Effective Date: April 2026
Potato Class is operated by Growing Standard LLC (“we,” “our,” or “us”). We are committed to protecting the privacy of children and all users of our educational math and reading application. This policy describes what information we collect, how we use it, and the choices available to parents, guardians, and school administrators.
Users may sign in with Google, Apple, or Clever SSO to enable cloud sync and classroom features. When signed in, we receive only the name and email address (or Clever user ID + district ID + school ID) provided by the sign-in service. Users may also use the app anonymously without signing in — in anonymous mode, all data is stored locally in the browser and is not transmitted to any server.
We collect information about a student’s learning activity, including grade level, math skills practiced, questions answered, accuracy rates, stars earned, and assessment results. Math assessment data includes per-domain proficiency across 4 math domains, math placement level (grade equivalent), per-domain grade-level placement, assessment response times (for rush detection), testing window history, and reliability metrics. Reading assessment data includes reading level (across Fountas & Pinnell, Lexile, DRA, and Grade Equivalent systems), per-skill reading proficiency across 16 skill areas, assessment response times, and testing window history. For signed-in users, this data is synced to our cloud database (Google Firebase Firestore) to enable cross-device access and classroom features. For anonymous users, this data is stored only in browser localStorage.
We collect information about a student’s reading activity, including current book selection, library browsing history, and reading tool annotations (highlights and notes). For signed-in users, this data is synced to the cloud. For anonymous users, it remains in browser localStorage only.
Users create a display name (max 20 characters), select a US state, and customize a potato character. Multiple profiles can be created under a single sign-in for family use, each with their own progress and character. Optional 4-digit PINs (stored as SHA-256 hashes) protect individual profiles. For signed-in users, this data is synced to the cloud. For anonymous users, it remains in browser localStorage only.
Users may select from 11 supported languages (English, Spanish, Chinese, Arabic, Vietnamese, Ukrainian, Portuguese, French, Hindi, Korean, Japanese). This preference is stored per profile to personalize the interface and voice-assistant language.
We do not collect precise geolocation, photos, contacts, browsing history, device identifiers for advertising, or biometric information. We do not use cookies or tracking pixels. We do not allow third-party advertising. Text input fields include automatic on-device filtering to prevent entry of email addresses, phone numbers, and other personally identifiable information.
Reading assessment data is collected up to three times per school year during designated testing windows (Fall, Winter, Spring). This data includes:
Teachers in classrooms can view their students’ reading assessment results, including rush detection indicators, and may initiate retakes of specific skill areas where rushing was detected. Reading tool annotations (highlights, notes) are stored per-profile and per-book, and are not shared externally.
Math assessment data is collected up to three times per school year during designated testing windows (Fall, Winter, Spring). This data includes:
Teachers in classrooms can view their students’ math assessment results, including per-domain proficiency levels and rush detection indicators.
When a student completes a math or reading assessment, an anonymized data record is stored in our database for the purpose of building empirical percentile norms. This record contains enrolled grade level, assessed level, per-domain scores, whether rushing was detected, and per-item correctness with pre-calibrated difficulty estimates.
This data contains no student names, email addresses, account identifiers, or any personally identifiable information. It cannot be linked back to any individual student. It is used solely to improve the accuracy of percentile rankings and assessment quality over time. The Firestore security rule on this collection permits authenticated writes only and denies all client reads— no student, teacher, or unauthenticated visitor can retrieve raw records.
Potato Class is free for everyone— there are no in-app purchases, no subscriptions, no paid tiers, and no advertising. No payment information of any kind (credit card, bank account, Apple Pay, Google Pay) is ever collected, processed, or accessible to us. We do not use Stripe, Apple In-App Purchase, or any other payment processor at runtime. All Stripe integration code and API secrets have been removed from the application, the backend Worker, and the hosting infrastructure’s secret store.
Potato Class does not use runtime LLM or generative-AI services of any kind in the student-facing product.
This is a structural property of the application, not a policy setting. It can be verified by network inspection on any student device.
We use Firebase Authentication for sign-in (Google, Apple, and Clever) and Firestore for cloud data storage. Firebase is certified under SOC 1, SOC 2, and SOC 3. Data is encrypted in transit and at rest.
We use Cloudflare Workers as a secure proxy for SSO token exchange. The Worker rejects any non-HTTPS request. Cloudflare does not store request content beyond immediate processing.
For districts that use Clever, we accept Clever SSO sign-in and receive only the Clever user ID, district ID, and school ID. Clever is used as an authentication provider only.
The web app is hosted on Vercel for static file serving and CDN. Vercel serves application files and performs no user data processing. No analytics, tracking, or advertising services are used on either platform.
We do not sell, rent, or share personal information with any third party for marketing, advertising, or profiling purposes.
Potato Class is designed for children in grades K through high school. We comply with the Children’s Online Privacy Protection Act (COPPA).
Potato Class is built to meet the data privacy standards required by schools, districts, and families. We comply with or align to the following regulations and frameworks:
For data privacy agreements, compliance documentation, or district onboarding, contact privacy@potatoclass.com.
Self-service deletion:Users can delete all their progress data directly from the app at any time via Settings → Data → “Delete All Progress Data.” This removes all progress, stars, accessories, and assessment data from the active account on both the device and cloud storage (if signed in). Deleted data is retained in a recovery state for 30 days, during which users can restore their progress via Settings → Data → “Restore Progress.” After 30 days, the data is permanently and irreversibly deleted from all systems.
Signed-in users: Educational progress data (including math progress, math assessment history, reading levels, reading assessment history, and reading tool annotations) is retained while the account is active. Anonymized assessment analytics (containing no PII) are retained indefinitely for norm development. Users or parents may also request deletion of all personal data by contacting us. Verified deletion requests are fulfilled within 30 days. Schools may request bulk deletion when students leave the district or when use of Potato Class ends.
School-managed accounts: Students whose accounts are provisioned through a school or district roster (e.g., via Clever) cannot self-delete their data while their school enrollment is active. Data deletion for these students is managed by the school administrator or teacher. This ensures district data integrity and compliance with school data-governance policies. After the school enrollment ends, standard self-service deletion is available.
Anonymous web users: All data is stored locally in the browser and can be cleared by the user at any time by clearing browser data or using the in-app delete option. No server-side data exists to delete for anonymous users.
For students using Potato Class through a school, the school acts as the parent’s agent for consenting to data collection under COPPA. Parents retain all FERPA rights: to inspect and review educational records, request corrections, and request deletion. Contact your child’s school or contact us directly to exercise these rights.
We may update this policy from time to time. Changes will be posted in the app and at potatoclass.com/privacy. Material changes to how we handle children’s data will include prominent notice and any required consent.
If you have questions about this policy or wish to exercise your data rights, contact:
Growing Standard LLC
Email: privacy@potatoclass.com
Website: potatoclass.com