Privacy Policy

1. Who We Are

Learning Wake is an educational technology platform operated by Learning Wake LLC, a California limited liability company. Our platform is available at learningwake.net and allows teachers to create project boards for students, track student progress, and import student rosters from Google Classroom.

For questions about this policy, contact us at: privacy@learningwake.net

2. Who This Policy Covers

This policy applies to all users of the Learning Wake platform, including:

• Teachers — educators who create and manage project boards
• Students — learners who access their assigned boards
• School Administrators — staff who manage teacher and student accounts at their school
• Visitors — anyone who browses learningwake.net without an account

3. What Information We Collect

Information collected from teachers and school administrators

• Name and email address (provided during account creation)
• School name and assignment (set by the site administrator)
• Google account email (if the teacher connects Google Classroom — read-only access only)
• Project boards, task lists, and class tags created by the teacher
• Feedback and comments posted to student accounts

Information collected from students

• Username and email address (created by a teacher or imported from Google Classroom)
• Display name
• Task completion status and progress on assigned boards
• Notes and links students add to their tasks

Information collected automatically

• IP address and browser type (collected by our web server for security purposes)
• Session cookies necessary for login functionality

4. How We Use Information

We use the information we collect solely to provide and improve the Learning Wake educational service. Specifically:

• To create and manage user accounts
• To display project boards and track student progress
• To send account-related emails (password resets, welcome emails)
• To allow teachers to import student rosters from Google Classroom
• To provide school administrators with visibility into their school’s usage
• To maintain the security and integrity of the platform

We do not use student data for advertising, marketing, data mining, or any purpose unrelated to the educational service.

5. Student Data — Special Protections

Student data receives the highest level of protection on our platform. We commit to the following:

• We will never sell student personal information
• We will never use student data to target advertising to students or their families
• We will never build profiles on students for non-educational purposes
• We will never share student data with third parties except as described in Section 9 (sub-processors necessary to operate the service)
• We will delete student data upon request from the school within 30 days
• We will notify the school within 72 hours of discovering a data breach affecting student data

6. FERPA

The Family Educational Rights and Privacy Act (FERPA) governs access to student education records. When Learning Wake provides services to a school, we act as a “school official with legitimate educational interest” under FERPA’s school official exception (34 CFR § 99.31(a)(1)).

This means:

• The school (not Learning Wake) is the FERPA-responsible party
• We act under the school’s direction and supervision
• We use student data only for the purpose of providing the educational service
• We do not re-disclose student education records to any party not authorized by the school
• Schools retain the right to review, correct, and request deletion of student data at any time

Schools that wish to use Learning Wake must execute a Data Processing Agreement (DPA) that formalizes this relationship. Contact us at privacy@learningwake.net to request our DPA template or to review yours.

7. COPPA

The Children’s Online Privacy Protection Act (COPPA) applies to online services directed to children under 13. Learning Wake does not knowingly collect personal information directly from children under 13 without consent.

When students under 13 use Learning Wake, we rely on the school to serve as the parental consent agent under COPPA’s school consent exception. By using Learning Wake with students under 13, the school represents that it has obtained all necessary parental consents required by COPPA through its existing technology use agreements with parents.

We collect the minimum information necessary from all users, including students under 13: a username, email address, display name, and task progress data only.

8. California SOPIPA

Learning Wake complies with the California Student Online Personal Information Protection Act (SOPIPA). Specifically, we:

• Do not use covered information to engage in targeted advertising to students
• Do not use covered information to amass a profile on a student for non-educational purposes
• Do not sell or rent a student’s information
• Do not disclose covered information unless required by law or as permitted under SOPIPA
• Use reasonable security procedures and practices to protect student information
• Delete student data covered by a school’s request within 30 days

9. How We Share Information

We do not sell, rent, or trade personal information. We share information only in the following limited circumstances:

• With sub-processors — third-party services necessary to operate the platform (see Section 10)
• With the school — school administrators can view data for students and teachers at their school
• As required by law — if we are required to disclose information by a court order or applicable law, we will notify the affected school or user to the extent permitted by law
• Business transfers — if Learning Wake is acquired or merges with another company, student data will only be transferred if the acquiring entity agrees to the same data protections described in this policy and applicable DPAs

10. Sub-Processors

The following third-party services process data in connection with operating Learning Wake. We have assessed each for data privacy compliance and include them in our DPA.

All sub-processors are located in the United States. We do not transfer personal data outside the United States.

11. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit: All data is transmitted over HTTPS/TLS. HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: Our hosting provider encrypts data at rest on all servers. OAuth tokens (Google Classroom access tokens) are additionally encrypted using AES-256-CBC before storage in our database.
• Access controls: Role-based access control ensures teachers can only see data for their own students, school administrators can only see data for their school, and students can only see their own data.
• Login protection: Failed login attempts are rate-limited and accounts are locked after repeated failures. Two-factor authentication is required for all administrator accounts.
• Backups: Daily encrypted backups are stored in a separate Google Drive account. Backups are tested periodically.

No method of transmission or storage is 100% secure. If we discover a breach affecting student data, we will notify affected schools within 72 hours as required by the California Consumer Privacy Act.

12. Data Retention and Deletion

We retain data only as long as necessary to provide the service:

• Active accounts: Retained as long as the school’s account is active
• After contract termination: All school data is deleted within 30 days of contract termination or upon written request
• Individual student deletion: A student’s data can be deleted at any time upon request from a teacher or school administrator
• Parent/guardian requests: Parents or guardians may request deletion of their child’s data by contacting their school, which will submit the request to us

Upon deletion, we remove all personally identifiable information from our active database. Encrypted backups containing the data will be overwritten within 90 days as part of our normal backup rotation cycle.

13. Cookies

Learning Wake uses only the cookies necessary to operate the service:

• Session cookies: Used to maintain your login state while you are using the platform. Deleted when you log out or close your browser.
• Security cookies: Used by Wordfence to protect against brute-force attacks.
• reCAPTCHA cookies: Set by Google reCAPTCHA on login and registration forms. See Google’s privacy policy at policies.google.com/privacy.

We do not use advertising cookies, tracking cookies, or any cookies that monitor your activity across other websites.

14. Your Rights

Depending on your location and role, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a machine-readable format (teachers and school admins may export data directly from the platform via the Backup feature)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

For student data rights: FERPA grants parents the right to access, review, and request correction of their child’s education records. These requests should be submitted to the student’s school, which will coordinate with us.

To exercise your rights, contact us at privacy@learningwake.net. We will respond within 30 days.

15. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page
• Notify schools with active accounts by email at least 30 days before the change takes effect
• For changes that materially affect how we handle student data, obtain re-consent from schools before the change takes effect

Continued use of the platform after the effective date of a policy update constitutes acceptance of the updated policy.

16. Contact Us