Why this page exists on its own
The full privacy policy is written for a broad audience — visitors, administrators, teachers, students — and covers all of our legal obligations. This page is deliberately narrower: it pulls everything about student data specifically from that policy, and orders it around the questions a school official or a parent actually asks, not around the shape of a statute.
What we collect about a student
| Category | Examples |
|---|---|
| Identity and enrollment | Name, school email, grade level, class enrollment |
| Academic performance | Grades, quiz results |
| AI interaction data | Usage logs, "Learning DNA" insights |
We do not collect beyond this. We do not collect location data, social-media content, or financial information about the student themselves.
Who can see it
- School or district staff with a legitimate educational interest in accessing it.
- A limited number of String employees whose role requires it (such as support engineers), with every access logged.
- No one else. It is never published, and never shared with advertisers or data brokers.
What we never do
How AI touches student data
"Learning DNA" insights are built from a student's activity inside the platform. These insights are probabilistic estimates a teacher uses to inform a decision, not a replacement for one. When we use the data to improve our own algorithms, it is always de-identified first — and it is never used, in personally identifiable form, to train any public AI model.
The legal basis: FERPA and COPPA
Under FERPA, String acts as a "School Official" — meaning it acts on the direction of the School or District, not independently of it. Under COPPA, when we knowingly collect data from a child under 13, it is for the School's benefit alone, and we rely on the School to provide consent on the parent's behalf, as the law permits.
This is precisely why access, correction, and deletion requests route through the School first in the next section: the legal relationship FERPA is built on runs between the School and the parent, and String is a party acting on the School's direction.
How long we keep it
- For as long as the school's subscription is active.
- Within 60 days of the contract ending, or on the School's written request at any time, we delete or de-identify the student's data.
- An encrypted backup copy may persist for a further 30 days before it is purged for good.
Requesting access or deletion
A parent or eligible student should contact the School administration first, not String directly — because the legal relationship under FERPA runs between the School and the family, and String acts on the School's direction. Once the request reaches us from the School, we help fulfill it within a reasonable timeframe.
The School itself may stop our processing of its data entirely by canceling its subscription at any time.
- Hello@string.education
- +962 78 597 0011
- 301 Congress Ave, Floor 22, Austin, Texas, United States