Student data

Last updated October 15, 2026

Our promise to schools and families about student information. It sits alongside our privacy policy and any agreement we sign with your school.

In short

  • We hold as little as possible: the email addresses on your list, whether each is a student or teacher, and the date each first used Scholar Help.
  • Student emails are stored as codes unless your school chooses to see them.
  • The school owns and controls its students’ information.
  • No ads, no selling, no profiles, ever.
  • We delete your list when you ask, and within 60 days after your licence ends.

What we receive

A school admin uploads a list of email addresses and marks each one as a student or teacher. When a student signs in to the toolbar, Google confirms their email address to us so we can check the list. We record the date each person first used Scholar Help so the school can see who is using it.

We don’t receive names, grades, ages, schoolwork, or the pages students read. Text a student uses an online tool on (such as Translator or Check It) goes straight from their browser to the service named in our privacy policy; it does not come to us and we don’t store it.

Emails stored as codes

We don’t keep the email addresses on a school’s list. Each one is turned into a code with a secret key, and when a student signs in we turn their email into a code the same way and look for it. If a school wants to see the email addresses on its list, a school admin can choose that on their school page; we keep it on record who agreed and when, and the school can switch it off again.

The school is in charge

Under FERPA we act as a “school official” with a legitimate educational interest: we use student information only to provide Scholar Help to the school, under the school’s direction. School admins can add and remove students at any time. Requests from parents or students to see or change information go to the school, and we help the school answer them.

Children under 13

Under COPPA, the school gives consent on behalf of parents for Scholar Help to be used for school. We use what we receive only for that educational purpose, never for anything commercial.

What we will never do

  • Sell, rent or trade student information.
  • Show ads to students, or use student information to target ads anywhere.
  • Build profiles of students for anything other than providing Scholar Help.
  • Share student information, except with the service providers that run Scholar Help for us, under the same rules.

These promises follow FERPA, COPPA, and California’s student privacy laws (SOPIPA and AB 1584).

Service providers

  • Fly.io hosts this website and its database in the United States.
  • Google provides sign-in and our email (Google Workspace).

Stripe handles payments for individual Premium only; school students never pay through Stripe.

Security

Connections are encrypted with HTTPS, the database sits on encrypted disks, and only the owner and the school’s own admins can see a school’s list. If student information is ever exposed, we’ll tell the school without delay, and within 72 hours of confirming it, with what happened and what we’re doing about it.

Deleting a school’s information

When a school asks, or within 60 days after its licence ends, we delete the school’s list, its admins and its licence record. Backups that still contain them expire within a few days after that.

Data privacy agreements

We’re glad to sign the California Student Data Privacy Agreement (CA-NDPA) or your state’s version of the National Data Privacy Agreement. Email quotes@scholarhelp.education and we’ll send it back signed.