Student Privacy
Last updated: November 5, 2026
A one-page summary for school technology and privacy reviewers deciding whether to allow apps.modelteaching.com on a school network. For the full notice, see our Apps Privacy Notice.
What we collect from students
Nothing.
No accounts, no names, no student work on our servers, no cookies, no advertising, and nothing shared or sold. A student opens a page and practices; nothing about them leaves the browser.
At a glance
| Category | What we collect |
|---|---|
| Student accounts | None |
| Student names | Never collected |
| Student work stored on our servers | None |
| Cookies | None |
| Advertising | None |
| Third-party trackers | None |
| Data sold or shared | None, ever |
How the apps work
A student opens a page and practices. What they type stays in that browser tab and disappears when the tab closes. Some apps also save progress on that device, such as which words need more practice, until someone clears it. Nothing about the student is sent to our servers, and there is no login, profile, or record tied to any student on our end.
One thing to know about Spelling Practice: when it plays a word or sentence from its recorded voice, the browser downloads that recording from our own host. A test downloads the recordings for its whole list when its start screen opens, the same ones whatever a student got right or wrong. A request asks for part of a large file and doesn’t name a word, but each part matches a particular word or sentence, so these requests could show our host which words from our sentence bank are on a list an adult made. They can’t show anything a student typed or which words were missed, and they carry no cookies. An adult can stop a list’s tests from making them by choosing a device’s voice in its Practice settings.
Our legal position, briefly
- FERPA does not attach. We hold no education records: no student identity, no server-side record of any student’s work, and no school contracts.
- COPPA is satisfied. The only personal information we receive is an IP address, used solely for internal operations like running the site and keeping it secure, exactly the purpose 16 CFR 312.5(c)(7) allows without parental consent. Spelling Practice’s recording requests, described above, can also show which bank words are on a list an adult made, and nothing about how a student did. We treat that as an adult’s list, and that view is on our list for legal review.
- State student-privacy laws are satisfied. Because we hold no covered information about any student, there is nothing to sell, share, or profile, and a deletion request costs us nothing to honor: there is nothing to delete.
Vendors and what each receives
| Vendor | What they receive |
|---|---|
| Fathom Analytics | Page path, browser type, and country, used to count visits. No cookies, no names, no student data. |
| Vercel | Basic technical request data (like IP address and browser type) needed to host and secure the site. Kept one day. For Spelling Practice's recorded voice, it also handles which part of a recording file was requested (see How the apps work). |
| Anthropic | What a teacher enters and chooses in our two teacher-only planning tools, the Math CFU Lesson Builder and the Writing Prompt & Rubric Builder, so the AI can write what was asked for. No student-facing app sends anything to Anthropic. |
| Resend | The text of a feedback message, only when a teacher or parent chooses to send one through our feedback form. |
Security summary
- All traffic to and from our apps is encrypted.
- A strict content security policy blocks any connection to a destination we have not explicitly allowed.
- Every input our servers accept is validated and size-limited before we do anything with it.
- Rate limits stop any single visitor from overwhelming the service.
- Our own code does not log visitor IP addresses or browsing activity. Our host keeps request logs for one day, as listed above.
Questions, or need an agreement on file?
Email us at apond@modelteaching.com with any question about how our apps work in your district. We’re glad to complete a district privacy agreement or a Student Data Privacy Consortium form if your procurement process requires one.