Present Education Privacy Policy

Effective Date: October 26, 2026

Present Education provides educational curriculum and classroom tools for teachers, schools, and students. We take student privacy seriously and design our services to collect only the information reasonably necessary to provide and protect the educational service.

This Privacy Policy explains what information Present Education collects, how we use it, when it may be shared, and the choices available to schools and users.

Information We Collect

Account Information

When a user signs in to Present Education using Google, we may receive information associated with that Google account, including:

• name;
• email address;
• profile image;
• account identifiers; and
• authentication information necessary to securely sign the user in.

We use this information to identify users and provide the appropriate account and curriculum access.

School and Course Information

Present Education may maintain information about:

• the school, classroom, or organization associated with an account;
• whether a user is a student, teacher, or administrator;
• courses in which a student is enrolled;
• class-code associations; and
• curriculum access or licensing information.

This information is used to make sure users receive access only to the organizations and courses they are authorized to use.

Learning Activity

Present Education may store limited information about a student's use of curriculum, including:

• lessons opened;
• first and most recent lesson access;
• lesson completion;

This information allows the service to preserve student progress and provide continuity between sessions.

Present Education does not currently collect student grades, assignment responses, free-response submissions, home addresses, phone numbers, school-issued student identification numbers, health records, or discipline records through its core curriculum service.

Technical Information

Our technology providers may automatically process limited technical information necessary to operate and secure the service, such as device or browser information, IP address, timestamps, authentication events, request information, and error or security logs.

How We Use Information

Present Education uses personal information only as reasonably necessary to:

• authenticate users;
• maintain accounts;
• associate users with the correct school, classroom, and course;
• provide authorized curriculum access;
• preserve student lesson progress;
• administer teacher trials and school access;
• provide customer and technical support;
• maintain service reliability and security;
• comply with applicable law and contractual obligations.

Student information is used for educational and service-operational purposes.

Our Student Privacy Commitments

Present Education does not:

• sell student personal information;
• rent student personal information;
• use student information for targeted advertising;
• use student information to create advertising profiles;
• use student information to market unrelated products to students; or
• use identifiable student information to train public or general-purpose artificial intelligence models.

We do not use student information for unrelated commercial purposes.

Schools and Student Records

When Present Education is used by a school or educational organization, student information is processed to provide the educational service authorized by that organization.

Where applicable, Present Education intends to operate as a school service provider or school official performing an institutional educational function under the direction of the school or educational organization.

Teachers should use Present Education with students in a manner their school or educational organization has authorized and when they are authorized to invite those students to the service.

How Information Is Shared

Present Education may share information with service providers that help us operate the service, such as providers of authentication, database infrastructure, hosting, and other necessary technology services.

These providers may process information only as necessary to provide their services to Present Education and subject to applicable privacy and security requirements.

We may also disclose information:

• at the direction of an authorized school or educational organization;
• when reasonably necessary to protect the security or integrity of the service;
• when required or permitted by law; or
• as part of a business transaction subject to applicable student-data protections.

Present Education does not sell student personal information.

Security

Present Education uses administrative and technical safeguards designed to protect personal information.

These safeguards include authentication, role-based access controls, database-level access restrictions, organization and course authorization, protected administrative functions, and restricted access to private curriculum resources.

Data Retention and Deletion

Present Education keeps student information only for as long as reasonably necessary to provide the authorized educational service, maintain security, meet legitimate legal obligations, or follow the direction of the school or educational organization.

Schools and other authorized educational organizations may request deletion of student information associated with their use of Present Education.

When a verified deletion request is received, Present Education will delete or de-identify covered student information from active systems within a reasonable period, subject to legitimate legal or security requirements.

Information contained in disaster-recovery backups may remain temporarily until those backups expire through their normal retention cycle. Deleted information will not be restored to active use except when necessary for legitimate disaster recovery, security, or legal purposes.

Changes to This Policy

Present Education may update this Privacy Policy as our services or legal obligations change.

If we make material changes affecting how school-controlled student information is used, we will provide notice when required and will continue to honor applicable school agreements and legal requirements.

Contact Us

Questions about privacy or student information may be directed to:

Present Education
lana@presenteducation.org

Student Data Deletion Procedure

When Present Education receives a request to delete student information:

1. Verify the Request

Determine who is making the request.

Requests involving school-controlled student information should ordinarily come from or be confirmed by an authorized representative of the school or educational organization.

If a parent or student contacts Present Education directly about school-controlled education records, Present Education may coordinate with the school to verify the requester's identity and authority.

2. Identify the Student Data

Identify information associated with the relevant account, including as applicable:

• user profile;
• organization membership;
• course enrollment;
• lesson progress; and
• other student-specific records maintained by Present Education.

3. Check for Required Retention

Determine whether any information must temporarily be retained because of:

• a legal obligation;
• an active security investigation;
• a documented legal hold; or
• another legitimate requirement.

Information should not be retained unless deemed neccessary.

4. Delete or De-Identify the Information

Delete or permanently de-identify the student information from active Present Education systems.

Deletion should not affect unrelated student accounts or records.

5. Backups

Information may remain temporarily in disaster-recovery backups until those backups expire according to the service provider's normal backup schedule.

Deleted information in backups should not be restored to ordinary production use.

6. Document Completion

Maintain a minimal record showing:

• that a verified deletion request was received;
• when it was completed; and
• who authorized or completed it.

The deletion log should not unnecessarily recreate the student information that was deleted.

7. Confirm Completion

Notify the authorized requester that deletion from active systems has been completed and, where applicable, explain that temporary backup copies will expire through the normal backup cycle.

Present Education Security Controls

Present Education uses multiple layers of technical and administrative safeguards designed to limit access to student information and curriculum.

Authentication

Users authenticate through supported secure authentication providers, including Google sign-in.

Application authorization is based on the authenticated user's identity rather than a user ID supplied by the browser.

Database-Level Authorization

Present Education uses database-level access controls, including Row Level Security, to restrict information based on the authenticated user.

Security does not rely solely on whether a page or button is visible in the application.

Student Data Isolation

Students can access only their own profile, enrollment, and lesson-progress information through normal application access.

Students cannot retrieve another student's profile or enrollment records.

Organization Isolation

Access is restricted according to organization membership and role.

Users in one school or organization cannot access protected information belonging to another organization merely by changing a URL, course identifier, or database request.

Course Authorization

Student curriculum access requires:

1. an authenticated account;
2. appropriate organization membership;
3. enrollment in the applicable course; and
4. a current curriculum entitlement.

These requirements are enforced at the database level.

Teacher Access

Teachers receive only information required for currently supported classroom functions.

Teachers do not have direct access to student enrollment records or student profiles.

Where the teacher trial dashboard needs to display the number of participating students, the database returns only an aggregate count of unique students rather than underlying student records.

Class Codes

Class codes are used to enroll authenticated students into authorized courses.

Students cannot directly query the class-code database.

Teachers can access their own class codes. Organization administrators may access codes associated with their organization.

Class-code redemption verifies the authenticated user and applicable course and organization requirements before creating an enrollment.

Administrative Access

Platform-wide administrative functions are restricted to authorized platform administrators.

Administrative status cannot be granted through ordinary client-side account changes.

Privileged administrative operations verify administrative authorization before accessing or modifying protected information.

Protected Database Writes

Students and ordinary teachers cannot directly create or modify membership, enrollment, entitlement, or other protected authorization records.

Sensitive operations use controlled server or database functions that validate the authenticated user and applicable permissions.

Privileged Credentials

Privileged database credentials and service-role credentials are restricted to server-side operations and are not intentionally exposed to browser applications.

Private Curriculum Resources

Protected curriculum resources are stored using restricted access.

Where temporary resource links are required, access is validated before a temporary signed link is provided.

Data Minimization

Present Education limits the student information collected by the core service.

Present Education currently does not collect student:

• grades;
• assignment responses;
• home addresses;
• phone numbers;
• school-issued student identification numbers;
• health records; or
• discipline records.

The core service maintains account identity, school/course association, and limited lesson-progress information necessary to provide the educational service.

Security Review

Present Education periodically reviews its authorization architecture and access controls.

Changes involving student information should be evaluated for data minimization, appropriate access, organization isolation, and database-level authorization before release.

Incident Response

Suspected unauthorized access to student information is investigated and contained promptly.

Present Education will work with affected educational organizations and applicable service providers and will provide notification when required by applicable law or agreement.

No online service can guarantee absolute security. Present Education maintains safeguards intended to reduce risk and restrict personal information to authorized users and systems.