Student Data Privacy Agreement

1. Roles

The school or district ("LEA") contracts StudyPod to provide educational services. For FERPA purposes StudyPod acts as a school official with a legitimate educational interest (34 CFR § 99.31(a)(1)(i)), under the LEA's direct control over the use and maintenance of education records.

2. Ownership and control

All student data remains the property and under the control of the LEA. StudyPod uses it only to provide the contracted services.

3. Consent for students under 13

Under COPPA, the LEA may authorize collection of personal information from students under 13 for educational purposes only. The LEA agrees to provide any notice to parents required by its policies. StudyPod will not use that information for any commercial purpose.

4. Prohibited uses

• No targeted advertising, selling, renting or brokering of student data.
• No building of student profiles except to deliver the learning service.
• No use of student data to train general-purpose AI models.

5. Parent and student rights

Parents and eligible students may review records (in-app JSON export), ask for corrections through the Data & privacy settings page, and ask for deletion. StudyPod forwards record-amendment requests to the LEA, which decides them, and responds within 30 days.

6. Security

Data is encrypted in transit, access is restricted by role at the database level, and staff access is limited to what is needed to support the service.

7. Breach notification

StudyPod will notify the LEA without undue delay, and within 72 hours of confirming an incident affecting student data, with details and remediation steps.

8. Sub-processors

Listed on the Trust Center. Each is bound by confidentiality and data-protection obligations at least as strict as these.

9. Retention and deletion

On termination or written request, StudyPod deletes or returns student data within 30 days, and certifies deletion on request.

Contact

To request a signed agreement: main@studypod.net.