Who This Covers

• Students (including those under 13)
• Teachers and instructional assistants
• School administrators and LEA staff
• Parents or guardians acting under school direction

What We Collect

We may collect:

• Student name, grade, attendance, and behavior data
• Reflections on learning, motivation, emotions, and goal setting
• Application performance data and survey responses
• Data from mentoring and behavioral tools (CPS and Check & Connect)
• Account data via Google OAuth (name, email, profile picture)
• Usage metadata (IP address, timestamps, interactions)

We do not collect biometric, GPS, or other sensitive data beyond what is described.

How We Use Data

• To support personalized learning and instruction
• To provide classroom-level dashboards
• To improve student engagement and self-regulation
• To fulfill grant-funded research obligations (with de-identified data)

We do not use student data for advertising, profiling, or sales.

When We Share Data

• With authorized school personnel
• With external researchers using anonymized data
• With subprocessors (Vercel & Supabase) who meet privacy standards
• If legally required (e.g., by subpoena, with notice to the LEA when possible)

Data Security & Storage

• Data is hosted in the U.S.
• Encryption is used at rest and in transit
• We adhere to NIST and ISO security frameworks
• Access is restricted based on role and need

Data Deletion & Retention

Schools may request deletion at any time. Deletion is completed within 60 days of verified request. De-identified data may be used for long-term research.

Children's Privacy (COPPA)

For students under 13, we collect data only with school or verified parental consent and in accordance with COPPA.

User Rights

• Access or correct data (via your school)
• Opt out of research
• Report a concern: circleup@cast.org

Policy Updates

We may update this Privacy Policy and will notify account holders when we do.

Contact Us

CAST, Inc.
50 Salem St, Building B, Ste 303
Lynnfield, MA 01940
circleup@cast.org