Student privacy, in plain terms.
The answers schools and families ask for most. Our privacy policy has the full details.
The short version
- We never sell or rent student data, and we don’t use it for advertising.
- AI requests only go to providers that can’t keep them or train on them.
- Data is encrypted in transit and at rest.
- For schools, we act as a “school official” under FERPA, and we follow COPPA for students under 13.
What we keep
Your account, your lessons, and your students’ work: responses, uploads, grades, feedback, and conversations with the AI tutor. We keep it so your course works, and only as long as your school’s agreement and the law require.
When a school’s contract with us ends, we delete or return its student data.
Who can see student work
Only the people running the course: the instructor and the teaching assistants they add. Students see their own work. Sharing a lesson link doesn’t give anyone staff access.
Conversations with a lesson’s AI teaching assistant are part of the coursework, so course staff can read them.
How AI handles student work
AI features only run where an instructor turns them on. When they do, requests go to model providers under zero data retention agreements, so the provider can’t store the request or train on it.
Services we rely on
Like most web apps, we use outside services for hosting, email, running student code, live co-editing, and analytics. They’re bound by contract to protect your data and use it only to run CuraCourse. Schools can ask us for the full list.
Seeing or deleting your data
Contact us to see, correct, or delete your data. If your school runs your course, start with them, and we’ll work with them on your request.
Reviewing CuraCourse for your school?
Send us your data privacy agreement or security questionnaire and we’ll work through it with you. Let us know your students’ ages, so we can cover the rules that apply to them.