Privacy Policy | Report Card Comments Generator

Report CardComments Generator

Log in

Get started

2

How we use data

3Third-party services

4Cookies and tracking

5How data may be shared

6AI processing and student data

7International data transfers

8Retention and security

9Your controls

10Children and school data

Information we collect

We may collect account information such as your name, email address, login details, billing records, and product usage activity.

If you use the classroom workflow, we may also process class names, student names, notes, comment drafts, exports, and other content you choose to enter into the platform.

When you use the comment generation feature, we process the student first name, pronouns, class name, subject, and any teacher notes (strengths, areas for improvement, effort and behaviour observations) you enter. This information is sent to our AI provider to generate the comment draft and is not retained by the AI provider after processing.

Account and authentication data
Billing and purchase records
Teacher-created notes, prompts, and generated comment drafts
Technical logs such as device, browser, and usage events

Company

Cookies and similar identifiers used for authentication and analytics

Session interaction data such as mouse movements, clicks, and scroll behaviour collected by analytics tools with personal information masked

How we use data

We use information to provide the service, authenticate users, process purchases, maintain account balances, improve reliability, and support product development.

We may also use service data to investigate abuse, protect the platform, respond to support requests, and comply with legal obligations.

Third-party services

We rely on a number of third-party services to run the platform. Each provider receives only the data needed for its specific function. We do not sell or rent your personal information to any third party.

Below is a summary of each service, the data it may receive, and its role.

Supabase — Database, authentication, and server functions. Stores your account details, class lists, student data, comment history, and credit balances. Hosted in the United States.
Google Gemini — AI comment generation. Receives student first name, pronouns, class name, subject, and teacher notes (strengths, improvements, effort) for each generation request. Google processes this data under their API terms and does not use it to train models.
OpenAI — Additional AI comment generation provider. Receives the same contextual student data as Google Gemini when selected. OpenAI processes API data under their business terms and does not use it to train models.

Cookies and tracking

We use cookies and similar technologies to keep you logged in, remember preferences, and understand how the product is used.

You can control cookies through your browser settings. Disabling certain cookies may affect authentication or analytics features.

Authentication cookies — Set by Supabase to maintain your logged-in session. These are necessary for the service to work.
Analytics cookies — Set by Google Analytics to measure page views and usage patterns. These help us understand which features teachers use most.
Session recording cookies — Set by Microsoft Clarity to record anonymised interaction data such as clicks and scrolling.
Chat cookies — Set by Crisp Chat when you use the support widget. These remember your chat history so you can return to a conversation.

AI processing and student data

When you generate or adjust a report card comment, the student's first name, pronouns, class name, subject, and your teacher notes are sent to our AI provider (currently Google Gemini, with OpenAI as an additional option). The AI returns a comment draft and does not retain the input data after the request is complete.

We do not send student surnames, dates of birth, grades, or other sensitive identifiers to the AI provider. The prompt is constructed server-side to include only the minimum fields needed for comment generation.

Generated comments are stored in your account so you can review, edit, and export them. You are responsible for reviewing all AI-generated text before sharing it with students, parents, or school administrators.

International data transfers

Some of our service providers are based in the United States or other countries outside your jurisdiction. By using the service, you acknowledge that your data may be transferred to and processed in countries with different data protection laws than your own.

We select providers that maintain reasonable security practices and, where applicable, offer data processing agreements or standard contractual clauses.

Retention and security

We keep information for as long as it is needed to operate the service, meet legal obligations, resolve disputes, and enforce agreements.

We use reasonable technical and organisational measures to protect stored information, but no online system can guarantee absolute security.

Your controls

You can usually update account information directly inside the product. You may also request account deletion or support help for privacy-related questions.

If student information is entered into the product, you are responsible for making sure you have the authority to use that data and for following your school or district privacy requirements.

To request deletion of your account and all associated data, including class lists, student information, and comment history, email [email protected]. We will process deletion requests within 30 days.

Children and school data

The service is designed for use by teachers and authorised school staff, not by children. Children under 13 (or the applicable age in your jurisdiction) should not create accounts.

Student information entered into the platform (names, pronouns, teacher notes) is education data provided by the teacher for the purpose of generating report card comments. Teachers are responsible for ensuring they have appropriate authority under their school or district policies (including FERPA, COPPA, or equivalent local regulations) before entering student data.

We do not knowingly collect personal information directly from children. If you believe a child has created an account, contact us at [email protected] and we will delete it promptly.

Dodo Payments — Payment processing for credit pack purchases. Receives your email address, name, and payment details. We do not see or store your full card number.

Vercel — Application hosting and delivery. May process IP addresses, request headers, and standard web traffic logs.

Google Analytics — Website usage analytics. Collects anonymised page views, session duration, device type, and approximate location derived from IP address. You can opt out using browser settings or a Google Analytics opt-out extension.

Microsoft Clarity — Session recording and heatmaps. Records mouse movements, clicks, and scroll behaviour to help us understand how teachers use the product. Personal information displayed on screen is automatically masked. Clarity may use cookies.

Crisp Chat — Live chat support widget. If you start a chat, Crisp receives your messages and may collect your email address, browser type, and IP address for the support session.