard
US subprocessors, listed publicly
6
Student Google sign-in until your admin turns it on
Off
Grade 6-8 benchmarks covered
114

The short version

  • Students sign in with a username and password by default. Whether they may also use Google or ClassLink sign-in is your decision; Google stays off until a school administrator turns it on.
  • We do not sell data, serve ads, or build advertising profiles. Ever.
  • Six vendors process data on our behalf, all in the United States. They are all listed publicly.
  • No personally identifiable information is ever sent to the AI provider.
  • Deletion requests go to a person, not a queue: jkorwin@algebro.ai.

What your school actually gets

Teachers

A class dashboard showing performance by student and by standard.

See the teacher view

School admins

School-wide performance by benchmark, filterable by grade.

See the admin view

Students

Lessons, targeted practice, and a full-length adaptive FAST practice test for grades 6, 7, and 8: all 114 benchmarks.

No tiers

Nothing on this platform is quote-only or locked behind an upgrade. Families pay $10 a month; schools are priced by student count.

See pricing

Who processes student data

Algebro runs on six third-party providers. No other company receives student data, and none of them may use it for anything beyond providing their service to Algebro.

Supabase

Primary database. Holds the educational records: student names, usernames, progress, scores, and answers. Hosted in the United States (us-east-1).

Clerk

Authentication. Holds usernames, password hashes, and session tokens. Student accounts have no email address attached unless the school turns on Google sign-in for students (off by default) or signs students in through ClassLink.

Vercel

Web hosting and CDN. All platform traffic passes through Vercel infrastructure.

OpenAI

Powers the AI tutor and quiz feedback. Receives math problems, student answers, and lesson context only. No names, usernames, emails, or other personally identifiable information is ever sent. API data is not used to train OpenAI models.

Stripe

Payment processing for parent subscriptions only. No student, teacher, or school account data touches Stripe.

Resend

Email delivery for account notifications and the opt-in newsletter. Adults only: parents, teachers, and school administrators. Students never receive email.

The full list, including exactly what data each provider receives, where it is processed, and links to each provider's data processing and security documentation, is on our Subprocessors page. We give advance notice before adding a subprocessor or changing what one does. If your district needs to be on that notice list, email me and I'll add you.

Algebro maintains a Data Processing Agreement with every provider on that list: executed directly with Supabase and OpenAI (July 2026), and incorporated into the service terms of Clerk, Vercel, Stripe, and Resend. Copies and our internal review of each agreement are available to district privacy officers on request.

FERPA and COPPA posture

Student accounts are username-only by default. We collect a student's first name, last name, username, and password. We do not collect student phone numbers or physical addresses, and we do not condition participation on providing more information than that.

Username and password is the default, and whether students may also sign in through Google or ClassLink is your school's decision. A school administrator can turn on Google sign-in for students (off by default), after which each student chooses whether to connect their school Google account; and a school that connects ClassLink sends us the student's school email with each sign-in. Either way the address is used to sign the student in and never to contact them, and a school that keeps username and password only never has a student email on file with us.

When a school or district uses Algebro, we operate as a “school official” with a legitimate educational interest under FERPA's school-official exception (34 CFR § 99.31(a)(1)). Education records remain the property of the school or district, and we use them only for the purposes the school authorizes.

For students under 13, school-created accounts rely on COPPA's school consent exception (16 CFR § 312.5(c)(4)): the school consents on behalf of parents, for educational purposes only. Parent-created student profiles rely on direct verifiable parental consent instead. Either way, we comply with Florida's student privacy law (FSOPIPA, Fla. Stat. § 1006.1494): no targeted advertising, no profiling outside K-12 purposes, no selling or renting student information.

The complete details, including retention periods and parental rights, are in our Privacy Policy.

Security overview

Authorization on every request

Every read and write of user data is authorized server-side in application code. Teachers can see only their own classes; students can see only their own work.

Deny-all row-level security

The database enforces deny-all row-level security policies. No browser or client ever queries the database directly; all access goes through server-side code, so a compromised or modified client still cannot read another user’s rows.

Encryption

All traffic is encrypted in transit (HTTPS/TLS) and data is encrypted at rest in the database.

Passwords

Handled by Clerk, never stored in plain text, never visible to Algebro.

No analytics on student surfaces

Web analytics load only on public marketing pages and adult (teacher, parent, admin) dashboards, never on student-facing pages.

AI data protection

Requests to our AI provider carry no student names, usernames, or identifiers; response storage is disabled on every call; and API data is never used to train AI models.

Security audit

I ran a full security audit of the platform in June 2026 and applied its fixes.

If you believe you have found a security issue, email jkorwin@algebro.ai and I will respond promptly.

Rostering and single sign-on

ClassLink

Certified partner

Algebro is a certified ClassLink partner. Teachers, students, and school admins sign in straight from LaunchPad with no school code, and Algebro picks up their role from ClassLink. Using it is your school's choice; username and password sign-in works without it. Roster sync through OneRoster is next.

Google

Live for sign-in

Teachers and parents can sign in with Google today. Students can too, once a school administrator turns on Google sign-in for students in the school dashboard. It is off by default, each student chooses whether to connect their school Google account, and connecting stores that account's email, name, and photo with Clerk for sign-in only. Roster import from Google Classroom is on the roadmap.

If your school or district uses a rostering setup not listed here, email me. Manual class setup with teacher-generated join codes works everywhere without any integration. Google Workspace admins who need our OAuth client IDs before rollout can email me for them.

What happens if you email me

  1. You tell me your school and a rough student count.

  2. I create your school and send you one school code.

  3. Your teachers sign up with that code and each generate class codes.

  4. You get a school admin account: every class, every teacher, and school-wide performance by benchmark in one view. That's the dashboard you just clicked through

  5. Students join with the class code. Usernames only by default, no IT ticket.

Most schools are running the same week.

Start my school →

Reply with your school name and a rough student count. That's the whole first step.

Data deletion and privacy requests

Schools, districts, and parents can request deletion or export of student data at any time. On a verified request, I delete the covered student information within a reasonable time, subject only to records the law requires us to keep. When a district tells us a student is no longer enrolled, the same deletion applies.

I also sign district data privacy agreements. Send yours over, or ask for our documentation, and you will be dealing with me directly rather than a legal inbox.

Algebro LLC

Privacy, DPA, deletion, and security contact: jkorwin@algebro.ai

See also our Privacy Policy, Subprocessors, and Terms of Service.

Send Me Your School Name and a Student Count

That is the whole first step. I create the school, send one code, and your teachers are generating class codes the same day.

Email About My SchoolOpen the School Dashboard

Schools and districts do not use the public family trial. Pricing is by student count, and I answer the email myself.

Algebro for Schools and Districts | Data Privacy and Security