Student Data Practices & District Agreements
This page discloses the categories of student information Plio Academy collects, how it is used and shared, our data retention practices, and a list of executed district Data Privacy Agreements — consistent with Illinois SOPPA § 15(3) and applicable state student-privacy transparency requirements.
Last updated: June 2026
Categories of Student Information We Collect
The following categories of “covered information” (as defined under IL SOPPA, 105 ILCS 85) may be collected from or about students enrolled through a district rostering agreement:
Display name (first name only)
First name as provided by the district's roster system. No surname is stored.
Grade band
Coarse grade grouping (e.g., K–2, 3–5, 6–8, 9–12) for content placement.
Learning activity data
Lesson completions, quiz responses, placement results, time-on-task, and mastery indicators.
Account identifiers
Internal platform UUIDs and, where applicable, the student's Clever ID for roster reconciliation.
AI-tutor chat transcripts
Text of student interactions with the Lio AI tutor. Transmitted to Anthropic, PBC, for response generation; retained by Plio for 30 days then deleted.
Lio learning-memory fields
Automated behavioral summaries (learning pace, mastered topics). No PII by policy; subject to automated scrubbing.
Roster sync metadata
Timestamps, status codes, and record counts from Clever roster sync events. No additional student PII.
We do not collect: email addresses from students, phone numbers, street addresses, photographs, Social Security numbers, government-issued identifiers, biometric data, or geolocation data.
Recipients of Student Information
Student data is shared with the following categories of recipients under written agreements that prohibit commercial use:
| Recipient | Purpose | Data shared |
|---|---|---|
| Neon, Inc. (database hosting) | Primary database storage | All student data at rest |
| Vercel, Inc. (application hosting) | Application hosting and CDN | Request data in transit; session tokens |
| Anthropic, PBC (AI tutor) | AI tutor response generation | AI-tutor chat transcripts (transient, per request) |
| The enrolling school/district | Aggregate progress reporting | Aggregate lesson completion and mastery data (no individual records in dashboard) |
We do not share student data with data brokers, marketing companies, or any third party for commercial purposes. Full subprocessor list is available in the DPA template.
Data Retention Summary
A complete written retention policy is maintained at this page and in the compliance inbox. Key periods:
| Category | Retention period |
|---|---|
| School-rostered student profiles | Duration of DPA + 30 days after expiry |
| AI-tutor chat transcripts | 30 days (rolling deletion) |
| Lio learning-memory fields | Duration of DPA + 30 days after expiry |
| Consumer profiles (24-month inactivity) | Deleted after 24 consecutive months of inactivity |
| Consent records | Duration of relationship + 3 years |
| FERPA audit log entries | 12 months |
Executed District Agreements
Consistent with Illinois SOPPA § 15(3), Plio Academy maintains this public list of executed district Data Privacy Agreements. Each agreement is added within 30 days of execution.
No executed district agreements yet — Plio Academy is currently in pre-launch with districts. First agreements will be posted here when executed.
Districts interested in a Data Privacy Agreement: compliance@plio.academy or download the DPA template.