Scholar Current

Privacy Policy

Effective Date: July 1, 2026. Last Updated: July 1, 2026. This policy explains how Scholar Current collects, uses, protects, and shares personal data, student data, class records, and support information.

1. Who We Are And How To Contact Us

Scholar Current provides online math and physics learning tools, a protected textbook, assignment workflows, gradebook features, section-building tools, and account support for students, teachers, homeschool educators, independent learners, and administrators.

For privacy questions, data requests, school requests, parent or guardian questions, or security concerns, contact us at [email protected].

2. Definitions

Personal Data means information that identifies, relates to, describes, or can reasonably be linked to a person or account.
Student Data means Personal Data, class records, assignment activity, notes, submissions, grades, progress, and other information related to a student using Scholar Current for learning.
Education Record means information that may be protected by FERPA or similar student privacy laws when Scholar Current is used by or on behalf of a school, teacher, district, homeschool program, or other educational organization.
School means a school, district, college, university, homeschool program, education organization, or authorized school account using Scholar Current for instruction or administration.
Teacher means an instructor, professor, homeschool educator, tutor, or other authorized educator who creates classes, assignments, rosters, or gradebook records in Scholar Current.
Independent Learner means a user who purchases or receives direct access to Scholar Current outside a teacher-managed or school-managed class.
Account Owner means the person or organization responsible for the account, including a student, teacher, parent/guardian, homeschool educator, school administrator, independent learner, or school purchasing account.

3. Roles And Responsibility

Students Scholar Current processes student account, class, assignment, and progress data so students can use assigned tools and see their own work.

Teachers And Schools When a school or teacher uses Scholar Current for instruction, the school or teacher may control the educational purpose for student records, and Scholar Current acts as a service provider for that purpose.

School Accounts School accounts may manage school-owned purchases, linked teacher accounts, pooled student-seat access, yearly renewals, and designated school academic admin access for continuity or authorized academic oversight.

Independent Learners Independent learners and homeschool users may purchase or receive direct access to learning tools, protected book content, and account support.

Administrators Platform administrators may access data only to operate, support, secure, troubleshoot, audit, or improve the service.

4. Data We Collect

Account data: name, email address, role, account type, organization details, verification status, password security state, MFA/passkey metadata, and session metadata.
Class and roster data: class names, class identifiers, join codes, teacher-student relationships, enrollment records, student display names, student emails, optional school or organization identifiers, and seat capacity information.
Assignment and gradebook data: assignment settings, due dates, late-work rules, student-specific exceptions, submissions, attempt history, scores, teacher review notes, grade summaries, and exported gradebook data.
Practice and book data: practicer progress, selected class context, accessible products/books/courses/ chapters, section access, and book navigation or builder records needed to provide the service.
School access and purchase data: school account roles, school-linked teachers, school-owned purchases, pooled student-seat allocations, class-level product access, yearly term dates, renewal status, and administrative notes needed to manage access.
Support, feedback, and recovery data: support messages, practicer feedback, issue reports, account recovery requests, email verification events, password reset records, and temporary-password issuance records.
Technical and security data: IP-derived request metadata, user agent, logs, audit events, rate-limit state, authentication events, error context, and other security records needed to protect the service.
Payment and purchase data: plan, entitlement, purchase, and authorization records. If a third-party payment processor is used, payment-card details should be handled by that processor rather than stored directly by Scholar Current.

5. Why We Use Data And Legal Bases

Purpose	Examples	Typical Legal Basis
Provide the service	Sign-in, protected book access, practicer access, classes, assignments, gradebook, section builder, and account routing.	Contract, school-authorized educational purpose, legitimate interests, or consent where required.
Support school and teacher workflows	Rosters, join codes, assignment exceptions, temporary-password workflows, gradebook reporting, and class copying.	Educational service provider processing under teacher/school direction; contract; legitimate interests.
Protect accounts and the platform	Session management, MFA, security logs, rate limits, audit logs, fraud prevention, access controls, and incident investigation.	Legitimate interests, legal obligation, contract, and security necessity.
Communicate and provide support	Email verification, password reset, support responses, access help, recovery review, and service notices.	Contract, legitimate interests, consent where required, and legal obligation.
Improve reliability and educational quality	Debugging errors, resolving feedback, improving question banks, improving content, and measuring service health.	Legitimate interests, contract, and de-identified or aggregated analytics where practical.
Comply with law and enforce rights	Responding to lawful requests, enforcing terms, preserving records needed for disputes, and meeting school or regulatory obligations.	Legal obligation, legitimate interests, contract, and vital security interests where applicable.

6. FERPA, State Student Privacy Laws, And Education Records

When Scholar Current is used by a school, district, teacher, or homeschool program to provide instruction, student class, assignment, progress, and gradebook information may be education records or student data. Scholar Current uses that information only to provide, secure, support, and improve the educational service requested by the school, teacher, parent/guardian, or student account holder.

Scholar Current does not sell student education records.
Scholar Current does not use student education records for targeted advertising.
Scholar Current restricts redisclosure of education records except as needed to provide the service, follow the school or teacher's directions, comply with law, or protect the service.
Schools and teachers remain responsible for handling parent or eligible-student inspection, amendment, and consent requests when FERPA applies, and Scholar Current will provide reasonable support for those requests.
Where a school treats Scholar Current as a school official or service provider, Scholar Current should be under the school's direct control for the use and maintenance of education records through the applicable account setup, written terms, or agreement.
School academic admin access, when enabled, is intended for school-authorized academic continuity, oversight, support, legal compliance, or approved data-request handling. School billing or owner accounts should not receive student gradebook access unless they are separately designated for academic access.
Access to school-linked class rosters and gradebooks is role-based and audited, including the school account, class, teacher, access type, and reason metadata when available.
Scholar Current is designed to support compliance with applicable state student privacy laws, including student-data privacy requirements that may apply in states such as California, Colorado, Connecticut, Texas, and other jurisdictions.

7. School And Teacher FERPA Agreement Terms

When a school, district, or classroom teacher uses Scholar Current with students, these FERPA-oriented terms are intended to support a school official or educational service provider relationship where permitted by the school's policies and applicable law.

Agreement Area	Scholar Current Commitment	School Or Teacher Responsibility
Educational purpose	Use student education records only to provide, maintain, secure, support, and improve the educational service requested for the class or account.	Use Scholar Current only for legitimate educational interests and provide any required school notices or approvals before assigning students.
School official/service provider role	Act as a service provider performing an institutional or instructional service for the school or teacher when Scholar Current is used under school direction.	Determine whether Scholar Current meets the school's criteria for a school official with a legitimate educational interest and include the service in applicable notices or agreements when needed.
Direct control	Follow the school's or teacher's documented directions for class, roster, assignment, gradebook, access, correction, export, deletion, or anonymization workflows, subject to security and legal limits.	Maintain control over how student education records are used for the educational purpose and designate who may access class or student records.
School-owned access	Support school-owned purchases, pooled student-seat allocation, class-level book/practicer access, yearly renewal status, and access logs needed to administer the educational service.	Assign school-owned access only to authorized school teachers/classes and keep billing, academic, and administrative roles aligned with school policy.
School academic admin access	Limit school academic admin views of rosters and gradebooks to school-linked classes and maintain audit logs for those views.	Designate academic admins only when the school authorizes them to access education records for legitimate educational interests.
Redisclosure limits	Do not redisclose personally identifiable information from education records except to authorized service providers, as directed by the school or teacher, as required by law, or as needed to protect the service.	Do not share exports, gradebooks, rosters, or student records with unauthorized parties, and tell Scholar Current if a request requires special disclosure handling.
Inspection and amendment requests	Provide reasonable support, exports, corrections, or access review information to help the responsible school or teacher respond to parent or eligible-student requests.	Serve as the primary point of contact for FERPA inspection, explanation, amendment, and consent requests when the school controls the education record.
Multi-student records	Use reasonable access controls and export review workflows to avoid disclosing one student's personally identifiable information to another student's requester.	Review class-level exports or records that may include multiple students before sharing them with a parent, guardian, eligible student, or third party.

These terms are operational privacy terms, not a substitute for a signed district data privacy agreement, data processing agreement, or legal review where one is required.

8. Children, Students, And Consent

Scholar Current is an educational service. Student accounts may be created or invited by teachers, schools, homeschool educators, parents/guardians, or students using a teacher-provided class code. When student users are minors, the responsible school, teacher, homeschool educator, parent, or guardian should provide any required notices and obtain any required permissions before using the service with that student.

If we learn that a child under 13 has provided personal information without the required school, teacher, parent, or guardian authorization, we will take reasonable steps to review the account and delete, disable, or obtain appropriate authorization for the information as required.

9. Student Ownership Of Work

Students retain ownership of original work they submit through Scholar Current, including original written responses, notes, uploaded or typed answers, and similar student-created content. Scholar Current receives only the limited rights necessary to store, display, grade, process, secure, support, and transmit that work to provide the educational service.

10. Artificial Intelligence And Student Submissions

Scholar Current does not use student submissions, student notes, student grades, or student education records to train public artificial intelligence models. If Scholar Current later adds AI-assisted grading, tutoring, feedback, or authoring features, this policy will be updated to describe how those features work and what choices schools or users have.

11. Cookies And Similar Technologies

Scholar Current uses only the cookies and similar technologies needed to provide, secure, and operate the service unless additional analytics or optional tools are disclosed.

Essential cookies support sign-in, account routing, session security, product access, and fraud or abuse prevention.
Login session cookies keep users signed in across protected pages and help the API identify the signed-in account securely.
Analytics cookies are not currently used for advertising or cross-site tracking. If analytics cookies are added later, they will be disclosed and configured consistently with applicable law and school agreements.

12. How We Share Data

We share personal data only when needed for the purposes described in this policy.

With teachers, students, parents/guardians, homeschool educators, or administrators who are authorized to access the relevant class, account, assignment, or support information.
With service providers that host, secure, deliver, email, store, process payments, troubleshoot, or support Scholar Current.
With schools or organizations that use Scholar Current for educational services.
With designated school academic admins for school-linked class rosters or gradebooks only when the school has authorized that access and the access is logged.
When required by law, legal process, school obligations, security investigation, or to protect the rights and safety of users or the platform.
In connection with a business transfer, merger, financing, reorganization, or similar event, subject to appropriate confidentiality and student-data protections.

Vendor	Purpose
Cloudflare	DNS, CDN, frontend hosting, traffic routing, security, and access protection.
Render	Application hosting, backend API hosting, and managed PostgreSQL database hosting.
PostgreSQL database provider	Database storage for accounts, classes, assignments, notes, submissions, gradebook records, access records, and audit records.
Resend	Transactional email, including email verification, password reset, account notices, and class/student access messages.
Stripe	Payment processing, checkout sessions, purchase records, renewals, and related billing workflows.
GitHub	Source code hosting, version control, deployment workflows, and operational change history.

See the Scholar Current Vendor And Subprocessor Inventory for a fuller operational list and status notes.

13. Retention, Account Deletion, And Anonymization

We keep data only as long as reasonably needed to provide the service, support schools and users, comply with legal obligations, resolve disputes, secure the platform, and maintain backups. Retention periods vary by data type.

Account and entitlement records are kept while the account is active and for a reasonable period after closure for security, support, accounting, and legal purposes.
Class, assignment, submission, progress, and gradebook records are kept while needed by the teacher, school, homeschool educator, student, or account holder, unless deletion or export is requested and permitted.
School purchase, pooled-seat, class-access, and yearly renewal records are kept while needed for billing, access continuity, support, auditability, and dispute resolution.
Security logs, audit records, rate-limit records, and session records are kept for a limited security and troubleshooting period unless needed for investigation.
Password reset, email verification, and temporary-password artifacts should expire or be deleted when no longer needed.
Backups may retain data for a limited backup-retention period before being overwritten or deleted.

Upon verified account deletion, personal information will be removed or anonymized except where retention is required for legal obligations, educational record responsibilities, security, fraud prevention, accounting, dispute resolution, auditability, or backup recovery.

A formal retention schedule and admin retention cleanup workflow are maintained separately for operational cleanup. Education-record deletion or anonymization requests should be reviewed through the privacy request workflow before class, assignment, gradebook, or account records are modified.

14. Security Measures And Encryption

Scholar Current uses administrative, technical, and organizational safeguards designed to protect personal data and student records. These safeguards may include role-based access controls, entitlement checks, multi-factor options, session controls, audit logging, hosted database controls, backup controls, rate limits, and security review of sensitive workflows.

Production browser and API traffic is intended to be protected with HTTPS using modern TLS, such as TLS 1.2 or TLS 1.3 where supported by the hosting and browser environment.
Passwords are not stored in plaintext. Current application password storage uses salted scrypt password hashes.
Session tokens are hashed before database storage where supported by the current application schema.
Database encryption at rest, backup encryption, and storage encryption depend on the configured hosting and database providers and are used where supported by those providers and plans.

No online service can guarantee perfect security. If you believe an account, class, student record, or system has been accessed improperly, contact [email protected] promptly.

15. Data Breach Notification

If Scholar Current becomes aware of unauthorized access to personal information, Student Data, or Education Records, we will investigate promptly, take reasonable steps to contain and remediate the incident, and notify affected schools, users, parents/guardians, regulators, or other parties as required by applicable law, school agreements, and contractual obligations.

16. Accessibility

Scholar Current strives to conform to WCAG 2.2 AA and to provide learning tools that are usable by students, teachers, and administrators with disabilities. Accessibility issues can be reported to [email protected].

17. International Transfers

Scholar Current is operated primarily from the United States. If users access the service from outside the United States, their personal data may be processed in the United States or other locations where our service providers operate. Where GDPR or similar laws apply, transfers should rely on an available lawful transfer mechanism, such as adequacy decisions, standard contractual clauses, contractual necessity, or another legally recognized safeguard.

18. Your Privacy Rights

Depending on your location, role, and relationship to a school or teacher, you may have rights to request access, correction, export, deletion, restriction, objection, withdrawal of consent, or information about how your data is used. Parents, guardians, schools, and eligible students may also have rights related to student education records.

To make a request, use the Scholar Current data request form or email [email protected]. Include the account email, your role, the class or organization involved if any, and the request you want us to review.

Data requests are sent to an admin review queue. We verify identity and authority before disclosing, correcting, deleting, or anonymizing records.

19. Complaints And Questions

If you have a privacy concern, please contact us first at [email protected] so we can review and respond. If GDPR applies to you, you may also have the right to contact your local data protection authority. If FERPA applies, schools generally remain the first point of contact for education-record inspection or amendment requests.

20. Changes To This Policy

We may update this policy as Scholar Current adds features, vendors, legal terms, or compliance workflows. When changes are material, we will update the effective date and provide additional notice where required.