Privacy policy

Who we are

This policy explains how Edform ("Edform", "we", "us") handles personal data when you use edform.com, the Edform apps and our emails (together, "Edform").

• Teachers, tutors and other users who sign up themselves: we decide how this data is used (we are the "controller" under GDPR).
• Schools and districts: when a school or teacher uses Edform with students, the school decides what data is used and why. We process student data only to provide Edform to the school, following its instructions. Under GDPR we are its "processor". Under FERPA we act as a "school official" under the school's direct control.

Questions? Email support@edform.com.

What we collect

Teacher accounts

• Name, email address and password (stored only as a secure hash), or your Google sign-in.
• Your profile picture, if your sign-in provider shares one.
• Your school system and the language for your materials.
• Things you make: tests, worksheets, lessons, videos, courses, classroom screens, AI materials, uploaded files and classes.

Students

• First and last name, and a username or school email. A username login needs no email at all.
• The classes they belong to.
• Their answers, scores, time spent and teacher feedback on the activities their teachers give them.
• Students can't upload files, use AI tools or publish anything.

Guests in live games and homework

• The display name they type. Teachers can ask students to use a first name or nickname.
• Their answers.
• A random device code in a cookie, so they can come back to the same game. It is not linked to their identity.

Rosters you import

• Names and email addresses of your students and co-teachers, from a list you paste or from Google Classroom. You can only import them when you connect Classroom yourself.

Payments

• Pro and school plans are paid through Stripe. We receive your name, email, billing country and subscription status.
• We never see or store card numbers.

Technical data

• IP address: used for security and rate limiting. It is not stored with your account.
• Bot check: when someone signs up, or joins a game, homework or course as a guest, Cloudflare Turnstile checks invisibly that a person, not a program, is using the page. Cloudflare sees the IP address and browser signals for this check only; see Cloudflare's Turnstile Privacy Addendum.
• Country: taken from your IP address when you sign up, to suggest your school system.
• Device type: the browser and device of each signed-in session, so you can recognize your devices.
• Time zone and language (teachers): your browser's time zone and the language you use Edform in, so our emails arrive in the morning and in your language.
• Email choices and clicks (teachers): which kinds of email you want, which emails we sent you, and whether a link in one of them was used. We don't track opening emails.
• Server logs: kept for a short time for security and troubleshooting.
• Cookies: see our Cookie policy.

We don't collect birth dates, home addresses, phone numbers, location, contacts or biometric data. Edform has no analytics or advertising trackers.

How we use it and why

You choose which emails you get, and every email has a one-click unsubscribe link. Details are under “Emails we send” below.

Emails we send

Teachers get four kinds of email. Students never get any of them.

• Your choice: change it in Settings → Emails, or with the link at the bottom of every email. Mail apps can also unsubscribe you in one click.
• What's in them: only the titles of your own materials and totals such as "12 of 25 handed in". Never students' names or answers.
• Fewer emails when you're away: if you don't open Edform or click an email for four months, we send one a month. After six months we ask whether you still want tips, and stop if you don't answer.
• No tracking pixels: we don't record whether you open an email. When you click a link in one of our emails, we note that the link was used, so we can send fewer emails that don't help.
• How they're sent: through Resend, listed with our other providers on the Student privacy page. Addresses that bounce or report spam stop getting these emails.

What we never do

• Sell or rent personal data, or "share" it for cross-context behavioural advertising.
• Show ads, or let advertisers or data brokers onto Edform.
• Build profiles of students for any purpose other than the teaching their school asked for.
• Use student data, or the content of teachers and students, to train AI models.
• Use student data for anything other than education, or keep it after the school asks us to delete it.
• Change these commitments for existing data without your consent.

AI features

Edform's AI tools are for teachers. Students and guests can't use them.

• What goes to the AI: when a teacher uses an AI tool, the request goes to OpenAI. That includes the prompt, any documents, pictures, web pages or video captions the teacher adds, and the result.
• What OpenAI may do with it: requests are sent with storage turned off. Under OpenAI's API terms, the data isn't used to train their models and is deleted after a short abuse-monitoring period.
• Safety checks: inputs and outputs are checked by OpenAI's moderation service to keep content suitable for school.
• Student answers: they are graded by Edform's own rules or by the teacher. They are never sent to an AI service.
• Your part: please don't put students' personal details into AI prompts. When a tool asks about a student (for example, report-card comments), use a first name or initials.

AI output can be wrong. Always review it before you use it with students.

Who we share it with

We share personal data only with:

• Service providers who run parts of Edform for us. They may use the data only on our instructions and must protect it. The full list is on our Student privacy page.
• People you choose to share with:
  • your students and co-teachers;
  • teachers in your school, if you use a school plan;
  • everyone, for materials you publish to the public library. Published materials never include students' answers or results, and class lists are left out of shared screens unless you choose to include them.
• Authorities, when the law requires it. We will tell the school or user first unless the law forbids it.
• A buyer or successor, if Edform is ever merged or sold. They must keep the promises in this policy, and we will notify you before your data falls under a different policy.

Where your data is stored

• Our servers: Edform's database, uploaded files and backups are on our own servers at Hetzner Online GmbH in Falkenstein, Germany (European Union).
• Providers outside the EU: some providers, such as OpenAI, Stripe, Resend, Google and Cloudflare, may process data in the United States.
• How those transfers are protected: we rely on the EU–U.S. Data Privacy Framework where the provider is certified. Otherwise we rely on the European Commission's Standard Contractual Clauses (and the UK and Swiss addenda), with extra safeguards such as encryption in transit.

How long we keep it

When an account is deleted, its data is erased from the live database right away and from backups within 14 days.

How we protect it

• Encrypted connections: every connection uses HTTPS. Browsers are told to use HTTPS only (HSTS).
• Passwords: stored only as scrypt hashes.
• Sign-in sessions: session codes are stored only as hashes and expire on their own.
• Access rules: every request checks who you are and what you're allowed to see. Students only see their own answers and results.
• Abuse protection: sign-in attempts, joining and other actions have rate limits. Sign-up and guest joining have an invisible bot check (Cloudflare Turnstile).
• Servers: firewalled, updated automatically, and reachable for administration only with SSH keys.
• Backups: nightly.
• Staff access: only the few people who run Edform can reach personal data, and only when needed for support or security.

If a personal data breach happens, we will tell the schools and users affected without undue delay. Where the law requires it, we will also tell the authorities, within 72 hours under GDPR. Found a security problem? Please report it to support@edform.com.

Your rights

Wherever you live, you can:

• See and download your data: Settings → Download your data gives you a JSON file other apps can read.
• Correct your data: in Settings, or ask your teacher.
• Delete your data: Settings → Delete your account. Students with a login their teacher created ask their teacher.
• Object to or limit some uses, and withdraw any consent you gave.
• Turn off embedded content from other services under Cookie settings.

Email support@edform.com for anything you can't do yourself. We answer within 30 days, usually much sooner. We may need to confirm who you are first. If your data belongs to a school's account, we will pass your request to the school, or help the school answer it.

Extra rights by region

• EU, EEA, UK and Switzerland: you can complain to your data protection authority.
• California and other US states with privacy laws:
  • You have the right to know, delete and correct your data, and to opt out of its sale or sharing.
  • We don't sell or share personal data, so there is nothing to opt out of. We honour Global Privacy Control signals anyway.
  • We won't treat you differently for using your rights.
• Brazil (LGPD): you can also ask which providers we share data with. They are listed on our Student privacy page.

Children and students

Edform is made for use in schools, with teachers in charge.

• Under 13 in the US (COPPA), or under the age of digital consent in your country (13–16 in the EU and UK):
  • Children should use Edform only through their school or with a parent's permission.
  • A school may give consent for school use on parents' behalf, as COPPA allows. It uses the data only for education.
• Teachers: by adding students, a teacher confirms that their school allows it and that any required notice or consent was given.
• Parents: you can ask your child's school to review or delete your child's data, or contact us at support@edform.com. We will work with the school to answer within the time the law requires.
• Data collected without permission: if we learn that we collected a child's data without the required permission, we will delete it.

For schools and districts

Schools keep ownership and control of student data.

• What we do with it: we use it only to provide Edform to the school, never for advertising or unrelated purposes.
• Data processing agreement: we offer one (including GDPR Art. 28 terms and the Standard Contractual Clauses) and will review state or district student-privacy agreements. Write to support@edform.com.
• Getting data out and deleting it:
  • Teachers can export rosters and results from the class and results pages.
  • They can delete homework, classes and the student logins they created.
  • When a school leaves Edform, we delete its data on request.

Read more on our Student privacy page.

Changes to this policy

We will update this page when Edform changes.

• The date at the top shows when this page last changed.
• Important changes: we will tell you by email or in the app before they take effect.
• Data we already have: we will never use it in a materially different way without your consent.

Contact

• Privacy questions and requests: support@edform.com
• Everything else: support@edform.com