Privacy policy

Students

A student account is made by a teacher (from a class list) or by the student with the teacher's class code. Students may be under 13, so their accounts hold as little as we can manage.

• No email address. A student signs in with a class code, a username and a password (stored only as a secure hash), or with their school's Google or ClassLink account. For those we keep only the account's ID number, which links it to their account here. Never its email, and never Google's or ClassLink's access to it.
• A name, as the teacher or student typed it, so the teacher knows who is who.
• Practice: minutes practised, how many exercises, and on which days. Nothing about what was clicked or where.
• Class work: which assignments were done, and the score of each graded attempt, with how each note went and a link to the exercise. The teacher's gradebook shows each student's best score.
• Recordings of graded attempts on assignments, so the teacher can listen. A student is told this on screen before a graded attempt. A rhythm tapped on the screen or the spacebar records nothing.

When a teacher brings a class in from Google Classroom, we read that class's name and its students' names and Google ID numbers, with the teacher's permission, and nothing else: no emails, work or grades. If the teacher chooses, we post an assignment in that Classroom class and send each student's grade there as a draft for the teacher to return.

Student pages carry no analytics and no feedback form. Students cannot buy anything, and never reach our payment provider.

Teachers and other accounts

• Your name and email, and a hashed password, or your Google account if you sign in with Google.
• What you make: saved presets, settings, recent exercises, classes, assignments, and music you upload.
• Billing: Stripe holds payment details. For a school quote we keep the purchasing contact and address you give us.
• A monthly exercise count for free accounts.
• The free month of Pro: to keep it to one per person we keep a fingerprint of your email, browser and network, each stored only as a scrambled hash.
• Feedback you send with the Feedback button reaches us by email.

The microphone

Grading, the tuner and the other listening tools hear you in your browser. The sound is worked out on your device and goes nowhere, with two exceptions, both said on screen before anything is sent:

• A graded attempt on an assignment is recorded and sent to the student's teacher.
• Report error sends one grading run and its recording to us to improve grading, only when an adult presses Send. Students do not have this button.

Any other recording you play back after a run stays in your browser and is gone when you clear the marks.

Who sees what

• A student's work is seen by the student and their teacher. Other students never see it.
• We look at data only to run the site, fix problems you ask us about, or as the law requires.
• Service providers hold data for us and use it for nothing else:

Vercel

hosts the site, stores uploaded music and recordings privately, and counts page visits for teachers' and other adults' pages (cookieless, never on a student's page)

Prisma Postgres

the database that holds accounts, classes and results

Stripe

takes payments; we never see a card number

Resend

sends account emails, such as a password reset

Google

signs you in if you choose Google, gives a teacher their Google Classroom class lists when they ask, and receives the assignments and grades a teacher sends to their Classroom class

ClassLink

signs a school's teachers and students in, when their district uses it

We do not sell or rent personal information, and we do not share it for advertising.

How long we keep it

• Recordings of graded attempts: 90 days, then deleted. Sooner if the teacher deletes the assignment.
• Practice minutes and exercise counts: 395 days, about a school year and a summer.
• Everything else: until the account is deleted. Deleting a teacher's account also deletes the student accounts that teacher made.

Your choices

• Delete your account at any time from your account page. It goes with everything in it.
• A teacher can remove a student, reset a student's password, or delete their class.
• A parent or guardian can ask the teacher, or write to us, to see or delete a child's information. We will confirm who is asking with the school before we act.

Cookies: one keeps you signed in, one remembers an advertiser's code for 60 days if you arrived by their link, and one marks that a browser has claimed the free month. Settings such as your tempo are kept in your own browser.

For schools

When a school or teacher uses abcSightReading with students, we act on the school's behalf and under its direction. Student information is used only to provide the service to that class, is never used to build profiles or advertise, and is deleted when the school asks. We will sign a student data privacy agreement with a district on request.

Passwords are hashed, every page is served over HTTPS, and uploaded music and recordings are kept in private storage that only signed in owners and their teachers can reach.

If this policy changes in a way that affects students, we will say so on this page before the change takes effect.

Contact

Questions, requests to see or delete information, or a district agreement: privacy@abc-sightreading.com.