Privacy & student data

Student privacy comes first.

ProgMon handles sensitive special-education records. Here is exactly how we protect them.

We never sell student data

Student records are used only to provide progress monitoring to the school. We do not sell, rent, or use them for advertising.

AI never trains on your students

AI features receive only de-identified facts — scores, dates, and goal wording with names removed. No student name, ID, or disability category is sent.

Private, isolated records

Each teacher sees only the students on their caseload. Records are protected by database-level access rules, encrypted in transit, and work samples live in private storage with no public links.

Secure student links

Students open assessments without an account. Links show only the student's first name, never include answer keys, accept one submission, and expire after 14 days.

FERPA

ProgMon is designed to operate as a “school official” with a legitimate educational interest under FERPA. Schools and districts own their student records; ProgMon processes them only on the school's behalf.

We support a Data Processing Agreement or state Student Data Privacy Agreement for school and district licenses.

COPPA

Students do not create accounts. Teachers enter records and share assessment links, so the school provides consent on behalf of parents for educational use, as COPPA permits for school-directed services.

What we collect

Teacher account details (name, email). Student records entered by teachers: names or initials, grade, IEP goals, assessments, scores, and work samples.

During the beta pilot we ask teachers to use student initials or pseudonyms.

Who processes data

Hosting, database, authentication, and file storage: Lovable Cloud. AI drafting: Lovable AI Gateway (de-identified data only). Payments for teacher subscriptions: Stripe (ProgMon never sees card numbers).

Retention and deletion

Teachers can delete student records at any time. Schools and districts can request export or deletion of all their records at the end of a contract.

Need a data privacy agreement?

Contact us for DPA templates and security documentation for your district, or email info@progmon.com.

Contact us

This page describes current practices during the ProgMon beta and is not a legal certification.