Privacy & student data
Student privacy comes first.
ProgMon handles sensitive special-education records. Here is exactly how we protect them.
We never sell student data
Student records are used only to provide progress monitoring to the school. We do not sell, rent, or use them for advertising.
AI never trains on your students
AI features receive only de-identified facts — scores, dates, and goal wording with names removed. No student name, ID, or disability category is sent.
Private, isolated records
Each teacher sees only the students on their caseload. Records are protected by database-level access rules, encrypted in transit, and work samples live in private storage with no public links.
Secure student links
Students open assessments without an account. Links show only the student's first name, never include answer keys, accept one submission, and expire after 14 days.
FERPA
ProgMon is designed to operate as a “school official” with a legitimate educational interest under FERPA. Schools and districts own their student records; ProgMon processes them only on the school's behalf.
We support a Data Processing Agreement or state Student Data Privacy Agreement for school and district licenses.
COPPA
Students do not create accounts. Teachers enter records and share assessment links, so the school provides consent on behalf of parents for educational use, as COPPA permits for school-directed services.
What we collect
Teacher account details (name, email). Student records entered by teachers: names or initials, grade, IEP goals, assessments, scores, and work samples.
During the beta pilot we ask teachers to use student initials or pseudonyms.
Who processes data
Hosting, database, authentication, and file storage: Lovable Cloud. AI drafting: Lovable AI Gateway (de-identified data only). Payments for teacher subscriptions: Stripe (ProgMon never sees card numbers).
Retention and deletion
Teachers can delete student records at any time. Schools and districts can request export or deletion of all their records at the end of a contract.
Need a data privacy agreement?
Contact us for DPA templates and security documentation for your district, or email info@progmon.com.
This page describes current practices during the ProgMon beta and is not a legal certification.
