Student & Children’s Privacy Notice

1. Scope

This notice explains how Glotta handles information from students whose accounts are created and managed by a teacher, school, district, or other educational organization. It is designed to support schools’ obligations under COPPA, FERPA, applicable US state student-privacy laws, GDPR, and UK GDPR.

AIMANACK LLC, doing business as Glotta, provides the service. The school ordinarily determines the educational purpose for processing student information, and Glotta processes that information to provide the school-requested service.

2. School-managed accounts and authorization

Teachers or school administrators create student accounts and provide login credentials. School-managed students do not need to provide Glotta with a personal email address and cannot create these accounts independently.

For children under 13 in the United States, a school may authorize collection on behalf of a parent when Glotta is used solely for the school’s educational purpose. The school is responsible for confirming that it has authority to provide that authorization and for giving any notices required by its policies or applicable law. When parental consent is legally required instead, the school must obtain it before enabling the student’s use.

3. Student information we collect

• Account information: teacher-provided name or nickname, assigned student login ID, password hash, school, workspace, classroom, enrollment, and language-learning settings.
• Learning activity: assignments, written and spoken responses, quiz answers, scores, feedback, completion status, progress, and teacher comments.
• Voice information: microphone audio, transcripts, pronunciation and fluency analysis, and related speaking-session metadata.
• Technical information: IP address, device and browser information, login timestamps, diagnostic logs, and security events.

We do not require a school-managed student to provide a personal email address, postal address, telephone number, or precise geolocation.

4. How we use student information

We use student information only to deliver and secure the educational service: authenticate students, present assignments, provide language practice, generate feedback, measure classroom progress, allow authorized educators to review work and recordings, provide support, prevent misuse, and comply with law.

5. Voice recordings

When a student uses a speaking activity, Glotta records and processes microphone audio so the activity can operate, educational feedback can be generated, and authorized teachers can replay the submission.

Student voice recordings are automatically deleted from active systems and backups within 30 days after collection. An authorized teacher may delete a recording sooner. Related scores or learning-progress records may remain until the school requests deletion or the account or classroom is deleted.

6. Strict protections

7. Service providers and regional processing

Glotta uses contracted hosting, storage, authentication, AI, speech, communications, security, and support providers only as needed to operate the service. They must protect student information and process it only for contracted purposes.

EU, EEA, and UK school data is hosted and routed through Glotta’s European environment. US school data is hosted and routed through Glotta’s United States environment. Legally required transfer safeguards are used when data must cross borders.

8. FERPA support

When a school relies on FERPA’s school-official exception, Glotta processes education-record information for a legitimate educational interest, remains under the school’s direct control regarding its use and maintenance, and does not reuse or redisclose it except as permitted by the school agreement and law. Each school remains responsible for determining whether the exception’s requirements are satisfied.

9. School, parent, and student rights

Schools may access, correct, export, or delete student information through authorized controls or by contacting Glotta. Parents and eligible students should ordinarily submit education-record requests to their school so the school can authenticate and coordinate the response. They may also contact Glotta, and we will work with the relevant school unless applicable law permits or requires us to respond directly.

A parent may request review or deletion of a child’s COPPA-covered information and may refuse further collection. Ending further collection may require deactivating the child’s Glotta account.

10. Security, deletion, and contact

We use access controls, encryption, monitoring, and other safeguards designed to protect student information. When a school deletes an account or classroom, associated student personal information is removed from active systems and backups within 30 days, unless retention is legally required.

Privacy questions and school data-processing agreements: privacy@glotta.ai
Support: support@glotta.ai