How does Bookroo protect student data?

Student data belongs to the school. We use it only to provide Bookroo to your classes, and we never use it to advertise or market to students or their families.

• Laws we follow: FERPA, COPPA and PPRA, plus the state laws that protect student records.
• Our role under FERPA: we act as a school official with a legitimate educational interest, under the school's direction and control.

How students under 13 get access

Students under 13 can only use Bookroo through an account their school or teacher sets up. The school gives the notices and consent COPPA requires, under its "school consent" provision.

What we collect about students

• A login ID and password, or a class passcode or QR card.
• The name the teacher enters, and the student's class and school.
• What they read, their quiz answers and scores, and their progress in Bookroo.
• Basic device information (browser, pages used, time of use), which we use only to run the service.

What we never do

• Sell or rent student information.
• Share it for marketing.
• Let advertising networks track students.
• Let students under 13 make their information public.

The service providers that host and run Bookroo are held to the same rules.

Data privacy agreements

We'll sign your state's standard student data privacy agreement. Send it to schools@bookroo.com. States where we've signed the SDPC National Data Privacy Agreement are listed at bookroo.com/classrooms#privacy.

Access and deletion requests

• Parents: to review a child's records, parents go through the school. We route every request to the school and help it respond.
• Schools: to delete data for a student or the whole school, email schools@bookroo.com.
• Deleted classes: a deleted class is removed for good 30 days after it's deleted.

For tech directors, the Student Privacy & Security page covers hosting, encryption, backups and breach notice. The full policy is at bookroo.com/privacy-policy.