Privacy Policy

School Proofing is operated by Joticle, Inc., a Delaware corporation. This policy explains what we collect, why, who we share it with, and what you can do about it. It covers a product used by children, so the sections on children and on schools matter more than most.

1. Information we collect

• Account information — name, email address, role, and the state you educate in. If you sign in with Google we receive only your name and email address; we do not receive your password or any other Google data.
• Student records — name, date of birth, grade, enrolment details, and anything else you choose to record about a student, including a profile photo if you upload one.
• Learning content — journal entries, photos, voice notes, reading logs, projects and attachments captured by a student or on their behalf.
• Compliance and ESA data — attendance, subject hours, requirement progress, expenses and receipts you record or upload.
• Billing information — handled by our payment processor. We receive confirmation of your subscription and the last four digits of a card; we never see or store full card numbers.
• Technical information — IP address, browser type, sign-in attempts and server logs, used for security and troubleshooting.

2. Children under 13

A student under 13 can only get their own sign-in when the responsible adult provides verifiable parental consent, which we record and keep as evidence. Until that happens the student has no separate account, and a parent acts on their behalf.

• We collect from a child only what is needed to run the service: their learning entries and the profile details a parent enters.
• We do not require a child to disclose more than is reasonably necessary to take part.
• We do not show children behavioural advertising. We do not sell children's information.
• We do not knowingly collect information from a child under 13 without consent. If we learn we have, we delete it.

A parent may review their child's information, ask us to correct or delete it, or withdraw consent and have the child's sign-in removed — at any time, by contacting us. Withdrawing consent does not delete records the parent holds in their own account unless they ask for that too.

3. Schools, co-ops and umbrella schools

When an organisation uses School Proofing, the education records belong to that organisation and its families — not to us. We act as a service provider, processing those records on the organisation's instruction and only to deliver the service.

For customers subject to FERPA, we operate as a school official with a legitimate educational interest, under the organisation's direct control. We do not disclose education records to anyone else except as that organisation directs or the law requires.

4. How we use information

• To run the service — recording learning, producing hours, attendance, portfolios and compliance documentation.
• To classify entries into subjects and estimate time, so records assemble themselves.
• To read receipts you upload and match them to allowable ESA expense categories.
• To communicate with you about your account, deadlines you have asked to be reminded of, and service changes.
• To keep the service secure, prevent abuse, and diagnose faults.
• To meet legal obligations.

We do not sell personal information, and we do not serve third-party advertising.

5. AI processing

Classification, receipt reading and narrative summaries are produced using Microsoft's Azure OpenAI Service, which runs inside our own cloud tenancy.

Content sent for processing is not used to train AI models — not ours, and not the model provider's. It is processed to return a result for you and is not retained by the model provider for training.

AI outputs can be wrong. They are editable, and you should review them before relying on them for anything that matters.

6. Who we share information with

We share information with service providers who need it to deliver the service, under contracts that limit them to that purpose:

We also share information where you direct us to — for example when you submit documentation to an ESA program or share records with a school you have joined. We disclose information when the law requires it, or to protect someone's safety or our rights. If we are ever part of a merger or acquisition, information transfers with the business and this policy continues to apply until replaced with notice to you.

7. Security

Traffic is encrypted in transit. Credentials and service secrets are held in a managed key vault rather than in application code. Every record is scoped to its owning family or organisation, and access is checked on each request. Sensitive actions are written to an audit log.

No service can promise perfect security, and we would rather be plain than reassuring: we do not currently hold a third-party security certification such as SOC 2. If you need one for a procurement decision, ask us where things stand before relying on the service.

8. Keeping and deleting information

• We keep your information for as long as your account is active.
• Records are kept after deletion in a recoverable state for a short period, so an accidental deletion can be undone.
• When an account closes, you can request an export for at least 30 days. We then delete or anonymise personal information within 90 days, except where we must keep it — for example billing records kept for tax and accounting purposes.
• Compliance records often need to be kept for years by the family or school. Export them before closing an account; that copy is yours to retain.

9. Your rights

You may ask us to:

• tell you what personal information we hold about you or your child;
• correct it;
• delete it;
• give you a portable copy;
• stop certain processing, or withdraw a consent you previously gave.

Contact us and we will respond within 30 days. We will not treat you differently for exercising these rights. Depending on where you live you may have additional rights under state privacy law, including the right not to have personal information sold — which we do not do.

10. Where information is held

School Proofing is operated from the United States and information is stored and processed there. If you use the service from elsewhere, you are sending information to the United States.

11. Changes to this policy

We may update this policy. When a change is material we will give notice through the service or by email before it takes effect, and the effective date at the top of this page will change. Where a change affects information already collected from a child under 13, we will obtain fresh parental consent if the law requires it.

12. Contact

Joticle, Inc.
Privacy questions, or to exercise any right above: support@schoolproofing.com
See also the Terms of Service.