Privacy Policy
Last updated October 8, 2026
Operator: Homeroom Assistant · Missouri, USA
This policy covers the public website, its fictional memory-only demo, and the signed-in classroom service. It describes the information the service may handle, why it is used, who may access it, and our retention schedule.
Information and sources
Information may come from adult account holders, educators, supervised students using a classroom view, a school or organization acting through authorized staff, and the browser or device used to access the service. The fictional public demo uses invented classroom examples and holds temporary interactions in page memory; it is separate from signed-in classroom records.
- Accounts and contact: account identifiers, sign-in and authorization information, and contact details needed to provide access and respond to requests.
- Classroom records: rosters, attendance, lunch selections or related notes, hall passes, assignments, groups, planning, calendars, lessons, participation indicators such as positive recognition or warnings, and behavior information entered for classroom use.
- Teacher’s Desk: documents, text, images or other media, and annotations educators add to their workspace.
- Technical and support information: device and browser details, service events, troubleshooting information, and messages or attachments sent to support.
Do not send passwords or unnecessary student information in ordinary support email.
Service purposes and access
Information is used to authenticate users; provide classroom organization, display, and authorized sharing; store and retrieve records; support browser operation, including interrupted connections; protect and maintain the service; answer support or privacy requests; and meet applicable obligations. Educators and other people with valid service permissions may see records for their assigned classroom or role. A school affiliation alone does not grant access to a classroom.
Teachers may use private workspaces for planning and records. Information intentionally placed on a classroom board, kiosk, shared display, or other shared view can be visible to nearby users. Educators and organizations decide what to put on shared screens and who may view or receive exports. A public demo uses fictional memory-only examples and is not connected to an actual classroom in those flows.
Student information commitments
Our policy prohibits selling student information, using it for targeted advertising or commercial profiling, or using student content to train general-purpose AI models. These commitments apply when our service providers process information for us. Independent third-party websites you choose to visit have their own policies.
Before student information is collected, the applicable authorization and notice requirements must be satisfied. Homeroom Assistant remains responsible for notices and consent obligations imposed on it as the operator; educators and organizations remain responsible for their own authority and obligations. This policy does not itself complete those steps. The Student Privacy page describes the school and family context and ways to raise a request.
Service providers and sharing
We use service providers for authentication, databases, file storage, hosting, and technical support. They process information needed to provide those services. When an educator displays external media such as an image, video, or document hosted elsewhere, the browser may contact that host to load it, including when the content appears on a shared screen. Opening an external link may also send a request to its provider.
The service uses sign-in and classroom access checks. In certain workflows, record content is encrypted before storage and may be read only after a trusted-browser or account-key check. The account-key service checks access before releasing a key to an authorized browser, which can then display readable content. Some account and operational information is outside those encrypted records. These protections vary by workflow and device; they do not mean every record, provider, backup, or offline copy is encrypted or invisible to service providers. Devices, shared screens, and offline or exported copies need appropriate handling. We may disclose information when necessary to respond to a valid legal requirement, protect people or service operations, or carry out an authorized request.
Retention and deletion
Our retention schedule was adopted on October 8, 2026. Technical rollout and enforcement have not yet been verified. These are maximum periods, not confirmation that automated deletion is already operating or a guaranteed current service-level deadline. A shorter applicable legal requirement or accepted school requirement prevails. Information should be deleted sooner when it is no longer needed for its stated purpose.
| Information | Limit | How the limit works |
|---|---|---|
| Student and classroom records | Original academic year plus 12 months; never more than 24 months from creation. If academic year is missing: 12 months from creation. | An open account does not extend old student history. Archives, copies, migrations, and restores do not reset the original clock. New-year roster enrollment is a separate, authorized minimal record; it does not renew old history. |
| Accounts, closed classrooms, or verified authorized deletion | Necessary adult account information while an account remains open. After closure or verification: delete covered information from active service systems within 30 days, or sooner when required. | Verification should be handled promptly and must not be used to extend retention unnecessarily. |
| Rolling backups | No more than 35 days. | After the active-system period, restricted backup remnants may take up to 35 additional days to expire: a combined maximum of 65 days. Deletions must be reapplied before a restored backup is available for ordinary use. |
| Technical and security records | Routine logs: 30 days. Necessary incident copy: no more than 90 days after the investigation closes. Minimal deletion receipts: 12 months. | While an investigation remains open, necessity is reviewed every 30 days. Incident copies are restricted to the investigation. Deletion receipts omit student names and deleted classroom content. |
| Support correspondence | Up to 90 days after the case closes. | Unnecessary student information is removed sooner. A student record copied into a support message or attachment keeps its original retention clock. |
| Reusable teaching materials | Student-free reusable lessons: while the account is active, then 30 days after closure. Mixed student-containing Desk assets: the student-record limit. | Student-containing images, annotations, and embedded files follow the same original student-record clock. |
A documented legal hold or specific legal obligation may extend retention only for the necessary records, restricted purpose, access, and duration. The need is reviewed periodically and information is deleted when the exception ends; a hold does not keep an entire account indefinitely.
Browser copies and exports
Authorized browsers may keep information needed for offline use, queues, recovery, or trusted-browser functions. Deletion under our retention schedule includes revoking applicable access and sending instructions to remove covered browser copies the next time a device contacts the service. Revoking access does not erase a disconnected copy, and a disconnected device cannot receive a removal instruction. Clearing browser data may remove unsynced work or make a device need setup again; it does not itself delete server records or backups.
Signing out is not server deletion. Downloaded, printed, or externally shared copies are controlled by the person or organization holding them. Removing a server record does not instantly erase an offline copy or external export. See the Cookie & Browser Storage Policy for browser mechanisms and their effects.
Privacy requests
Email privacy@homeroomassistant.com to ask about access, correction, deletion, or stopping further collection. We may need to verify identity and authority and, where appropriate, coordinate with the responsible educator or school. These steps help route requests to the right records; they are not a blanket waiver of anyone’s rights.
Applicable rights and the person authorized to act depend on the situation and relevant law or school arrangement. This policy does not promise removal from disconnected devices or files already exported by others. For student-specific information, see Student Privacy.