Student privacy

Our commitments

These promises apply to every student, on every plan, including the free one:

1. The school is in charge. Student data belongs to the school and the student. We process it only on the school's instructions, to provide Edform.
2. No advertising. Edform has no ads, sponsored content or advertising trackers.
3. No selling or renting. We never sell, rent or trade student data.
4. No profiling. We don't build profiles of students except for the teaching the school asked for, such as their results in a class.
5. No AI training. Student data and student work are never used to train AI models, ours or anyone else's.
6. Minimal data.
   • Students need only a name and a login, with no email address required.
   • Guests can join with a first name or nickname.
   • We never ask for birth dates, addresses, phone numbers or locations.
7. Transparency and control. Teachers can see, export and delete student data. Parents and students can ask their school or us.
8. Security. Data is encrypted in transit, passwords and sign-in codes are hashed, and only the few people who run Edform can access it.
9. Deletion. When a school or user deletes data, it is erased right away, and from backups within 14 days.
10. Notice of changes. We will tell schools before any material change, and we won't apply a weaker policy to data we already hold without consent.

How Edform aligns with privacy laws

Edform is designed to help schools meet these laws. Edform has no certification or seal from any of them. This page explains how our product and practices meet their requirements.

GDPR and UK GDPR (European Union, EEA, United Kingdom)

• We act as the school's processor under Art. 28 and offer a data processing agreement. For teachers who sign up themselves, we are the controller.
• Data is hosted in Germany. Transfers to providers outside the EU use the EU–U.S. Data Privacy Framework or Standard Contractual Clauses.
• Students and teachers can download and delete their data themselves, which covers the rights to access, portability and erasure.
• Edform sets no tracking cookies. Embedded content from other services loads only after consent where it's required.
• Breaches are reported to the school without undue delay, so it can meet its 72-hour deadline.

COPPA (United States, children under 13)

• Under COPPA, schools can consent for school use on parents' behalf. We use children's data only for education, never for commercial purposes.
• We collect as little as possible: a name and login, and no email address needed.
• Parents can ask their school or us to review or delete their child's data.

FERPA (United States)

• We act as a "school official" with a legitimate educational interest, under the school's direct control.
• We use education records only for the purposes the school authorized, and we don't pass them on without the school's permission or a legal requirement.

US state student privacy laws (California SOPIPA and AB 1584, New York Education Law 2-d, Illinois SOPPA and others)

• No targeted advertising, no selling, and no profiles for non-educational purposes.
• Security is reasonable for the data we hold.
• Data is deleted when the school asks.
• We will review state and district data privacy agreements on request.

CCPA / CPRA (California) and other US state privacy laws

• We don't sell or share personal information, and we honour Global Privacy Control signals.

LGPD (Brazil), Swiss FADP and other national laws

• The same rights and safeguards apply. Embedded content waits for consent in Brazil and Switzerland as well.

What we know about students

Students can't upload files, use AI tools, publish to the library or message other students.

Controls for teachers and schools

Join settings

• Choose per homework whether students must sign in, or can join as guests.
• Lock a class so only students on the roster can join.

Exporting data

• Export a class roster as CSV from the class page.
• Export results and gradebooks from the results pages.

Deleting data

• Delete homework, games, classes or student logins you created. Each deletes the answers that belong to it.
• The student's own Settings page offers download and deletion too. Logins a teacher created can only be deleted by the teacher.

Leaving Edform

• Deleting your account removes your classes, their rosters and results, and the student logins you created that are in no other class.
• Schools that leave can ask us at support@edform.com to confirm deletion.

AI and students

AI tools in Edform are for teachers, with one exception: the historical figures chat.

• Students: answers are graded by Edform's own rules or by the teacher. They are never sent to an AI service.
• Historical figures chat: students can chat with an AI that plays a historical figure, on their own or on a slide of their teacher's lesson. Their messages go to OpenAI with storage turned off and without their name, pass a moderation check, and the figure keeps to school-appropriate topics. The conversation is kept with the student's work on that lesson: their teacher can read it in the results, and it is deleted with that work.
• What reaches OpenAI: when teachers use AI to create materials, their requests go to OpenAI with storage turned off. They aren't used for training, and they pass a moderation check for school-appropriate content.
• Teachers: please keep students' personal details out of AI prompts.

Security practices

• Connections: HTTPS everywhere, with HSTS, and security headers on every page.
• Passwords: stored as scrypt hashes.
• Sign-in sessions: stored only as SHA-256 hashes, and expire on their own.
• Access checks: every request checks who you are and which class, homework or material you may see.
• Abuse protection: rate limits on sign-in, sign-up, joining and other actions, and an invisible bot check (Cloudflare Turnstile) on sign-up and guest joining.
• Uploads: every file is checked by its real type. Scripts and SVG files are refused.
• Servers: in Germany, firewalled, updated automatically, and administered with SSH keys only.
• Backups: nightly, kept 14 days.
• Reporting a problem: email support@edform.com. We welcome responsible reports.

Service providers

We use these providers to run Edform. Each may use personal data only to provide its service to us.

Content embedded by teachers (YouTube, Vimeo, Google Docs, other websites) loads straight from those services, as described in our Cookie policy. We will update this list before adding a provider that handles student data. Schools with a data processing agreement get advance notice.

Requests and agreements

• Data processing agreements, including state and district student privacy agreements and security questionnaires: support@edform.com
• Requests from parents and students to see, correct or delete data: ask your school, or email support@edform.com. We will work with the school.
• Security reports: support@edform.com

Read the full Privacy policy, Terms of service and Cookie policy.