School & Student Privacy

This page summarizes CramLoop’s approach to student information for schools, districts, teachers, parents, and guardians. It supplements the Privacy Policy and does not replace any district-specific agreement that may be required.

Purpose limitation

Student information is used to provide educational features such as account access, teacher connections, assignments, assessment delivery, scoring, progress tracking, practice, reporting, and platform security. CramLoop does not use student information for targeted advertising or unrelated commercial profiling.

No sale of student data

CramLoop does not sell student personal information.

Teacher access

Teachers may access student information reasonably necessary to manage students connected to them, including assignments, attempts, scores, reports, and relevant study progress. CramLoop is designed to keep teacher-only administrative and answer-key information separate from normal student workflows.

School authority and consent

Schools and districts are responsible for determining the legal and policy basis for student use of CramLoop, including whether parental consent, a school-official designation, a data-processing agreement, or another authorization is required. CramLoop will cooperate with reasonable district review requests and does not represent this public page as a substitute for a district contract where one is required.

FERPA and COPPA

CramLoop is designed to support school-directed educational use and data minimization. Whether FERPA, COPPA, or state student-privacy requirements apply to a particular deployment depends on the users, ages, school relationship, and authorization in place. CramLoop does not claim that use of the service by itself satisfies every school or district obligation under those laws.

Data access, correction, and deletion

Schools and authorized users may request access, correction, or deletion of eligible student information. CramLoop may retain limited information when reasonably necessary for security, legal compliance, dispute resolution, or legitimate recordkeeping.

Service providers

Core infrastructure currently includes Vercel for application hosting and delivery and Supabase for authentication and database services. These providers process information only as needed to operate their services under their applicable terms and security programs.

Advertising and tracking

CramLoop does not include third-party advertising in the student experience and does not use student information to build advertising profiles.

Security

CramLoop uses HTTPS, authenticated access, database access controls, role-based application controls, and browser security protections intended to reduce unauthorized access. More information is available on the Security page.

District review

Technology, privacy, procurement, or legal teams may review CramLoop before school-wide deployment. CramLoop can provide reasonable information about domains that require network access, core service providers, data categories, access controls, and platform functionality.