School Authorization COPPA Notice
This notice is published by Plio Academy, Inc. for distribution by schools and districts to parents and guardians of students enrolled through a district rostering agreement.
Last updated: June 2026
Who We Are
Plio Academy, Inc. is a nonprofit operator of the Plio learning platform (learn.plio.academy), which provides free AI literacy and technology education to students ages 5–17. This notice explains what personal information we collect from students when a school or district uses our platform under a Data Privacy Agreement (DPA), how we use it, and the rights the school has to review or request deletion of that information.
This notice is provided consistent with the school-authorization path under the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq., and the FTC's implementing rule at 16 C.F.R. Part 312.
1. What We Collect From Students — And How We Use It
When a school or district provisions student accounts through our rostering system (e.g., via Clever), we collect the following categories of personal information on behalf of the school, for educational purposes only:
| Category | What it is | How we use it |
|---|---|---|
| Display name | The student's first name only, from the district's roster. No surname is stored. | To personalize the learning experience (e.g., "Hi, Alex!"). Never used in communications outside the platform. |
| Grade band | A coarse grouping (e.g., K–2, 3–5, 6–8, 9–12) derived from roster data. | To recommend age-appropriate learning content (Explorer / Builder / Innovator tiers). |
| Learning activity data | Lesson completions, quiz responses, placement quiz results, time-on-task, skill mastery indicators. | To track progress, adapt lesson recommendations, and generate district-level aggregate reports for the school. |
| Account identifiers | Internal platform UUIDs and, where applicable, the student's Clever ID. | To reconcile roster updates and maintain account continuity. Not shared with third parties for commercial purposes. |
| AI-tutor chat transcripts | The text of each student interaction with Lio, our AI learning companion. | Sent to Anthropic, PBC, on a per-request basis so Lio can generate a response. Retained by Plio for up to 30 days for safety review, then permanently deleted. Anthropic does not use API data to train its models. |
| Lio learning-memory | Automated summaries of learning patterns (e.g., preferred pace, recently mastered topics). | Used to personalize future Lio interactions. Contains no personally identifiable information by policy; subject to automated PII-scrubbing before storage. |
We do NOT collect:
Email addresses from students, phone numbers, street addresses, photographs, Social Security numbers, government-issued identifiers, biometric data, or geolocation data from school-rostered students.
We do NOT use school-student data for:
Behavioral advertising, interest-based targeting, commercial profiling, marketing emails, or any purpose outside the school's educational use case.
2. The School's Rights to Review and Request Deletion
The school (and through the school, parents and eligible students) has the following rights with respect to student data held by Plio:
Right to review
The school may request a complete export of all student data associated with its students at any time by contacting compliance@plio.academy. We will deliver the export in a machine-readable format (CSV or JSON) within 15 business days at no charge.
Right to correct
If the school believes any student data is inaccurate, the school may request a correction by contacting compliance@plio.academy. We will correct or delete inaccurate data within 15 business days.
Right to delete
The school may request deletion of a specific student's data at any time (for example, if a parent withdraws consent). We will delete the student's account and all associated data within 30 days. At the end of the school's agreement with Plio, we will delete all remaining student data within 30 days of the agreement's expiration.
FERPA inspection requests
For school-rostered students, parent requests for FERPA record inspection are routed through the school. The school submits a written inspection request to compliance@plio.academy; we fulfill it within 30 days.
How to submit requests
All data requests should be submitted in writing to: compliance@plio.academy
3. No Commercial Use — No Ads — No Sale
Plio Academy is a nonprofit. We make the following commitments with respect to school-student data:
- ✓We do not sell student data to any third party for any purpose.
- ✓We do not use student data for advertising of any kind — not on-platform, not off-platform, not targeted, not contextual.
- ✓We do not build commercial profiles of students based on their platform activity.
- ✓We do not share student data with data brokers, marketing companies, or any third party for commercial purposes.
- ✓We do not use student data to amass behavioral profiles for any purpose other than delivering the educational service the school has requested.
Student data is used solely to provide the Plio learning platform for the benefit of the school's students.
Contact
For questions about this notice or to submit a data request:
Plio Academy, Inc. — Attn: Compliancecompliance@plio.academy