1. Our Commitment to Student Privacy
Pitch Rise is committed to protecting student privacy and complying with all applicable education privacy laws, including FERPA, COPPA, and state student privacy laws.
We will NEVER sell student data, use it for advertising, or share it with third parties for non-educational purposes.
2. Compliance with Education Laws
2.1 COPPA (Children's Online Privacy Protection Act)
For students under 13:
- We obtain verifiable parental consent before collecting personal information
 - Parents can review, delete, or refuse further collection of their child's data
 - We collect only the minimum information necessary for the educational service
 - We maintain reasonable security procedures to protect children's information
 
2.2 FERPA (Family Educational Rights and Privacy Act)
When used in educational settings:
- We act as a "school official" with legitimate educational interests
 - We use student data only for educational purposes
 - We do not re-disclose student data without consent
 - Schools maintain control over their students' data
 
3. Student Data Collection
3.1 What We Collect
Account Information:
- Email address (or parent's email for under-13)
 - Display name or chosen nickname
 - Birth date (for age verification only)
 - Region/location (optional, for regional leaderboards)
 
Learning Data:
- Problem attempts and correctness
 - Skill progression and difficulty levels
 - Time spent on activities
 - Achievement and progress metrics
 
3.2 What We DON'T Collect
- Social Security numbers
 - Home addresses or phone numbers (unless voluntarily provided)
 - Biometric data
 - Political or religious beliefs
 - Browsing history outside the Platform
 
4. Age-Appropriate Privacy Protections
4.1 Students Under 13
- Parental consent required for account creation
 - No public leaderboard participation without consent
 - Enhanced privacy settings automatically enabled
 - Character avatars and nicknames instead of photos/real names
 
4.2 Students 13-17
- Parental awareness recommended (not required by law)
 - Character avatars and nicknames required for leaderboards
 - Cannot use real photos in public-facing features
 - Enhanced privacy settings available
 
4.3 Students 18+
- Full account control
 - Option to use real photo and name on leaderboards
 - Can choose privacy level preferences
 - Still protected from data sale or misuse
 
5. How We Use Student Data
Student data is used ONLY for educational purposes:
- Providing adaptive learning experiences
 - Tracking progress and generating reports
 - Improving educational content and algorithms
 - Providing feedback to students and educators
 - Maintaining Platform security and functionality
 
We will NEVER:
- Sell or rent student data
 - Use student data for advertising
 - Create marketing profiles of students
 - Share data with third parties for non-educational purposes
 
6. Parental Rights
6.1 Access and Review
Parents and guardians have the right to:
- Access their child's account and learning data
 - Review all information collected about their child
 - Request corrections to inaccurate information
 - Download a copy of their child's data
 
6.2 Control and Deletion
Parents can:
- Request deletion of their child's account and data
 - Refuse further collection of information
 - Modify privacy settings for their child's account
 - Withdraw consent at any time
 
To exercise parental rights:
Email: parents@ludwitt.com
Include: Student name, parent name, account email, and specific request
7. Data Security for Students
We implement enhanced security measures for student data:
- Encryption of all data in transit and at rest
 - Regular security audits and penetration testing
 - Access controls limiting who can view student data
 - Automatic session timeouts
 - Secure password requirements
 - Monitoring for suspicious activity
 
8. Data Retention for Students
We retain student data only as long as necessary:
- Active students: Data retained while account is active
 - Account deletion: Data deleted within 90 days of request
 - Inactive accounts: Data may be anonymized or deleted after 3 years of inactivity
 - Aggregated analytics: May be retained indefinitely (fully anonymized)
 
9. Third-Party Services
We use limited third-party services, all with strong privacy commitments:
Firebase (Google Cloud): Data hosting and authentication
AI Providers: Problem generation (no student PII sent)
All service providers sign Data Processing Agreements ensuring COPPA and FERPA compliance
10. Contact Us About Student Privacy
Student Privacy Officer: privacy@ludwitt.com
Parent Inquiries: parents@ludwitt.com
School/District Inquiries: schools@ludwitt.com
Data Deletion Requests: delete@ludwitt.com