Privacy Policy

This Privacy Policy explains how Simovia, Inc., a Delaware corporation, doing business as Co-Teacher (“Co-Teacher,” “we,” “us,” or “our”) collects, uses, and protects information when you use the Co-Teacher application and website (the “Service”).

Mailing address: 2423 SW 147th Ave #2225, Miami, FL 33185

Privacy contact: privacy@co-teacher.com

Co-Teacher serves three kinds of users, and our role differs for each:

• Schools and districts. When a school or district adopts Co-Teacher, the school is the controller of its students’ education records. We process student data only on the school’s instructions, as a service provider and as a “school official” under FERPA. Our handling of school data is also governed by the data privacy agreement we sign with that school, which controls if it conflicts with this policy.
• Teachers. An individual teacher may use Co-Teacher directly. In that case the teacher is responsible for using the Service consistent with their school’s policies and applicable law when uploading student work.
• Parents and guardians. A parent or guardian may create an account to review their own child’s work. The parent controls that account and the data in it.

Account information

• Name and email address of the account holder (teacher, parent, or school staff member).
• Role (for example: teacher, parent or guardian, school administrator).
• Preferred language.
• Payment information, if you purchase a paid plan. Payments are processed by Stripe; we do not store full card numbers.

Student information

Depending on how the Service is used, we process student work and related information, which may include:

• Images of handwritten or printed student work that a teacher or parent uploads.
• A student name or identifier used to associate work with a student (what appears depends on what is written on the work).
• State and grade level.
• Analysis we generate from the work, such as a Lesson Brief, Worksheets, Slides, a Scorecard, and suggested small groups.

We do not require student dates of birth, contact information, home addresses, or government identifiers. We ask schools and users to upload only the information needed for the Service to work.

Usage information

• Basic analytics about how the Service is used, to help us improve it. We use a third-party analytics provider (Mixpanel) and do not include student work content in analytics events.

We use information to:

• Analyze student work and generate reteach materials for the teacher or parent.
• Provide, maintain, and secure the Service.
• Process payments for paid plans.
• Communicate with account holders about the Service.
• Improve the Service using our own operational data and aggregated or de-identified information.

Co-Teacher uses third-party AI providers to analyze student work and generate materials. We use OpenAI, Anthropic, and Google. When we send content to these providers:

• We access them under standard API terms that contractually prohibit using our inputs or outputs to train or improve their models.
• A provider may retain data up to thirty (30) days for abuse-monitoring purposes only. This does not involve training on or improving models using our data.
• AI-generated output can contain errors. It is intended to support, not replace, the judgment of a teacher or parent.

We share information only as described here. We do not sell it.

• Service providers (subprocessors). We use vendors for hosting, AI analysis, payments, and analytics. They may process data only to provide services to us and under contractual confidentiality and security obligations. Our current subprocessors are listed in our Subprocessor List, available on request and on our website.
• Within a school. When a school uses Co-Teacher, authorized school staff may access the data associated with that school’s account.
• People you invite. A parent account holder may invite trusted individuals to view a child’s work. Invited users cannot invite others.
• Legal requirements. We may disclose information if required by law or valid legal process, or to protect the rights, safety, or security of users or the public.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.

We host the Service on established cloud infrastructure (Supabase and Amazon Web Services). Data is stored on servers located in the United States. Our security measures include:

• Encryption in transit (TLS 1.2 or higher) and at rest (AES-256).
• Authentication using industry-standard methods, with role-based access controls.
• Row-level security policies and audit logging.
• Access to student data limited to authorized personnel who need it to operate the Service.

For school accounts, retention follows the agreement we sign with the school. By default, we retain student data for the duration of the engagement to provide the Service, and then delete it within thirty (30) days of termination or of the school’s request. Backups containing residual data are purged within thirty (30) days. We provide written confirmation of deletion on request.

You can delete your account at any time. Deleting your account removes the data you have uploaded. For parent and individual accounts, we may retain minimal billing records we are required to keep by law.

A school, teacher, or parent may also request deletion of specific data, or all of their data, at any time by emailing privacy@co-teacher.com. We honor deletion requests, including mid-year.

Co-Teacher is designed for use by adults: teachers, school staff, and parents or guardians. Children do not create their own accounts.

• When a school uses Co-Teacher, the school provides the consent and authorization needed under FERPA for us to process student records on its behalf as a school official.
• When a parent uses Co-Teacher for their own child, the parent provides and controls that information.

Because the Service is not directed to children for independent sign-up, and student data is provided by schools or parents, we rely on the school or parent for any consent required under the Children’s Online Privacy Protection Act (COPPA) and similar laws.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to limit certain uses. For data held in a school account, please direct requests to your school, which controls that data; we will assist the school in responding. For parent and individual accounts, you may exercise these rights by emailing us.

To make a request, contact privacy@co-teacher.com. We will respond consistent with applicable law.

If we become aware of a security incident affecting personal information, we will notify affected schools and account holders without undue delay and no later than seventy-two (72) hours of becoming aware, and sooner where required by an applicable agreement or law. For school accounts, the notification terms in our signed agreement with the school control.

We may update this policy from time to time. If changes are significant, we will notify account holders by email or through the Service. The effective date at the top shows when this version took effect.

Questions about this policy or your data: privacy@co-teacher.com

Security concerns or vulnerability reports: security@co-teacher.com