Trust & Student Privacy
How Storypie for Schools protects student data, in plain language. The signed data privacy agreement with your district is always the authoritative document.
Our commitments
- We never sell or rent student data. Ever.
- No advertising anywhere in the product, and no ad tracking of students.
- We collect the minimum needed to run a classroom: no birthdates, no photos, no biometrics.
- Your school stays in control: data is used only for the educational purposes your district authorizes.
What we collect about students
When a teacher sets up a classroom, Storypie stores only:
- Student first and last name, and an optional school student ID provided by the school
- Grade level and preferred content language
- A parent or guardian email address, when the school provides one, used for sign-in cards and assignment updates
- Reading, listening, and quiz progress so teachers can see how students are doing
What we never collect from students
- Date of birth
- Photos or videos of students
- Voice recordings or biometrics
- Precise location
- Advertising identifiers or cross-site tracking
- Government identifiers such as SSN
In-Product Feedback
We occasionally ask educators short, optional questions inside Storypie to help us improve the product, such as whether a generated worksheet was useful.
- Educators only. These prompts are never shown to students, and no student data is collected through them.
- Used only to improve the product. Feedback is never used for advertising, marketing, or profiling.
- First-party only. Feedback is collected and stored on our own infrastructure, with no third-party survey service or subprocessor involved.
- Educator feedback is kept for up to 24 months, then converted to anonymous aggregate statistics and deleted.
Where student data lives
All student data is stored in the United States, in AWS data centers in Ohio (us-east-2), encrypted in transit and at rest. Student analytics are de-identified before storage and contain no student names or identifiers.
Who processes student data
Exactly two infrastructure providers store or transmit student data on our behalf. Both are bound to protections at least as strict as ours.
| Provider | What they do |
|---|---|
| Amazon Web Services, Inc. | Cloud hosting and transactional email (for example, emailing sign-in cards to parents), US region |
| MongoDB, Inc. | Managed database (MongoDB Atlas) storing classroom records, US region |
If your school chooses to connect Google Classroom for roster import, Google LLC also processes roster data for your school. This is off by default and enabled only by your school.
Deletion and retention
- When a teacher removes a student, the student's records are deleted immediately, including progress and sessions.
- Districts can request a full export or permanent deletion of all student data for a school, completed with a written destruction confirmation.
- Automated retention limits: student sign-in sessions expire after 30 days, and removed-student records are swept daily.
- Districts receive student data back in a readable format on request, at no charge.
Security
Encryption in transit (TLS) and at rest (AES-256) across all systems, role-scoped access for educators and district administrators, audit logging of every data export and deletion, and a documented incident response plan with prompt notice to your district. Our controls are mapped to the NIST Cybersecurity Framework.
Compliance commitments
- Built for the Illinois Student Online Personal Protection Act (SOPPA): we enter a written data privacy agreement, the Illinois NDPA, with each district before any student data is shared.
- We operate as a school official under FERPA: student records stay under your district's direct control and are used only for the services you authorize.
- For students under 13, we rely on school-authorized consent under COPPA and collect only what the classroom needs.
- No sale of student data. No targeted advertising. No profiles for non-educational purposes. These are standing commitments in every agreement we sign.
Questions
District privacy and security reviews are welcome. Reach us at educators@mystorypie.com