Privacy Policy
How we handle your data on Algebro.
Last updated: October 11, 2026
How we handle your data on Algebro.
Last updated: October 11, 2026
Algebro is operated by Algebro LLC, a Florida limited liability company. Algebro is an educational platform that helps middle school students prepare for the Florida Assessment of Student Thinking (FAST) and master the Florida B.E.S.T. math standards. We take student privacy seriously and this Privacy Policy describes how we handle personal information.
This policy applies to students, parents and guardians, teachers, and schools who use Algebro. It explains what data we collect, how we use it, how it is protected, who it is shared with, how long we keep it, and what rights you have. It also describes how Algebro complies with the Family Educational Rights and Privacy Act (FERPA), Florida's student education records law (Fla. Stat. § 1002.22), the Children's Online Privacy Protection Act (COPPA), and the Florida Student Online Personal Information Protection Act (FSOPIPA, Fla. Stat. § 1006.1494).
The short version:
Student accounts are created and managed through schools. We collect:
A student never needs an email address.
Students can always log in using a username and password provided or managed by their school. Whether students may also sign in through Google or ClassLink is the school's decision, not Algebro's and not the student's: Google sign-in is available unless a school administrator turns it off, and ClassLink only if the school connects it. Both options are described below. Both carry an email address, which only our sign-in provider (Clerk) holds; Algebro keeps no student email address in its own records.
School administrators have a “Google sign-in for students” setting on their Algebro dashboard. It is on by default, and a school administrator can turn it off at any time. While it is on, each student at that school may choose to create their Algebro account with their school Google account (after entering their teacher's class code; a personal Gmail address is refused), or to connect a Google account to the Algebro account they already have, and then sign in with the Google button instead of typing a password. Username and password stays available, and nothing changes for students who do not use Google.
When a student signs up with or connects a Google account, our sign-in provider (Clerk) receives and stores that Google account's email address, name, and profile picture. We use these details only to authenticate the student. They are not shown to other students, are never used to send email (students never receive email from Algebro), and are not shared with anyone else. Algebro does not copy the address into its own database. We do not access any other Google account data.
A school administrator can turn the setting off at any time. Turning it off hides the Google option at sign-up and in the Manage account menu; students who already use Google keep their Google sign-in until the connection is removed. While the setting is on, a student can disconnect the Google account from the Manage account menu, a teacher can give any student a password to sign in with instead, and a school can ask us to remove a connection at any time.
Schools that use ClassLink can choose to let students sign in from LaunchPad instead of, or alongside, a username and password. A student who signs in that way is identified to Algebro by the school's ClassLink account, which includes the student's name and school-issued email address, the student's ClassLink user ID, the school's ClassLink tenant ID, and the role ClassLink reports for the account. Our sign-in provider (Clerk) holds the email address and those three ClassLink details to identify the account. Algebro does not copy the email address into its own database and never uses it to contact the student. A school that does not connect ClassLink to Algebro sends us nothing.
Teachers sign up with an email address, normally their school one, or with Google or ClassLink. We use it to sign them in and to reach them about their account. We collect:
Parents and guardians can create an account by signing up with an email address or Google account. Parents can create student profiles for their children to access the platform. By creating a student profile, the parent provides direct verifiable parental consent (COPPA) for their child's data to be collected as described in this policy. We collect:
Credit card numbers and payment method details are handled entirely by Stripe and never touch Algebro's servers.
Stripe is used only for parent subscription billing. Students, teachers, and school-issued accounts do not interact with Stripe and no payment information is collected from them.
As students use Algebro, we collect educational data, including:
This data is used to show students their learning progress, provide teachers insight into class performance, and support instructional feedback.
Time on task. On learning pages (such as lessons, practice, quizzes, assignments, live games, the FAST practice test, the diagnostic, the placement test and the study plan), Algebro counts the time a student is actively working: the tab has to be open and in front, with a click, key press, scroll or touch in the last two minutes. It keeps one row per student per school day: the active minutes (capped at 6 hours), how many activities were finished, and the time of the last count. It does not record which page or what was on screen. It shows teachers when a student last worked and feeds streaks and achievements.
Students may earn BroCoins by completing lessons, quizzes, and practice sessions. We track BroCoin balances, earning events, and spending on virtual items (themes and cosmetic features).
BroCoins:
We use Vercel Analytics and Vercel Speed Insights to monitor platform performance. This may include page views, load times, error rates, and IP addresses.
This data is used solely for reliability, performance monitoring, and improving the educational experience. It does not involve student profiling or advertising.
Algebro's own database stores an IP address in one place: the counters that limit repeated attempts on the public sign-up and invite pages, which count attempts per address to block abuse. Those counters are cleared after about 7 days. IP addresses also reach Vercel, which hosts the site, and Better Stack when an error report is sent from a browser.
Students and teachers can use “Report a problem” to tell me something is broken. We keep what they type (up to 2,000 characters) as a support ticket, with the page they were on, their browser type, their account ID, role and school, and a copy is emailed to me. When a student's account is deleted, the report stays, but the account ID and browser details are removed from it, so it no longer points to the student's account.
Algebro uses a small number of cookies that are strictly necessary for the platform to function. We do not use advertising cookies, tracking cookies, or third-party marketing cookies.
algebro-active-profile): used for parent accounts only. When a parent selects a student profile, this cookie stores the selected profile ID so the platform knows which child's data to display. It contains only an internal profile identifier—no names, emails, or other personal information. This cookie is HTTP-only, secure in production, and persists for up to 1 year.algebro-invite): holds the code from an invite link while the person signs up, so the link never sits in the address bar. It is HTTP-only (page scripts cannot read it), secure in production, and expires two hours after the link is opened, or sooner once the account is made.algebro-signup-intent): remembers which kind of account (student, teacher, parent or school administrator) a person was creating when they left for Google's sign-in screen, so they come back to the right step. It holds only that word and expires after 30 minutes.algebro-teacher-sections): teachers only. It remembers which sections of the class report pages a teacher has hidden, as short section codes, and lasts 1 year.algebro-teacher-preview (HTTP-only, up to 4 hours). Algebro's own staff tools set short-lived HTTP-only cookies in staff browsers only.By using Algebro, you consent to the use of these strictly necessary cookies. Because these cookies are required for the platform to operate, they cannot be disabled.
We use collected data to:
We do not use student data for advertising, marketing, profiling, or non-educational purposes.
We process personal information on one or more of the following legal bases, depending on the relationship and type of data:
When Algebro processes student education records on behalf of a school or district, we act as a “school official” with a legitimate educational interest under FERPA — see the FERPA section below.
Algebro uses AI (powered by OpenAI) to assist students through the Bro learning guide, and in tools for teachers (Brofessor, the teacher assistant, building question sets, and importing a worksheet from a PDF). For students:
A student can type anything into the chat, and what they type is sent. Bro is told never to ask for a name, school, age, or other personal details, and not to repeat them if a student offers them.
Bro Chat interactions (conversational tutoring) are stored temporarily in the user's browser session and are not saved to Algebro's database.
Algebro does not use AI to write feedback on quiz answers, and stores none.
Building a question set from a description, a class review set, and live game help send the teacher's words, skill codes and class-wide totals, never anything about one student unless a teacher types it into the request. Import from a PDF sends the pages of the file the teacher uploads.
Brofessor, the teacher assistant, answers a teacher's questions about their own classes. To answer questions like “who needs help with ratios?” it sends results about individual students: percent correct by skill, which assignments each student finished and their score on each, their FAST practice scores and levels, their working levels from the placement test and the diagnostic, the day they joined and the last day they worked, and how many questions they answered. Before anything is sent, every student name on the teacher's rosters, including a name the teacher types, is replaced with a private code that means nothing outside Algebro, and the teacher's screen turns the codes back into names. Class names, assignment titles and question text are sent with any student name in them replaced the same way. OpenAI never receives a student's name, username, email address or account identifier from Brofessor, and never anything a student typed: answers waiting to be graded are counted, not sent. A nickname or misspelling that Algebro cannot match to a roster name reaches OpenAI as typed, which is why Brofessor asks teachers to use the name as it appears on the roster. The conversation is kept only in the teacher's browser tab, not on Algebro's servers.
No training on student data.
Algebro uses OpenAI's API. Per OpenAI's API data usage policy, data submitted through the API is not used by OpenAI to train or improve its models by default. Algebro does not opt in to any data-sharing or training programs. Algebro never adds a student's name, username, or account identifier to a request sent to OpenAI, and disables response storage on every API call. OpenAI retains API data for up to 30 days for abuse monitoring and then deletes it. Algebro executed a Data Processing Addendum with OpenAI in July 2026. See OpenAI's Enterprise Privacy page and Data Processing Addendum.
We use the following service providers to operate Algebro:
Authentication and account management. Receives: student names, usernames, and passwords. Also holds the Google account details (email address, name, profile picture) of students who chose to sign up with their school Google account or connect a Google account (available unless their school turns it off), and the school email address, ClassLink user ID, ClassLink tenant ID and ClassLink role of students who sign in through ClassLink.
Database hosting. Receives: all educational records (progress, scores, answers).
Website hosting and performance monitoring (Analytics & Speed Insights). Receives: page views, performance metrics, IP addresses.
AI-powered learning assistance and teacher tools. Receives: math problems, student answers, and lesson context; for teacher tools, the teacher's messages and class data, with every student name replaced by a private code. Algebro never sends a student's name, username, or account identifier. Data sent via API is not used to train OpenAI models.
Payment processing for parent subscriptions only. Receives: parent email address, payment method details, billing address. Stripe is not used for student, teacher, or school-issued accounts. Stripe handles all payment data directly; Algebro does not store credit card numbers.
Optional sign-in provider. If you choose to sign in with Google, we receive your name, email address, and profile picture from your Google account. We do not access any other Google account data. For students, Google sign-in is available unless their school administrator turns it off (it is on by default), and only when the student chooses to sign up with their school Google account or connect a Google account; see Student Accounts above.
Email delivery to adult account holders only (parents, teachers, and school administrators). Receives: the recipient's email address and name, and the content of each email. Students never receive email from Algebro.
Uptime monitoring and error tracking. Receives: error reports (the error message, where in the code it happened, the page address, and the browser type) and, when a report is sent from a browser, that device's IP address. Error reports leave out names, email addresses, and cookies. A page address can contain an internal record ID.
These providers receive only the data necessary to perform their services. We maintain Data Processing Agreements (DPAs) with our service providers: executed directly with Supabase and OpenAI (July 2026), and incorporated into the service terms of Clerk, Vercel, Stripe, Resend, and Better Stack. We do not share student data with any other third parties except as required by law.
Where data is kept. Student records are stored in the United States (Supabase, us-east-1). Clerk hosts primarily in the United States. The AI provider (OpenAI) does not commit to a processing location; Algebro adds no student name or account id to AI requests.
For a detailed list of subprocessors — including the data each one receives, where it is processed, and links to their DPAs and security pages — see our Subprocessors page.
Algebro's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Teachers can access data only for students in their own classes, including:
Teachers cannot access data from other classes or schools. A live game hosted without a class is open to any signed-in Algebro user who has its PIN, and the host sees each player's first name, last initial and score for that game, and how many questions each player got right.
During a live classroom game, the projected screen and the other players see each player's first name and last initial (or username, if no name is on file) and their score. A game hosted for a class can be joined only by students in that class.
A student with a school account can make a one-time code (it expires after an hour) and give it to a parent or guardian, and up to four adults can be linked to one student. A linked adult sees that student's school work and progress: results by skill, FAST practice and diagnostic results, working levels, achievements, and the last day they worked. The student or the parent can remove a link at any time. Parent Link is on unless the school turns it off, and turning it off cuts every linked parent's access at that school.
Parent Link Plus, paid by the parent through Stripe, lets a linked parent turn on a weekly review set for that student: Algebro builds it from the questions the student has been missing and assigns it to the student directly, and the parent sees how it went. A school can turn Parent Link Plus off separately.
When Algebro is used by a school or district under a written agreement — whether through a direct contract, a data privacy agreement, or a click-through terms of service accepted by an authorized school representative — the following applies:
Algebro operates as a “school official” with a “legitimate educational interest” in student education records under the FERPA school-official exception (34 CFR § 99.31(a)(1)). Algebro performs an institutional service or function for which the school would otherwise use its own employees — specifically, providing standards-aligned math instruction, practice, assessment, and progress reporting. In that role, Algebro:
Education records remain the property of the school or district. Algebro does not sell, rent, or disclose education records to any third party except: (a) to subprocessors contractually bound to protect the data; (b) as directed by the school or district; (c) as required by law; or (d) in the event of a merger, acquisition, or other business transfer, in which case the receiving entity must agree to honor the commitments in this policy. Algebro does not use education records to build advertising profiles or to target advertising.
Under FERPA and Florida's student education records law (Fla. Stat. § 1002.22), parents and eligible students have the right to inspect and review education records. When Algebro is operating under a school agreement, these rights are exercised through the school or district. Parents should contact their child's school to request access, correction, or deletion of records; the school can then forward the request to Algebro, and we will respond in accordance with our agreement with the school.
Algebro complies with the Florida Student Online Personal Information Protection Act (Fla. Stat. § 1006.1494), which governs how online educational services handle personal information of K–12 students in Florida. Specifically, Algebro:
“Covered information” means personally identifiable information or material in any media or format that is created or provided by a student, a parent, or an employee or agent of the K–12 school, to Algebro in the course of the student's, parent's, or school's use of the site or service, or that is created or provided by Algebro in the course of providing the site or service and is descriptive of the student.
We use reasonable technical and organizational measures to protect personal information, including:
No system can be guaranteed 100% secure. We work to continuously improve our practices and to respond quickly if something goes wrong.
If Algebro experiences a data security incident that compromises the confidentiality, integrity, or availability of personal information, we will:
Schools, districts, parents, or anyone else who believes they have identified a potential security issue should email security@algebro.ai.
Algebro is designed for middle school students, including children under 13. We comply with the Children's Online Privacy Protection Act (COPPA).
Student accounts are created through schools using class access codes provided by teachers. Under COPPA's school consent exception (16 CFR 312.5(c)(4)), schools may consent to the collection of student information on behalf of parents for educational purposes only. Schools are responsible for providing parents with notice of Algebro's data practices and obtaining any required parental consent before distributing class access codes to students.
For student profiles created by parents through their parent account, the parent provides direct verifiable parental consent by creating the account and student profile. This is not the school consent exception—parents are directly consenting to the collection of their child's educational data. Parents can review their child's work from the parent dashboard, delete a practice profile they created, and remove their link to a school account. For a copy of the data, or to delete a school account's data, email privacy@algebro.ai.
Parents and guardians have the right to:
To exercise these rights, contact us at privacy@algebro.ai or contact your child's school directly.
We collect only the minimum data required for educational use. We do not collect student phone numbers, physical addresses, or other contact information. Student email addresses are never required, and Algebro never asks a student for one. The school-controlled sign-in options described under Student Accounts (Google sign-in, which is on unless a school administrator turns it off, and ClassLink) carry one, which only our sign-in provider holds, for sign-in. Algebro keeps no student email address in its own records and never uses one to contact a student. We do not condition a student's participation on disclosing more personal information than is reasonably necessary.
We retain data for the following periods:
Schools, districts, and parents may request deletion of student data at any time. On receipt of a verified request, Algebro deletes the covered student information, usually immediately and always within 30 days of the request, subject to limited exceptions required by law (for example, records we must retain for tax or audit purposes). When a school's or district's agreement with Algebro ends, Algebro deletes its students' covered information within 60 days.
Deleted data can remain in our database provider’s encrypted backups for up to 7 days before they roll off. The login provider (Clerk) removes a deleted login within 90 days.
When Algebro is used under an agreement with a school or district, Algebro will delete a student's covered information within 30 days after we are notified that the student is no longer enrolled in or being served by the school, unless the school or parent directs otherwise or retention is required by law. Specific deletion timelines may be set in the district's data privacy agreement with Algebro.
For parent-created student profiles not operating under a school agreement, Algebro does not delete a profile automatically when an account goes inactive. The profile and its data are kept until the parent deletes the profile from the parent dashboard or asks us to delete it.
To request deletion or data export, contact privacy@algebro.ai. Parents can review their child's work, delete a practice profile they created, and remove their link to a school account from the parent dashboard. For a copy of the data, or to delete a school account's data, email privacy@algebro.ai.
Parents and guardians have the right to:
Parents can review their child's work and remove their link from the parent dashboard, and can delete a practice profile they created there. For a copy of the data, or to delete it, email privacy@algebro.ai. When Algebro is operating under a school agreement, requests should generally be submitted through the school; the school may forward the request to Algebro.
Students who are 13 or older may request to review, correct, or delete their own data by contacting Algebro directly at privacy@algebro.ai, or by asking a parent, guardian, or teacher to submit the request on their behalf. When Algebro is used under a school agreement, access requests are generally coordinated through the school under FERPA. Students age 13 or older do not receive an expanded data collection footprint — we still collect the minimum information needed to operate the service.
California residents may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the rights to know, delete, correct, and opt out of the “sale” or “sharing” of personal information. Algebro does not sell or share personal information as those terms are defined under CCPA/CPRA. California residents may submit requests at privacy@algebro.ai.
Algebro will not discriminate against any user for exercising their privacy rights — for example, by denying service or charging a different price — except where the exercise of a right makes it impossible for us to provide the service (for example, if all student data is deleted, practice and progress tracking can no longer function).
We may update this Privacy Policy periodically. If material changes are made, we will notify users through the platform. The "Last Updated" date reflects the most recent revision.
For questions, concerns, or data requests:
Algebro LLC
See also our Terms of Service.