Privacy Center
Student work is some of the most sensitive data a school handles. This is the plain-language version of what we do with it — written for the teachers and administrators who have to approve us.
The short version
Our commitments
Never sold, never advertised
We do not sell student data to anyone, under any circumstance. Lingua runs no ads and embeds no third-party advertising or analytics trackers.
Never used to train AI
Lingua never trains AI models on student or teacher data. It uses Google Gemini on the paid API tier, whose terms prohibit using prompts or responses to train or improve Google's models. The free tier has different terms — we don't use it.
A teacher decides every grade
Every AI grade, comment, and integrity flag is a draft for the teacher, who reviews, overrides, and regrades at will. No automated decision with a significant effect is made about a student.
Encrypted and access-controlled
TLS in transit, encrypted at rest. Recordings and work photos live in private storage reachable only through short-lived links issued after a per-file permission check. Database row-level security is a second layer.
Only what a feature needs
For grading we send only the work in question — the essay, the recording, the photo — plus the teacher's rubric and the student's name, so feedback can speak to them directly. Per-student insights, which a teacher runs on demand, also summarise that student's own past feedback. We never send rosters, student ID numbers, or gradebooks.
Deleted when you say so
Users delete their account and all its data instantly. Schools can request deletion, honored within 10 business days. Inactive accounts purge automatically after 12 months. Enforced by scheduled jobs, not by memory.
What we hold
What we collect
- Name, email, and optional school-assigned student ID
- Which course and section a student belongs to
- Coursework: written answers, essays, quiz responses, chat text
- Audio of student speech for speaking assignments, plus transcripts
- Photos of handwritten work, when a teacher assigns it
- Grades, rubric scores, AI feedback, and progress points
- Tab-switch counts during a test — only if the teacher turns on secure testing
What we never collect
- Camera or video of any kind
- Precise location or biometric templates
- Advertising identifiers or social-media data
- Browsing history outside Lingua
- Health or financial data
Where we stand legally
For schools subject to FERPA, we act as a “school official” with a legitimate educational interest, operating under the school's direction and control. Student records remain the school's.
Lingua is only for people 13 and older; no one under 13 can have an account. Students who sign up confirm they're 13 or older, and schools give Canvas access only to students 13 and older.
Our commitments — no sale, no advertising, no AI training, deletion on request, breach notification — are written to meet what these laws substantively require.
We're glad to sign a DPA and can work from your district's template or provide one. We'll also complete your own vendor questionnaire.
If something goes wrong
We keep a written incident response plan: contain first, then notify your school without unreasonable delay and no later than 72 hours after confirming a breach involving your students' data — what happened, which data and students were affected, and what we're doing about it. A written post-mortem follows within two weeks. We will never conceal an incident or delay notice for convenience.
What we don't have yet
Lingua has not completed third-party security certifications — we hold no SOC 2 report, 1EdTech TrustEd Apps certification, Common Sense Privacy rating, or Student Privacy Pledge signature. Those are meaningful, and they're on our roadmap. For context, our infrastructure providers (Supabase and Vercel) publish their own SOC 2 attestations covering the systems that physically hold your data — which is not the same as Lingua holding one, and we don't claim it is. If a SOC 2 report is a hard requirement for your approval process, we don't meet it today, and we'd rather tell you now.
Read further
Privacy Policy
The full legal text, including your rights and our obligations.
ReadSubprocessors
Every third party that touches data, what it does, and where it sits.
View listAsk us anything
Questions, data requests, DPAs, or your vendor questionnaire.
privacy@linguaclassroom.comLast updated October 15, 2026 · Integra EdTech LLC