Privacy Policy

Grades, test scores, IEP details, medical information and photos are stored only on the teacher’s device, inside the browser’s IndexedDB, protected at rest by your device’s own disk encryption. They do not travel to our servers. Student full names, student ID numbers, and parent contact details are stored on your device too, and reach our servers only as a locked copy: they are encrypted on your device with AES-256 before they are sent, using a key that exists only on your own devices. Teacher Supreme cannot read them.FERPA-safe by design: our servers never hold a student’s name in a form anyone can read. When you sign in, our cloud vault syncs your behavior and attendance records under an anonymous code for each student (like STU-3F9A1C) — no first name, no last name, no initial — so your logs survive a lost phone without the cloud ever knowing who a student is. The name appears only on your own devices. When Teacher Supreme asks an AI model to draft something (a parent email, a sub plan, a dossier summary), student names are swapped for anonymous tokens before the request leaves the phone. We sell nothing. We share nothing with advertisers. Everything we collect about you, the teacher, is described in plain English below.

When you use Teacher Supreme, we collect:

• Your name, school, and the email you sign in with, given when you start your free trial or sign in. That email lets us reach you.
• Your display name, if you choose to set one.
• A device identifier that associates this browser with your account so your observations sync to the right dossiers.
• Anonymous usage analytics — which screens you open, which buttons you tap, how often — with no content. We do not see the text of your observations, the names you type, or the substance of any voice note you record.
• Payment information — handled entirely by Stripe. Stripe shows us the last four digits of your card, the card brand, the expiration date, and the billing status. We never see your full card number. Stripe’s privacy practices are described at stripe.com/privacy.
• Feedback and support messages you send through the app, by email, or via the check-in reflection form.

Student identifying information stays on your device, apart from the locked copy of names and contact details described above, which only your devices can open. When you say or type a student’s first name into Teacher Supreme — for example, “This is the third time Marcus threw a paper airplane” — that observation is saved on your device, and a copy is saved to your Teacher Supreme account so it also appears on your other devices. Before that copy leaves your phone, the student’s name is replaced by a code such as STU-3F9A1C, and the name is put back only on your own devices. The same is true of behavior notes, academic observations and voice notes. Photos you take of printed rosters are read on your phone and are never uploaded. These are the same kinds of records teachers have always kept on paper to prepare for parent calls, IEP meetings, and administrative conferences — now faster, and private by design.

Specifically, the following is stored on your device only and never reaches our servers:

• Student names, first or last, in any readable form (only the locked copy described above).
• Student ID numbers.
• Grades, test scores, course performance records, or report-card data (a Snap-Check-In score only inside the locked copy described below).
• IEP, 504, or special-education documents.
• Medical diagnoses or health information.
• Photos of students and photos of printed rosters.
• Home addresses or parent contact information.
• The notes you type on a student’s page.

Photos of student work are protected twice. First, Teacher Supreme covers the names it finds on the photo, on your phone, before the photo is sent anywhere. Second, if you use Teacher Supreme on more than one device, the photo and the score read from it are kept online only in locked form. Only your own devices hold the key that unlocks them. We do not have that key, and we cannot open them.

What the cloud vault does hold. When you sign in, Teacher Supreme syncs your behavior logs, attendance marks, and interaction history to your cloud vault so a lost or upgraded phone doesn’t mean lost records. Each student in that vault is identified by an anonymous code only (“STU-3F9A1C”) — no first name, no last name, no initial. The vault never holds a readable name, and every row is locked to your account by database-level rules, encrypted in transit and at rest. Notes you save are coded the same way on your phone before they are sent: “Marcus finished early” is stored as “STU-3F9A1C finished early.” So that all of your own devices can show each student’s name, the vault also keeps the locked copy described above, which only your devices can unlock. To show names on a new device, you pair it once with a device you already use by checking that both screens show the same six-digit number. Until then, the new device shows the codes.

Your recovery key. Teacher Supreme can show you a recovery key: a line that starts with TS- that you write down or print. It opens your locked copy on a new device if you lose the old one. Anyone holding it can read your students’ names, so keep it where you keep your gradebook password.

This data lives in your device’s IndexedDB, under your operating system’s per-app storage protection and its disk encryption. If you uninstall Teacher Supreme or clear your browser’s site data, that information is deleted from your device with it.

When Teacher Supreme asks a large language model (currently Google Gemini; see Section 4) to draft something on your behalf — a parent email, a sub plan, a dossier summary — real student names in your observations are swapped for codes ( STU-001, STU-002, and so on) before the prompt leaves your phone. The model sees only tokens. When the response comes back, Teacher Supreme restores the real names on your device so that the final draft shows real names only to you.

Photo-reading features are where a photo you choose leaves your device. When you ask Teacher Supreme to read a photo you take, it is sent over an encrypted connection to the AI to be read, then discarded: the copy the AI reads is never stored on our servers and, under our AI provider’s API terms, never used to train models. A photo of student work is kept online only as the locked copy described above. Attendance sheets, gradebook screens, and nurse’s health lists go further: in the normal case your phone reads the photo itself and replaces your students’ names with anonymous codes in the image’s own pixels before anything is sent — the AI reads “S1 — absent” and never learns who S1 is. (On a school-wide nurse’s list, names of students who are not on your roster may remain readable.) A seating chart is read the same way: names your phone matches to your roster become codes, and any other name is blacked out. Only when a class has no students yet, and you are building it from the chart, do new names stay readable so they can become your students. If your phone can’t code the names confidently, nothing is sent until you explicitly choose to retake the photo or send it readable. A printed roster is read on your phone. Your phone reads the names itself and swaps every name, ID number, phone number and email address for a code; only that coded text is sent, so the AI can sort the columns. The photo and the names never leave your phone. Student work photographed for grading has student names blacked out on your device before upload, and IEP/504 plan pages photographed for accommodations have the student’s name, ID numbers, and birthdates blacked out on your device before upload. Every photo feature is something you choose to point the camera at — nothing is photographed or uploaded on its own.

Voice-to-text. On iPhone running iOS 17 Safari or later, voice transcription happens entirely on your device and no audio is sent to any third party to produce the text. On most up-to-date Chrome, Android, and Chromebook devices (Chrome 139 or later), Teacher Supreme also uses your browser’s on-device speech recognition — after a one-time language-pack download, audio never leaves the device there either. On older browsers, or on devices where the on-device pack isn’t available or fails to install, the short audio clip of what you said is sent to your browser’s built-in speech-to-text service (usually Google’s) where it is converted into text and returned to Teacher Supreme — and the app shows you a one-time notice on that device so you know. The resulting text is stored locally on your device as described above; we do not store the audio, and we do not receive it. If this matters for your district’s policy, use text entry instead of voice on those devices.

You remain responsible for following your school’s, district’s, and state’s policies on student records and parent communication. Teacher Supreme is a tool that helps you keep the records you are already expected to keep — the architecture is designed to hold up to close scrutiny, but it does not override your district’s rules about what tools you may use in classrooms.

We use the information described in Section 1 to:

• Run the app and keep it secure — authentication, device-to-account linking, fraud prevention.
• Send you transactional emails — sign-in links, billing receipts, reflection reminders, notices about changes to these policies.
• Improve Teacher Supreme — so that we know which features are used, which are confusing, and which are ignored.
• Respond to your support requests and feedback.
• Fulfill our legal obligations, including responding to lawful requests.

We do not sell your data. We do not share your data with advertisers. We do not use your data to train third-party AI models. We do not monetize your attention.

Every AI company that Teacher Supreme’s servers send your requests to must promise, in its terms for paying customers, not to use what we send to train or improve its models, and we use only that paid service. Today that company is Google. Before we add another, we name it in Section 4 and update this page.

Teacher Supreme uses a small number of vendors to deliver the service. Each vendor receives only the data it needs for the job it does.

• Supabase — authentication and teacher-account records. supabase.com/privacy
• Vercel — hosting for the Teacher Supreme web application. vercel.com/legal/privacy-policy
• Resend — email delivery for sign-in links, reminders, and notices. resend.com/legal/privacy-policy
• Stripe — payments. Stripe collects and processes your card information directly; we never see your full card number. stripe.com/privacy
• Google (Gemini) — large-language-model generation for drafts, summaries, and dossier narratives. As described in Section 2, prompts are tokenized to remove student identifying information before they leave your phone. policies.google.com/privacy
• Vercel Analytics — aggregated, privacy-preserving page-view metrics without long-lived cookies.
• Google Analytics — counts visits to our public pages, never your class screens, and never receives a student’s name.

If we add a vendor, we will update this section and, when the change is material, notify you by email.

Teacher Supreme uses cookies and browser storage to keep you signed in, remember your preferences, and store the on-device data described in Section 2.

• Session cookies — remember that you are signed in; cleared when you sign out or when the session expires.
• localStorage — stores your preferences and a device identifier; cleared when you sign out or clear site data.
• IndexedDB — stores your rosters, observations, voice notes, and photos on your device. Signing out clears cached photos and server responses; the stored rosters and observations stay in that browser until you clear site data or use More → Clear class roster.
• Service worker cache — stores a copy of Teacher Supreme so the app works offline; cleared by your browser or by uninstalling the app.

We do not use third-party advertising cookies. We do not participate in cross-site tracking networks.

The Family Educational Rights and Privacy Act (FERPA) protects student education records. Teacher Supreme’s architecture is designed to minimize our role as a custodian of those records by keeping student identifying information on the teacher’s device.

When a school or district contracts Teacher Supreme, FERPA lets it designate us a “school official” under 34 CFR § 99.31(a)(1). That designation is the district’s to make, not ours to claim. Where a district makes it, we perform a function the district would otherwise assign to its own employees, we stay under the district’s direct control as to how education records are used and maintained, and we use those records only for the purposes its agreement authorizes.

Individual teachers using Teacher Supreme on their own are responsible for complying with their own district’s policies about classroom observation tools and, where applicable, for obtaining parental consent under FERPA and any state analog. If your district has specific requirements, follow them; when in doubt, ask your district office before enabling Teacher Supreme in classrooms.

The California Student Online Personal Information Protection Act (SOPIPA) applies to online services designed for K-12 school purposes. SOPIPA prohibits selling student personal information, using it for targeted advertising to students or their families, and building non-educational profiles on students. Teacher Supreme does none of these. As described in Section 2, student identifying information stays on your device, and anything you type or speak is swapped for anonymous tokens before any AI request. A photo you ask Teacher Supreme to read follows the separate, narrower rule set out in Section 2. If a school asks us to delete a teacher’s account-level records, we honor that request, as SOPIPA requires.

When a California school or district contracts Teacher Supreme under Assembly Bill 1584 (California Education Code § 49073.1), the contract will include the terms that law requires: student records remain the property of the district, parents keep the right to review and correct personally identifiable information, we follow a breach-notification process, we do not use records for targeted advertising, and we delete records at the end of the contract. A district representative can request a copy of our standard agreement by emailing james@teachersupreme.com.

Teachers outside California are protected by their own state’s student-data laws where applicable — New York (Education Law § 2-d), Texas, Florida, Illinois, Colorado, and Connecticut each have comparable statutes. Teacher Supreme’s architecture — on-device storage, tokenized text and voice requests (photo reading follows the separate rule in Section 2), no sale of data, no targeted advertising — is designed to meet the common core of these laws. If your district has specific requirements, those requirements control; ask your district office before enabling Teacher Supreme in classrooms when you are unsure.

The Children’s Online Privacy Protection Act (COPPA) applies to online services directed at children under 13. Teacher Supreme is not directed at children. Students do not create accounts, do not interact with the service, and are not marketed to by us.

Because Teacher Supreme is used by teachers to record classroom observations, some of which involve students who are under 13, Section 2 explains how we keep that information off our servers. If you believe that personal information about a child under 13 has been collected by us in violation of COPPA, please email james@teachersupreme.com and we will investigate and respond within 30 days.

You have the right to:

• Access the information we have about you.
• Export your observations, dossiers, and notes from the app.
• Correct inaccurate information.
• Delete your account and your data.
• Object to specific uses of your data.

California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what categories of personal information we collect, the right to request deletion, and the right to opt out of the sale or sharing of personal information. Because we do not sell or share personal information with advertisers, the opt-out right does not change anything about your data in practice. We will honor access and deletion requests from California residents within the CCPA’s statutory timelines.

To exercise any of these rights, email james@teachersupreme.com. We will respond within 45 days, consistent with the CCPA’s statutory timeline.

While your subscription is active, we retain the teacher-level information in Section 1 and your on-device rosters and observations as long as you continue to use Teacher Supreme.

If you cancel your subscription, we keep your account for a 30-day grace period so that you can re-subscribe without losing your dossiers. After that, email us and we delete it. Aggregated, non-identifying usage analytics may be retained longer for product-improvement purposes.

You can request immediate deletion at any time by emailing us.

We take security seriously, and we are honest that no service is immune from all risks. Our practices include:

• TLS in transit — every request to Teacher Supreme is encrypted on the wire.
• Encryption at rest — the Supabase and Vercel infrastructure we rely on encrypts stored data with industry-standard keys.
• On-device storage — rosters, observations, and media stay in this browser, protected by your device’s own disk encryption.
• Passwordless authentication — we do not store passwords because you do not have one. Account access is gated on your email.
• Least-privilege database rules — Supabase row-level security policies ensure you cannot read another teacher’s data, even if an application bug tried to query it.
• Audit trail — we log access to administrative functions.

If we discover a security incident that affects your account, we will notify you promptly by email with a description of what happened, what we did, and what you should do.

Teacher Supreme is operated from the United States and stores data with vendors whose primary infrastructure is in the United States. If you use Teacher Supreme from outside the United States, your information will be transferred to, stored in, and processed in the United States. By using Teacher Supreme, you consent to that transfer.

When we change this Privacy Policy in a way that materially affects how we handle your information, we will notify you by email and by an in-app notice at least 30 days before the change takes effect. For non-material updates — typos, clarifications that do not change your rights, and similar — we post the updated policy on this page with a new effective date at the top.

Questions about this Privacy Policy, or about anything we do with your information? Email james@teachersupreme.com.