Privacy Policy

Effective Date: 01/26/2026

WhitAI.app ("WhitAI", "we", "our", or "us") is a product of School Synergy Corporation (S-Corporation). We are committed to protecting student, educator, and school data. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices and rights available to you.

1. Definitions

• "Student Data" means information that is directly related to a student and is provided by a school/district or collected through student use of WhitAI.app (including student submissions).
• "Education Records" refers to records protected under FERPA.
• "Personal Information" includes information that identifies or can reasonably be linked to an individual (e.g., name, email address).
• "De-Identified Data" means data that has been stripped of identifiers such that it cannot reasonably be used to identify an individual student.
• "School/District" means the educational agency (e.g., LEA) that licenses or authorizes use of WhitAI.app.

2. Information We Collect

We collect the minimum information necessary to provide educational services.

A. Student Information

• First name, display name, or username (as provided by the school)
• School-issued email address or school-managed sign-in identifier
• Class/roster and teacher assignment (as provided by the school)
• Student submissions (e.g., essays, short answers, chat messages within the product)
• Usage and device data (e.g., feature usage, timestamps, basic diagnostics)

B. Teacher/Administrator Information

• Name and school-issued email address
• Class, roster, assignment configuration, and instructional materials uploaded or created in the platform
• Usage logs and interactions with platform tools

C. Support/Communications

• Information you provide when contacting support (e.g., messages, attachments, screenshots)
• Operational communications (e.g., service notices, security notices)

3. How We Use Information

We use information to operate, maintain, and improve WhitAI.app for educational purposes, including to:

• Provide learning activities and AI-assisted educational feedback
• Display student work and results to the student and authorized educators
• Generate class-level and school-level insights for instructional improvement
• Provide customer support, troubleshoot, and maintain platform security and reliability
• Comply with legal obligations and enforce our terms

We do not use Student Data for advertising. We do not sell or rent Student Data.

4. AI and Automated Processing (AI Disclosure)

WhitAI.app uses artificial intelligence technologies to generate educational feedback and insights (for example, writing feedback, misconceptions tagging, or learning suggestions).

What data may be processed by AI

• Student submissions (e.g., written responses) and teacher-provided instructions or rubrics needed to generate feedback
• Limited contextual metadata (e.g., grade band, assignment type) when necessary to tailor feedback

How we use AI outputs

• AI outputs are generated automatically to support instruction; they are not a substitute for teacher judgment.
• Educators may review, edit, accept, or disregard AI-generated feedback.
• We may apply automated safety filters and monitoring to reduce the likelihood of unsafe or inappropriate content.

5. Data Sharing and Disclosure

We do not sell or rent Personal Information or Student Data. We share data only as described below:

• With the School/District: Student work and results are accessible to authorized educators and administrators as part of the educational service.
• With Service Providers (Sub-Processors): We use vetted providers to host, secure, and operate the platform (see Section 9).
• Legal Requirements: If required by law (e.g., subpoena, court order). When permitted, we will attempt to notify the School/District before disclosure.
• Safety and Security: To protect users, the public, and the integrity of the platform (e.g., investigating abuse or security incidents).

6. Student Privacy Compliance (FERPA, COPPA, SOPIPA, AB 1584)

A. FERPA: School Official / Direct Control

WhitAI.app acts as a "school official" under the Family Educational Rights and Privacy Act (FERPA) when providing services to schools and districts. We perform institutional services and functions for which schools would otherwise use their own employees, and we use Student Data solely for authorized educational purposes, under the direct control of the School/District and consistent with applicable agreements.

B. COPPA: Children Under 13

WhitAI.app is intended for use by schools, teachers, and students in an educational context. For students under 13, schools may provide consent on behalf of parents/guardians where permitted by law and consistent with COPPA (for example, when WhitAI.app is used solely for educational purposes and not for commercial marketing). If we learn we have collected Personal Information from a child under 13 outside of a school-authorized context, we will take steps to delete that information.

C. California SOPIPA (Student Online Personal Information Protection Act)

In compliance with SOPIPA, WhitAI.app does not:

• Engage in targeted advertising to students
• Create advertising profiles about students
• Sell student personal information
• Disclose student information except as permitted for educational purposes, legal compliance, or to protect safety/security
• Use Student Data for purposes unrelated to K-12 school purposes

D. California AB 1584: Student Data Ownership & Control

All Student Data and Education Records remain the property of the student and/or the School/District. WhitAI.app does not claim ownership over student submissions, education records, or related content. Upon request by a School/District, and consistent with applicable agreements and law, WhitAI.app will:

• Return or export Student Data in a reasonable and usable format
• Delete Student Data when it is no longer needed for educational purposes, subject to legal retention requirements
• Maintain Student Data confidentiality and security

7. Data Retention, Deletion, and De-Identification

We retain data only as long as necessary to provide the service, meet contractual obligations with schools/districts, and comply with legal requirements. Retention may vary by customer configuration and the nature of the data.

• School/District Requests: Schools/districts may request export or deletion of Student Data by contacting us (see Section 11).
• Account Deprovisioning: When a school removes a student/teacher account, associated data may be deleted or archived consistent with school instructions and legal requirements.
• De-Identified Data: We may create and use de-identified and aggregated data to improve educational features, reliability, and reporting. We do not attempt to re-identify de-identified data.

8. Security

We use administrative, technical, and physical safeguards designed to protect information, including:

• Encryption in transit and at rest where appropriate
• Role-based access controls and least-privilege access
• Monitoring and logging to help detect and prevent abuse
• Secure development and operational practices

No method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us promptly.

9. Third-Party Sub-Processors

WhitAI.app uses a limited number of trusted third-party service providers ("sub-processors") to operate and support the platform. Sub-processors are contractually obligated to protect Student Data and may process data only to provide services to WhitAI.app.

Sub-Processor	Purpose	Data Categories Potentially Processed
OpenAI	AI processing to generate educational feedback and insights	Student/teacher text inputs required for feedback; limited context metadata
Amazon Web Services (AWS)	Secure hosting, storage, and infrastructure	Account data, student submissions, usage logs (as stored by WhitAI.app)
Google Workspace APIs (optional)	Optional integration (e.g., importing/exporting documents) when enabled by a school	Files/metadata explicitly authorized by the user/school through Google permissions

10. Cookies and Analytics

WhitAI.app may use cookies or similar technologies for authentication, session management, and basic analytics to improve reliability and user experience. We do not use cookies for targeted advertising to students.

11. User Rights and Requests

Depending on your role and applicable law, you (or your school/district) may have the right to:

• Access or receive a copy of information (including Student Data)
• Correct inaccurate information
• Request deletion of information (subject to legal/contractual requirements)
• Request export/return of Student Data for school/district-controlled accounts

How to submit a request: Please email admin@whitai.app. For student data requests, we may route the request through the School/District to verify authorization and comply with FERPA/AB 1584 processes.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on this page and update the "Effective Date." If changes are material, we will provide additional notice (for example, via email to administrators or in-product notification).

13. Contact