Privacy & data practices

No real money is involved

Every balance, paycheck, bill, and investment in learnfinancewith is simulated. The in-world currency is deliberately not dollars, and every amount a student sees is visibly marked as simulated.

• No payment processing, ACH, wire, or card issuance.
• No connection to real bank accounts — we do not use Plaid or any equivalent.
• No cryptocurrency, tokens, or anything redeemable for value.
• Nothing a student does in the product can move real money.

What we collect about students

We ask for the minimum needed to run a class and show a teacher who needs help. The list below is complete for student accounts.

• A display name chosen by the school (not necessarily a legal name).
• A grade band — for example "6–8". We do not store a date of birth.
• Class and school enrollment, so work reaches the right teacher.
• Work products: lesson answers, project submissions, and simulation activity.
• A language preference, so we can show the family portal in English or Spanish.

What we deliberately do not collect

These fields do not exist in our database. This is enforced by an automated test that inspects the schema on every change, not only by policy.

• Home address, phone number, or postal code.
• Date of birth or age in years.
• Social Security number or any government identifier.
• Race, ethnicity, gender, disability status, or free/reduced-lunch status.
• Biometrics, photographs, voice recordings, or webcam footage of any kind.
• Location data or device identifiers used for tracking.

No advertising, no trackers, no data sale

We do not sell, rent, or share student information for any commercial purpose. We show no advertising to any user, and we do not embed third-party advertising or analytics scripts.

• Analytics are first-party only and are used to improve the product.
• No advertising networks, no data brokers, no behavioural profiles.
• No third-party tracking pixels, tags, or session recorders.

How consent works for younger students

There is no way for a child to sign themselves up. Student accounts are created only by a school or district, which provides consent under the school-official model that FERPA describes and which COPPA recognises for school-directed use.

We act as a service provider to the school. The school remains in control of the records, and can inspect, correct, export, or delete them at any time.

Who can see a student’s work

Access is enforced in the database itself, not only in the application. Every query runs under row-level security rules that scope data to a district, a school, and a class.

• Teachers see students in their own classes — not every student in the school.
• A parent or guardian sees only the student they are linked to, read-only, and only after the school verifies the link.
• Administrators see aggregate results for what they administer.
• Teacher notes about a student are visible to that student’s family on request, and the product says so where notes are written.

Testing and academic integrity

The proctored final exam records that a tab lost focus or that text was pasted, and requires a teacher-supplied proctor code. It does not watch anyone.

• No webcam monitoring, no room scans, no eye tracking, no keystroke biometrics.
• No screen recording, and no software that must be installed on a device.
• Integrity signals are shown to the teacher, who decides what they mean.

How the AI tutor is limited

The tutor is scoped to the lesson a student is working on and is designed to give hints rather than answers. Teachers can read every conversation, and students are told this plainly inside the product.

Money lessons reliably surface real family financial stress. When a student raises harm, abuse, or a family crisis, the tutor stops teaching, shows a supportive message, and flags a trusted adult according to the school’s configured policy.

• Student names and identifiers are not sent in prompts.
• Prompts and responses are logged so a school can audit them.
• The tutor will not complete graded work.

Data retention and deletion

Schools decide how long records are kept. On request, or when an agreement ends, we delete student records or return them in a portable format.

Demo data is marked as such in the database and is purged separately from any real district data.

Questions

Districts evaluating learnfinancewith can request our data-protection agreement, a subprocessor list, and a security overview. Contact privacy@example.invalid.