Security & privacy
What we collect, where it lives, and how to exercise your rights.
A plain-language walk-through of how Recallhaus handles student data — written for the parents who want to know, and the district IT leads who have to sign off.
What we collect
Only what the district roster already carries — plus the formative signal the platform generates as the student works.
- Student name and district-issued SIS ID
- Grade level and roster assignment
- Formative-assessment scores and drill attempts
- Teacher notes shared through the teacher console
We do not collect: Social Security numbers, home addresses, biometrics, voice or video, device location, free-text from students, or any contact information beyond what’s in the district roster.
How we use it
Student signal powers the per-topic gap detection, calibrates the drill queue, and — only where the district has consented — writes outcomes back to the LMS gradebook. No advertising, no selling, no profiling outside the learning context.
Where it lives
Encrypted in transit and at rest, hosted in a US-region Postgres, with daily encrypted backups retained for thirty days.
Who can see it
Access is scoped to the role that needs it, and every read is logged.
- The student — sees their own drills and the immediate feedback on each one.
- The teacher — sees per-student gap data for their roster and the Friday weekly digest.
- Parents and guardians — see their own child’s weekly digest and any one-on-one tutoring transcript triggered by an escalation.
- District admins — see aggregate-only dashboards; never individual student PII.
- Recallhaus engineers — see production only through scoped, audited, time-boxed access, and only to resolve a support incident.
Retention
The student record is held for the active school year plus one academic year. Drills and formative signal are held for the duration of the licensed term. Both are deleted on contract end, on district request, or on a parent’s deletion request — whichever comes first.
Parental review & deletion rights (COPPA-aligned)
Parents and guardians can email recallhaus-5@polsia.app to (a) request the data we hold for their child, (b) request deletion, or (c) revoke a prior consent. We acknowledge within five business days, export within thirty days, and delete within thirty days — except where retention is required by state records law, which we’ll call out in writing.
FERPA-aligned safeguards for school partners
Recallhaus signs the district DPA, acts as a school official with a legitimate educational interest under 34 CFR §99.31(a)(1), does not re-disclose PII, returns or deletes PII at contract end, logs every access, and aligns to the Student Privacy Pledge.
FAQ
What personal information do you actually collect on my child?
Only what the district roster already carries — name, SIS ID, grade — plus the formative signal the platform generates: formative-assessment responses, drill attempts, and any teacher notes the educator chooses to share. We don’t collect Social Security numbers, home addresses, biometrics, voice or video, device location, free-text from students, or any contact information beyond what’s in the district roster.
Do you share student data with any third parties?
No. Student PII never leaves the district boundary without explicit consent, and is never sold, licensed, or shared for advertising. The only data processors in the loop are the ones the district has already vetted: the LMS provider for gradebook writes, the identity provider for roster sync, and the cloud hosting partner running US-region Postgres. Each is bound by a data-processing agreement aligned to FERPA and to the Student Privacy Pledge.
Do you train AI models on my child’s responses?
No. Student responses are used to compute the per-topic gap signal for that student and to calibrate the drill queue for their cohort. They are not used to train, fine-tune, or evaluate any general-purpose model. District customers can opt out of even aggregate analytics at any time, and that opt-out is honored across model-improvement work as well.
If there’s a data breach, how and when will you notify us?
Any unauthorized disclosure of student PII triggers a 72-hour notification window to the affected district’s designated privacy contact, with the scope, the affected records, and the mitigation steps. Parents are notified by the district through its existing channels. We log every access, retain audit trails for the active plus one academic year, and cooperate with the district’s incident-response process.
Questions or a rights request?
Email recallhaus-5@polsia.app. We answer within five business days.