Privacy Policy

We collect information in several ways depending on how you interact with SubjectPath:

1.1 Information Provided by Schools and Districts

When a school or district sets up SubjectPath, they may provide us with student roster information, including student names, student IDs, grade levels, classroom assignments, and teacher associations.

1.2 Information Generated Through Use of the Service

As students use SubjectPath, we automatically collect assessment data including responses to math assessment items, computed ability estimates (proficiency scores), mastery states for individual math concepts, time spent on assessments, and assessment session metadata.

1.3 Account Information

Teachers and administrators who create accounts provide their name, email address, school or district affiliation, and role.

1.4 Technical Information

We automatically collect certain technical information when you access the Service, including IP address, browser type and version, device type, operating system, referring URL, and pages visited within the Service. This information is used for security, performance optimization, and service improvement.

We use the information we collect to:

• Provide, maintain, and improve SubjectPath, including the adaptive diagnostic, the Frontier skill tree, lessons, skill checks, and user and roster administration
• Generate personalized math assessments tailored to each student's ability level
• Analyze assessment data in aggregate to improve the quality and accuracy of our adaptive algorithms
• Communicate with account holders regarding the Service, including technical notices, updates, and support responses
• Ensure the security and integrity of the platform
• Comply with legal obligations and enforce our terms of use

We do not use student personal information for advertising or marketing purposes. We do not build profiles of students for non-educational purposes.

SubjectPath does not sell, rent, or trade personal information. We may share information only in the following circumstances:

3.1 With Schools and Districts

Student assessment data is shared with the school or district that authorized the student's use of SubjectPath, as well as with the student's assigned teachers and administrators.

3.2 With Service Providers

We work with trusted third-party service providers who assist us in operating the Service (e.g., cloud hosting, analytics, customer support). These providers are contractually obligated to protect your information and may only use it to provide services to SubjectPath.

3.3 As Required by Law

We may disclose information if required to do so by law, in response to a valid legal process (such as a subpoena or court order), or to protect the rights, safety, or property of SubjectPath, our users, or the public.

3.4 In Connection with a Business Transfer

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. We will notify affected schools and districts before any such transfer and ensure that the receiving entity is bound by comparable privacy protections.

4.1 FERPA Compliance

SubjectPath operates as a "school official" under FERPA (the Family Educational Rights and Privacy Act, 20 U.S.C. § 1232g) with a "legitimate educational interest" in student education records. We are committed to:

• Using student education records solely for the purpose of providing the agreed-upon educational service
• Not disclosing student education records to third parties without proper authorization
• Maintaining appropriate security measures to protect student records
• Returning or destroying student education records when they are no longer needed for the contracted purpose

4.2 COPPA Compliance

SubjectPath complies with the Children's Online Privacy Protection Act (COPPA). For students under 13, we rely on the school or district to provide consent for the collection of limited personal information necessary to provide the educational service, as permitted under COPPA's school consent exception.

We do not:

• Collect more information from children than is reasonably necessary to provide the Service
• Use children's personal information for commercial purposes unrelated to the educational service
• Disclose children's personal information to third parties except as described in this policy

Parents and guardians have the right to review their child's personal information, request its deletion, and refuse further collection. The student's school or district controls these records, so parent and guardian requests to review or delete a student's data are made through the student's school or district.

We use role-based access controls that limit each user to the data their role requires. Details of our technical safeguards are set out in each district's data privacy agreement.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents. For more details, visit our Security page.

We retain personal information and student data only for as long as necessary to fulfill the purposes described in this policy:

• Student data: Retained for the duration of the school or district's active contract with SubjectPath. Upon termination of the contract, student-identifiable data is deleted according to the terms of that district's data privacy agreement.
• Account information: Retained for the duration of the account's active status plus a reasonable wind-down period.
• Technical and usage data: Retained as described in the applicable district data privacy agreement.
• Anonymized data: De-identified, aggregated data that cannot be linked back to any individual may be retained indefinitely for research and product improvement purposes.

Schools and districts may request deletion of student data as set out in the district's data privacy agreement by contacting us at privacy@subjectpath.com.

Depending on your jurisdiction and relationship to the Service, you may have the following rights:

• Access: Request a copy of the personal information we hold about you or your child.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of personal information, subject to legal and contractual obligations.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Withdraw Consent: Where processing is based on consent, withdraw that consent at any time.
• Complaint: Lodge a complaint with a relevant supervisory authority if you believe your rights have been violated.

To exercise any of these rights, please contact us at privacy@subjectpath.com. We respond to verified requests as required by applicable law.

SubjectPath uses cookies and similar technologies to operate the Service, maintain security, and understand how our platform is used. We use:

• Essential cookies: Required for authentication, session management, and core platform functionality.
• Analytics cookies: We use Google Analytics 4 (GA4) to understand usage patterns and improve the Service. Analytics data is aggregated and does not identify individual students.

This marketing website also uses Vercel Web Analytics to measure aggregate page views and visitor traffic. Vercel Web Analytics does not use cookies or store any identifiers on your device; visitors are counted using an anonymized hash that is not retained. See Vercel Web Analytics.

We do not use advertising or behavioral tracking cookies. For more details, see our Cookie Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify schools and districts of material changes via email at least 30 days before they take effect
• Post a prominent notice on subjectpath.com

Continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us: