Privacy you can explain to a parent
What we believe
Student data deserves the highest standard of care. We collect as little as possible, protect it strongly, and give districts real control. Privacy is a feature, not a footnote.
What we do
- Minimize data. We default to pseudonymous student aliases and collect only what a data point needs.
- Keep voice on device. Where supported, speech is transcribed on your device. You confirm the numbers, and audio is not retained.
- Encrypt everywhere. Data is encrypted on the device and in transit, and stored securely.
- Work offline. Your data is captured locally first and syncs safely when you reconnect.
- Let you leave. You can export or delete your data at any time.
What we never do
- No advertising, no cross-app tracking, no selling data.
- No training AI models on your students' data.
- No student-facing accounts, no ambient or always-on listening.
- No hiding errors: charts show sample sizes and data gaps honestly.
This website
The app and this website are separate. Nothing in this section concerns student data, which never passes through the website.
To learn which pages help teachers and which confuse them, ieptracker.app uses Google Analytics 4:
- What it records. The page you visited, the site or search that sent you (including a short campaign label such as “newsletter” if the link you followed carried one), your device type and browser, your approximate region (country and city, worked out by Google from your connection; Google Analytics 4 does not store IP addresses), and a few actions: tapping an App Store or pricing button, and which buttons you used on the free tools.
- What it never records. Anything you type into the free tools or the contact form. The tool events carry the tool's name and the button's name, never a value.
- Cookies. Google Analytics sets first-party cookies named
_gaand_ga_*to tell one visit from the next. They are not used for advertising. - No advertising. Google signals and ad personalisation are switched off, so this data is not linked to your Google account or used to show you ads.
- Your choice. In Europe, the UK and Switzerland, nothing loads until you choose Allow. Elsewhere, analytics is on with a notice, and Turn off stops it. If your browser sends Global Privacy Control, analytics stays off. You can change your choice any time with Cookie settings at the foot of every page.
- Retention. Google keeps this data for 14 months, then deletes it. Google processes it under the Google Ads Data Processing Terms; see how Google uses data from sites that use its services.
The TendiPlay pages on this site load no analytics at all.
For districts
District plans add single sign-on, a data processing agreement and applicable state addenda, admin controls, audit export, and retention configuration. Real, identifiable student data at scale is used under a signed agreement in which the district remains in control of its records.
We do not describe the product as “FERPA certified.” No federal agency certifies products as FERPA compliant; compliance depends on how a district uses the tool and the contracts in place. We build to support FERPA/IDEA-aligned district use.
AI, used carefully
Optional AI only drafts from data you already captured, cites its sources, and requires your approval. It never diagnoses, predicts student outcomes, or makes eligibility, placement, discipline, or instructional decisions.