Exactly what we keep about a student
Every kind of student data Money Matters handles, why, and where it lives. Attach it to your data privacy agreement (for example NDPA Exhibit B) or share it with families.
| Category | What it is | Collected | Why |
|---|---|---|---|
| Student name | First name or nickname, as the teacher or parent types it (a roster import may bring a full name) | Yes | To show the student their own work and the teacher their class |
| Student identifiers | Username, an internal record ID and the sign-in code (stored only as a salted hash); with single sign-on, the Clever or ClassLink ID; only if a teacher adds it, a school ID or school email to match grades in Google Classroom or an LMS | Yes | Sign-in and matching grades |
| Enrollment | Grade, class or section, and the teacher’s name | Yes | Showing the right lessons and the right class |
| Assessment and performance | Lesson progress and mastery, weekly quiz and unit test scores, Financial Literacy Assessment attempts, reflections, game results and challenges with classmates (first name and last initial, kept 14 days) | Yes | Learning, reports for the teacher and family |
| In-app activity | Practice coins and the pretend Money Matters Bank (balances, purchases from the avatar shop, class rewards, statements), class jobs and payslips, and any note a teacher adds to a coin change | Yes | The financial-literacy activities themselves; the coins are not money |
| Device and place | At sign-in: device type and approximate place (students: state and country only), replaced at each sign-in | Yes | Protecting accounts |
| Usage statistics | Counts of events (for example “a lesson was opened”), with no name, ID or code, and only when the administrator leaves it on | Optional | Improving the program |
| Parent or guardian | Only for a family account an adult creates: the adult’s name and email | Only if a family signs up | The family’s own account |
| IP address | Used only in short rate-limit counters that expire within an hour; never saved with an account or record | No (not stored) | Stopping abuse |
| Not collected | Student email (unless a teacher adds a school email for the gradebook), phone, home address, date of birth, Social Security number, photos, voice recordings, biometrics, precise location, health, disability or discipline records, family income, advertising or tracking data | No | — |
Where it is kept
On the device
The app keeps the class’s data in the browser of the school’s device. A downloaded copy of the app keeps everything there and sends nothing.
On our server (website accounts)
Student records are encrypted (AES-256-GCM) before they are stored in our database (Supabase). Sign-in codes and passwords are stored only as salted hashes.
Class sync
When a school turns on class sync, each student’s record is encrypted on the teacher’s device before it is sent, so the server never sees a name or a score.
Who can see it
- The student: their own work, coins and bank
- Their teacher and the school’s administrators: their class
- A parent with a family account: their own child
- Never advertisers or data brokers; student data is never sold
- Our staff only to give support the school asks for
- The services on our subprocessor list, only for the job listed
How to delete it
Teachers remove a student in Admin Console → Students or Users; administrators can remove every student in Admin Console → Data & Backup → Danger zone. Removing a student deletes their record from our server. Retention for every kind of data is in the Trust Center. To delete a school’s data, email [email protected].
For teachers
Notes on a student’s coin statement and the names of class rewards are seen by the student and kept with their record. Keep them about learning (for example “helped a classmate”) and leave out personal or sensitive information.
Updated 2026-11-14. A plain-language summary, not legal advice; the signed data privacy agreement and the privacy policy govern. To attach it to an agreement, print this page or save it as a PDF from your browser.