Privacy Policy - PlayAndLearnTech

We care about your privacy. This policy explains what little information we collect and how we use it — in plain English.

                Short version: For student accounts we collect only first and last names (and the last name may be just an initial) and typing-practice progress (like completion rates and words-per-minute). If a teacher uploads a class roster exported from their school's system, everything in it beyond names, grade and the teacher's own details is stripped out in the browser and never reaches us. We show ads to help keep the app free, but students only ever see restricted, non-personalized (contextual) ads — we never build advertising profiles of students and never share student information with advertisers. Teachers/admins may optionally turn on personalized ads for their own account. We never sell student data.
            

1. Information We Collect

Information from Students/Teachers

Name or username (if provided). A student's last name may be stored as a single initial only — for example "John D" — depending on the setting described under Class roster uploads.
Teachers' Email address (for account login)
The grade a teacher's class is in, if the school tells us (used only to organize the teacher's own dashboard)
Typing practice results: completion rates, WPM (words per minute), accuracy, time spent, etc.
Progress in games and lessons

We never ask for and never store a student's email address, student ID number, date of birth, home address, phone number, or guardian contact details.

Class Roster Uploads

Teachers and school administrators can create their classes by uploading a roster file exported from their school's student information system. These exports usually contain a great deal of information about each child that we neither need nor want.

                Your roster file is read inside your own web browser, and almost all of it is thrown away before anything is sent to us. Only these five things are extracted: the student's first name, the student's last name, the grade, and the teacher's name and email address. Everything else is discarded on your device and is never transmitted to our servers, never stored, and never logged.
            

Columns that are discarded include, but are not limited to:

Student email addresses and usernames from your school's systems
Student ID or student numbers
Dates of birth (including partial dates such as birth month and day)
Middle names
Parent or guardian names, phone numbers, and email addresses
Acceptable-use-policy (AUP) signature status
Special education, IEP, Section 504, English-learner (ML), and critical-alert flags
Enrollment or active/inactive status, and any other column your export happens to contain

You do not need to edit or clean up your export before uploading it, and you do not need to match a particular column order — we look for the columns we need by name and ignore the rest. Our servers additionally rebuild every uploaded row from the first and last name alone, so information outside the list above cannot be stored even if it were sent.

Last names. Our system can be configured so that a student's last name is reduced to its first initial at the moment the account is created — "Doe" becomes "D" — and the full surname is never written to our database at all. Where this is switched on, it applies to newly created students; accounts created earlier keep the name they were created with until they are edited or deleted.

The printable password sheet. After you add students, you can download a PDF listing each child's name, username and password to hand out. That sheet shows full last names, because a list showing four children as "Avery H" cannot be used to give the right password to the right child. The PDF is created inside your browser from the file you uploaded — it is not built on our servers, and the full last names on it are not sent to us or stored by us. Once you download it, the sheet is yours: it pairs real names with working passwords, so treat it as confidential, hand it out directly, and do not post or email it.

Billing Information (Teachers & Administrators Only)

This applies only to adults who buy a paid subscription. Students never provide billing information, and no student data is used for billing.

We never see or store your card details. Payments are handled entirely by Stripe on their own hosted checkout page; card numbers never reach our servers.
We store which plan you are on, whether it is active, when it renews, and Stripe's identifiers for your customer and subscription.
Stripe collects a billing address where one is needed to calculate sales tax.
If you submit a sales-tax exemption certificate: your organization's name, the certificate number, the issuing state or jurisdiction, any notes you add, and the certificate PDF itself. The PDF is sent to our support mailbox so a person can review it; we keep a record of the request and of our decision.

Automatic Information

Basic device info (device type, browser)
IP address (for security and troubleshooting)
Advertising-related data processed by our ad provider (see Advertising & Cookies). For students and signed-out visitors this is limited to the minimum needed to serve non-personalized, contextual ads — it is never used to build an advertising profile.

2. How We Use This Information

We only use the information to:

Let students practice typing and save their progress
Show teachers how the class is doing overall
Improve the games and fix problems
Keep the app safe and working properly

3. Information Sharing

We never sell student data, and we never share student names, usernames, IDs, grades, scores, progress, or teacher/student relationships with advertisers or analytics providers.

We may share data only with:

Trusted service providers (like Google Firebase) who help run the app securely
Stripe, our payment processor, for teachers and administrators who buy a subscription. Stripe receives only the billing details needed to take payment and work out sales tax. Stripe never receives student data.
Our advertising provider, Google AdSense, which serves the ads that keep the app free — subject to the restrictions in Advertising & Cookies below. Students and signed-out visitors receive only non-personalized (contextual) ads.
Law enforcement only if legally required

                All service providers are required to keep your data safe and confidential. Student education records are kept completely separate from our advertising systems, and separate from billing — a subscription is attached to the adult who bought it, never to a student.
            

4. Data Security

We use industry-standard security (password hashing, encryption, secure servers) to protect your information.

5. Children's Privacy (COPPA)

This app is designed for school use. We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without appropriate parental or school consent, and we treat every user as potentially under 13 unless we know otherwise.

Specifically, for student and signed-out (anonymous) users:

Ads are non-personalized and contextual only — based on the general page, never on who the user is.
We do not use personalized or interest-based advertising, and we do not allow advertisers to build advertising profiles of students.
We do not enable behavioral tracking for students, and we apply Google's child-directed treatment so ad cookies and identifiers are restricted.
No student names, usernames, IDs, grades, scores, progress, or classroom relationships are ever sent to any advertising provider.
We practise data minimization: we collect the smallest amount of student information the app can work with. When a class roster is uploaded, the sensitive columns a school export contains — including special education, 504, English-learner and alert flags, dates of birth and guardian contact details — are discarded in the browser and never reach us. See Class roster uploads.

6. Advertising & Cookies

To keep PlayAndLearnTech free, we display advertising through Google AdSense. We apply strict, role-based rules and configure Google's privacy controls so that advertising stays school-safe:

Students & signed-out visitors: restricted, non-personalized (contextual) ads only. Google's tag is loaded with child-directed treatment and non-personalized settings; no advertising profile is created.
Teachers/admins: receive non-personalized ads by default. A teacher/admin may optionally turn on personalized ads for their own account from the dashboard's Privacy Settings. This choice affects only that adult account, never their students.
Everyone: we block sensitive ad categories (including adult content, gambling, alcohol, tobacco/vaping, cannabis, dating, weapons, excessively violent content, political ads, high-risk financial/crypto products, weight-loss products, supplements, "make money" schemes, and mature apps) to maintain a school-safe environment.

Cookies and tracking technologies: Google AdSense may set cookies or read device identifiers to serve, cap, and measure ads and to guard against fraud. For students and signed-out visitors these are limited to what is required for non-personalized ads and are governed by Google's child-directed/non-personalized settings. We do not use these technologies to identify individual students.

What the ad provider may process: for non-personalized ads, Google may process coarse data such as approximate (IP-based) location, device/browser type, and the general page being viewed. For personalized ads (adult, opt-in only), Google may additionally use its own advertising cookies/identifiers under Google's policies.

Managing your ad preferences: teachers/admins can change or withdraw their personalized-ads choice at any time from Privacy Settings on the dashboard; withdrawing takes effect immediately and personalized ads stop. School districts can request that ads be disabled entirely for their deployment. Anyone can report an inappropriate ad using the "Report this ad" link shown with each ad.

To learn how Google uses information from sites that use its services, see Google's "How Google uses information from sites or apps that use our services" policy.

7. Your Rights

You can request to see, correct, or delete your data at any time
You can delete your account and all associated data
Teachers/parents can contact us to manage student accounts

8. Contact Us

If you have any questions, please reach out:

Email: playandlearntech@gmail.com

Company: PlayAndLearnTech, LLC • Utah, USA

9. Policy Changes

We may update this policy occasionally. We will notify you of major changes.

Last Updated: August 15, 2026 — added the Class roster uploads section describing browser-side extraction and the columns we discard, and the option to store a student's last initial only.