Legal
Privacy policy
Draft — not yet in effect
Draft — under review. This page describes how KiteQuad is built today and is being reviewed by counsel. It isn't a binding policy yet, and the wording may change before launch.
The short version
- In anonymous mode — how every teacher starts — KiteQuad stores no student names and no student email. Students are a nickname and an avatar the teacher picks.
- What a student app saves is kept for 30 days after the last change, then deleted automatically.
- Everything is stored in the United States. We don't sell data, show ads, or let anyone train AI on student data.
- A teacher can delete a student's data, a class's, an app's, or their whole account at any time.
Who this is for
KiteQuad is used by two kinds of people: teachers, who sign in with an adult account and build and publish apps, and students, who sign in to a class to use those apps. We collect different things from each, so this policy treats them separately.
What we store about a teacher
- Your account: your email address, the name you give, your chosen handle, and — if you sign in with Google — your Google profile picture.
- A password, if you set one, kept only as a salted one-way hash. We can't read it back.
- Sign-in sessions and links, so you stay signed in. Expired ones are deleted automatically.
- What you create: your classes, your rosters of student nicknames, and the apps you publish.
- A record that you agreed to the Terms and attested you are an educator, with the date.
What we store about a student
KiteQuad starts every teacher in anonymous mode. In anonymous mode:
- A student is a nickname and an avatar, chosen or generated by the teacher. We store no real name and no email address. The system refuses to save a real name in an anonymous class.
- A student signs in with a class code and a PIN or a picture password, or by scanning a QR badge. The PIN and picture password are stored only as salted one-way hashes.
- What an app saves for a student (through
kitequad.store), scores posted to a leaderboard, and any report a student files are stored under a nickname, never a name. - Each app sees a different, per-app identifier for the same student, so one app's data can't be matched to another's.
Real names, email addresses and student work submissions are part of authorized mode, which a school unlocks for its teachers in a later release. Until a school authorizes it, those are off.
How long we keep it
| Data | Kept for |
|---|---|
| What a student app saves (anonymous mode) | 30 days after the last change, then deleted automatically. |
| What a student app saves (authorized mode) | Your school's setting — by default the end of the school year, at most 365 days. |
| Leaderboard scores | With the app's other student data, on the same schedule. |
| A student report about an app | With the app's data; cleared when you delete the app's data or the app. |
| Adult sign-in sessions and links | Sessions 30 days; emailed links 20 minutes (24 hours for a new-account confirmation), single use. |
| Your account when you delete it, or student data you clear from an app's Results | Removed from the live service within 7 days of the request; copies in encrypted backups are removed within about 30 days after that (about 37 days in all). |
| A deleted student, class or app (the record itself) | The record, and the student work saved under it, is removed from the live service within 30 days; copies in encrypted backups are removed within about 30 days after that (about 60 days in all). |
| Audit records (who did what, by internal id) | Kept to meet records rules; they hold no names, nicknames, emails or saved values. |
Where it lives
KiteQuad runs on Cloudflare. The database and file storage are created in Cloudflare's United States jurisdiction, and nothing personal is kept in any globally replicated store. Traffic to and from KiteQuad uses HTTPS, and stored data is encrypted at rest. See the security overview and the trust center.
Who else sees it
We use a small number of vendors to run the service, listed on the subprocessor page with what each one handles. The short of it: Cloudflare hosts the service, and Stripe handles a teacher's own payment if they upgrade — Stripe never receives anything about students. We don't sell your information, we don't show ads, and neither we nor any vendor trains AI on student data.
An app a teacher publishes runs in a locked-down sandbox: network access from the app is blocked, and the other ways an app might try to send data out are detected and reported to the teacher. The one channel built for saving data is kitequad.store, which keeps the data inside KiteQuad.
Student privacy and the law
We built KiteQuad so a school, not an individual teacher, decides when real student data is collected — which is what the FTC's COPPA guidance asks for. Anonymous mode is designed to need no real student data at all. See the COPPA school notice for how this works and what a school agrees to.
Deleting data
A teacher can delete any student's data, a whole class's, or everything an app saved, from the app's Results tab and its What this app stores panel. Deleting your account (in Settings) takes down your apps from students at once and schedules your classes, students, apps and their data for deletion. See the help page for the steps. If you'd rather we do it, write to support@kitequad.com.
Changes
If this policy changes in a way that matters, we'll say so here and in the changelog before it takes effect.
Contact
Questions about privacy go to support@kitequad.com.