Class roster privacy: what we keep about children
We keep a first name or nickname, and for each assignment a score, a time and a count of tries. Only the teacher can see them, they can delete all of it in one click, and it goes by itself after 90 days.
What we keep about a child
- A first name or nickname, as the teacher typed it. Not a surname, initial, number, email, birthday, address, school or location. The same checks as “What shall I call you?” on peabody.kids refuse anything that looks like a full name or a personal detail.
- For each assignment: whether it was done, the score and total, how many seconds it took, how many tries, and the best score.
That is all. Children type nothing but a six-letter class code; they tap their own name. We don't ask a child for an email, a password, a photo, a voice or any text of their own.
Who can see it
Only the teacher whose class it is, signed in with their own Peabody grown-up account. Another teacher can't read it. Children see only the first names in their own class (after typing its code) and their own assignments. We don't show it in any report, page or email that leaves the product, and we never use it for ads, experiments or the daily digest beyond counting classes.
What the child's device keeps
One token that says which name was tapped, so tomorrow needs no code. “That's not me” clears it. No cookie, no account, no tracker: page counting is off on the children's page.
Deleting
- The teacher can remove a child, an assignment, or the whole class (names, assignments and every result) with one click.
- Everything is removed automatically 90 days after it was added or made, and a class nobody has touched for 90 days is removed too.
- A parent who asks the teacher to remove their child can ask them to use the × next to the name. You can also write to us.
Limits that keep it small
Up to 12 classes per teacher, 40 children per class and 40 assignments per class.
Counting a homework link
A teacher can turn a quiz link into a counted link. It adds one to a total when a child opens it and, at the end, adds the score and which question numbers were missed. Nothing about the child is sent: no name, no seat, no id.
Moving your desk to another device
A signed-in teacher can email themselves a one-time link. We seal your pins and settings, keep them for 30 minutes, and send the link to your account's own address (never to an address typed into a box). Opening it and tapping the button puts the desk on that device and deletes our copy. Saved lists that might hold children's names only travel if you tick a box that says so. The Record Book never leaves your browser.
What we haven't had a lawyer read yet
A school using this for its students may want its own review. If your district needs a data agreement, tell us.