How we protect student data

Our promises

• We never sell student data and never use it for advertising.
• Families decide who gets a certificate. Insurers see a certificate when the family sends it to them or gives them its code.
• Insurers can't browse students. There is no list of a school's students for anyone outside the school.
• We keep as little as we can. Permit and license numbers are stored as the last 4 characters only. Student addresses are optional and off by default.
• Emails and birth dates are encrypted in our database, on top of the encryption our hosting providers use.
• Owner ID photos are deleted after we review a school, and within 7 days at the latest.
• We keep certificates checkable for 5 years, then remove the student's details and keep only the code and its status.
• Every insurer search is logged, and we review unusual activity.
• School license and amendment documents are kept for the life of the school's account plus 3 years, then deleted.
• Your data stays in the United States. See the companies that help us run the service.
• Visitor counts without tracking. We count page views on public pages with no cookies. We never store your IP address; a visitor is a code that changes every day and cannot be traced back to you. Browsers that send Do Not Track or Global Privacy Control are not counted.
• We honor Global Privacy Control. If your browser sends it, we treat it as an opt-out. We never sell personal information, use it for targeted ads, or use tracking or advertising cookies.
• The service is for students 13 and older. We don't collect information about children under 13.

Questions or deletion requests

Students, parents and schools can ask us what we hold and ask us to delete it. Contact us and a person will reply.