School and District Privacy Policy

Last Updated: August 20, 2026

ZillyPlanet is designed to give schools and educators a secure, privacy-conscious way to provide personalized learning experiences to students in grades 2–8.

This School & District Privacy Notice explains how ZillyPlanet, Inc. ("ZillyPlanet," "we," "us," or "our") collects, uses, protects, retains, and deletes information when ZillyPlanet is provided by a school, school district, charter school, private school, school board, educational organization, teacher, tutor, or similar organization ("School").

This notice applies to school-managed use of ZillyPlanet. Family accounts created independently by a parent or guardian are governed by our general Privacy Policy and Children's Privacy Notice.

A separate Data Privacy Agreement, Student Data Privacy Agreement, National Data Privacy Agreement, purchase agreement, or other written agreement may apply to a School's use of ZillyPlanet. If that agreement provides stronger or different requirements, the applicable agreement controls.

1. Our Approach to Student Privacy

Children should be able to learn without their personal information becoming a product.

For school-managed accounts:

ZillyPlanet does not sell Student Data.
ZillyPlanet does not use Student Data for targeted advertising.
ZillyPlanet does not create advertising profiles from Student Data.
ZillyPlanet does not require students to interact with advertisers.
ZillyPlanet does not permit third parties to use Student Data for their own advertising purposes.
ZillyPlanet limits collection to information needed to provide, personalize, support, secure, and administer the educational Service.
Schools retain control over Student Data provided through school-managed accounts.
ZillyPlanet does not claim ownership of Student Data.

Student privacy protections apply whether a School is using ZillyPlanet through a free pilot, paid subscription, license, or other authorized program.

2. What We Mean by Student Data

"Student Data" means personal information, education records, learning information, account information, or other information associated with an identifiable student that ZillyPlanet receives or generates through a school-managed account.

Depending on the School's configuration and the features being used, Student Data may include:

Account and School Information

Student name or school-assigned identifier
Username or internal ZillyPlanet identifier
Grade level
School
Class or course
Teacher
District or school-board affiliation
Year of birth or age-related information when needed for age-appropriate experiences
Authentication information provided through an approved login or single sign-on system

Learning Information

Standards and skills assigned
Learning activities completed
Questions presented
Student responses
Correct and incorrect attempts
Hints or instructional support used
Progress and mastery information
Difficulty or learning-level settings
Learning pathways
Student-selected interests used to personalize learning
Rewards, achievements, or progress within the Service
Time and activity associated with educational sessions

AI-Supported Learning Information

When a student uses an AI-supported feature, ZillyPlanet may process:

The educational question or activity
Student responses
Relevant learning context
Instructional prompts
Generated hints, explanations, feedback, or learning content
Information needed to maintain the context of the learning interaction

Technical and Security Information

ZillyPlanet may automatically process limited technical information needed to operate and protect the Service, such as:

IP address
Browser type
Device type
Operating system
Session identifiers
Login activity
Application performance information
Security and diagnostic logs

Technical information associated with school-managed student use is not used to target advertising to students.

3. Information ZillyPlanet Does Not Need for Core School Use

ZillyPlanet is designed around data minimization.

The core school learning experience does not require Schools to provide:

Social Security numbers or Social Insurance Numbers
Home addresses
Student telephone numbers
Driver's license or government identification numbers
Financial information
Medical records
Health insurance information
Individualized Education Program documents
Disability or medical diagnoses
Biometric identifiers
Facial recognition data
Voiceprints
Fingerprints
Precise geolocation
Student social-media accounts

Schools should not upload this information to ZillyPlanet unless ZillyPlanet has expressly requested it for an authorized feature and the School has determined that providing it is lawful and appropriate.

ZillyPlanet may support accessibility, learning preferences, pacing, and personalized instructional experiences without requiring a School to disclose a student's medical or disability diagnosis.

4. How We Use Student Data

ZillyPlanet processes Student Data to provide the educational services authorized by the School.

This may include:

Creating and administering student accounts.
Providing assigned learning activities.
Personalizing instructional content.
Adjusting learning experiences based on student performance.
Providing hints, feedback, explanations, and instructional support.
Tracking standards, skills, progress, and mastery.
Providing educators with student progress information.
Supporting classroom and school administration.
Maintaining account and roster information.
Authenticating users.
Providing technical support.
Detecting and preventing unauthorized access, fraud, abuse, or security threats.
Troubleshooting and maintaining the Service.
Meeting contractual and legal obligations.
Maintaining the safety, reliability, and educational quality of ZillyPlanet.

ZillyPlanet does not use identifiable Student Data collected through a School for unrelated commercial purposes.

5. Artificial Intelligence and Student Data

Artificial intelligence is part of ZillyPlanet's personalized learning experience.

AI-supported features may help ZillyPlanet:

Select or adapt instructional activities.
Generate age-appropriate learning content.
Provide hints and explanations.
Personalize examples based on student interests.
Support learning pathways.
Evaluate or classify educational content.
Support student understanding.
Assist educators with learning insights.

ZillyPlanet limits the information provided to AI systems to information needed for the educational function being performed.

Identifiable Student Data from school-managed accounts is not used to train publicly available or general-purpose third-party AI models for the provider's independent purposes.

ZillyPlanet requires third-party technology providers processing Student Data on its behalf to use that information only for authorized services and subject to applicable contractual and privacy requirements.

ZillyPlanet may use de-identified or aggregated information to assess system quality, improve educational experiences, identify technical issues, measure performance, or improve internal systems where permitted by the applicable School agreement and law.

ZillyPlanet will not attempt to re-identify information that has been de-identified for these purposes.

AI-generated content can contain errors. ZillyPlanet uses technical, instructional, safety, and quality controls designed to reduce inaccurate or inappropriate educational outputs.

Schools and educators remain responsible for educational decisions that require professional judgment.

6. No Sale of Student Data

ZillyPlanet does not sell Student Data.

ZillyPlanet does not exchange Student Data for monetary payment or another commercial benefit for advertising or unrelated commercial purposes.

Student Data is not treated as a commercial asset that may be sold to advertisers, data brokers, or marketing organizations.

If ownership or control of ZillyPlanet changes through a merger, acquisition, financing, corporate restructuring, or sale of assets, Student Data will remain subject to applicable School agreements, privacy obligations, and law.

7. No Targeted Advertising

ZillyPlanet does not use Student Data from school-managed accounts to deliver targeted advertising to students.

ZillyPlanet does not create student advertising profiles based on:

Learning performance
Interests
Academic ability
Student behavior
Question responses
Standards mastery
AI interactions
School activity

The school-managed student experience is intended for education, not advertising.

8. FERPA and U.S. School Use

For U.S. Schools subject to the Family Educational Rights and Privacy Act ("FERPA"), ZillyPlanet is designed to support the School's FERPA responsibilities when ZillyPlanet receives personally identifiable information from education records.

Where applicable, ZillyPlanet may perform services as a School Official or other authorized service provider under the School's direction and applicable agreement.

In that role, ZillyPlanet:

Performs an educational or institutional service authorized by the School.
Uses education-record information only for the purpose for which it was provided.
Acts under the School's control regarding the use and maintenance of applicable education-record information.
Restricts unauthorized use and redisclosure.
Provides Schools with mechanisms to request access, correction, export, return, or deletion where required.
Uses applicable contractual and security measures to protect Student Data.

The School remains responsible for determining the legal basis under which it provides Student Data to ZillyPlanet.

ZillyPlanet will cooperate with Schools in responding to requests involving education records processed through the Service.

9. COPPA and Students Under 13

ZillyPlanet is designed for students who may be under 13 and recognizes the requirements of the Children's Online Privacy Protection Act ("COPPA").

When a U.S. School authorizes ZillyPlanet for an educational purpose and is legally permitted to act on behalf of a parent or guardian, ZillyPlanet may rely on the School's authorization for the collection and use of information necessary to provide that educational service.

Information collected under School authorization is used for the School-authorized educational purpose and not for unrelated commercial purposes.

ZillyPlanet provides Schools with information about its collection, use, disclosure, retention, and deletion practices so Schools can evaluate the Service and communicate with families when required.

When ZillyPlanet is used outside a school-managed environment, separate parental-consent requirements may apply.

10. U.S. State Student Privacy Laws

Schools may be subject to student privacy requirements in addition to FERPA and COPPA.

ZillyPlanet works with Schools to address applicable state requirements through mechanisms that may include:

Student Data Privacy Agreements
National Data Privacy Agreement terms
State-specific contractual exhibits
School or district privacy agreements
Security questionnaires
Data-retention requirements
Breach-notification requirements
Parent notice or consent requirements
State-specific restrictions on Student Data use

A School's applicable signed privacy agreement will control where its requirements differ from this notice.

11. Canadian School and School-Board Use

Canadian Schools, school boards, school divisions, and other public educational organizations may be subject to federal, provincial, or territorial privacy requirements.

ZillyPlanet supports School privacy reviews by providing information about:

Personal information collected
Purpose of collection
Data flows
Storage and processing locations
Service providers and subprocessors
Access controls
Security practices
Retention
Deletion
AI processing
Cross-border processing
Incident response

Canadian Schools may request this information for a Privacy Impact Assessment or other vendor assessment.

ZillyPlanet recognizes that privacy requirements differ across Canadian provinces and territories. A School's applicable contract or privacy agreement may include jurisdiction-specific requirements concerning data storage, access, processing, retention, deletion, or transfer.

Where a Canadian School requires additional contractual safeguards, those safeguards may be addressed through the School's agreement with ZillyPlanet.

12. Schools Control School-Managed Student Data

Schools retain control over Student Data submitted or generated through their school-managed accounts, subject to applicable law.

Depending on account configuration and contractual requirements, authorized School administrators may be able to:

Create accounts.
Import or manage rosters.
Assign students to classes.
Manage educator access.
Review student progress.
Correct account information.
Export information.
Disable accounts.
Request deletion of Student Data.

ZillyPlanet will respond to authorized School requests concerning Student Data according to applicable law and the School's agreement.

A parent seeking access to education records maintained through a school-managed ZillyPlanet account may be directed to the School so the School can manage the request under its own legal obligations.

13. Parents and Guardians

Parents and guardians maintain the rights provided to them under applicable law.

When a child's ZillyPlanet account is managed by a School, some privacy requests may need to be submitted through the School.

This helps preserve the School's control over its education records and allows the School to verify the identity and authority of the person making the request.

Where ZillyPlanet is legally responsible for responding directly, we will process the request according to applicable law.

Questions can be sent to:

support@zillyplanet.com

14. Service Providers and Subprocessors

ZillyPlanet uses service providers to operate parts of the Service.

These providers may support functions such as:

Cloud infrastructure and hosting
Authentication
Database services
Security
Artificial intelligence
Email and transactional communications
Application monitoring
Customer support
Payment processing for adult purchasers

A service provider receiving Student Data on ZillyPlanet's behalf is permitted to process that information only for authorized services and subject to applicable privacy, security, and contractual requirements.

Schools may request ZillyPlanet's current subprocessor information as part of a privacy, security, procurement, or contracting review.

ZillyPlanet will not authorize a subprocessor to use Student Data for its own targeted advertising or unrelated commercial purposes.

15. Security

ZillyPlanet uses administrative, technical, and organizational safeguards designed to protect Student Data from unauthorized access, use, alteration, disclosure, or destruction.

Our security program addresses areas such as:

Access management
Authentication
Account permissions
Data protection
Secure infrastructure
Application security
Logging and monitoring
Vulnerability management
Incident response
Backup and recovery
Service-provider oversight

Access to Student Data is limited to authorized personnel and service providers with a legitimate need to perform approved responsibilities.

No online system can guarantee absolute security. ZillyPlanet reviews and updates its security practices as the Service and associated risks change.

Schools may request additional security information during vendor review.

16. Security Incidents

ZillyPlanet maintains procedures for identifying, investigating, containing, and responding to suspected security incidents.

If ZillyPlanet confirms an incident affecting Student Data, ZillyPlanet will notify the affected School according to applicable law and contractual requirements.

Where applicable, ZillyPlanet will provide available information that can help the School understand:

What occurred
When the incident occurred or was discovered
The categories of information involved
The users potentially affected
Actions taken to contain or address the incident
Steps available to reduce potential harm

Specific notification timelines may be established through a School's Data Privacy Agreement or other written contract.

17. Data Retention

ZillyPlanet does not intend to retain identifiable Student Data indefinitely.

Student Data is retained only for the period needed to:

Provide the School-authorized Service.
Maintain the applicable account.
Meet contractual requirements.
Protect the security and integrity of the Service.
Meet applicable legal obligations.

A School's written agreement may establish a specific retention period or deletion schedule.

When Student Data is no longer required, ZillyPlanet will delete or de-identify it according to applicable contractual and legal requirements.

Backup copies may remain for a limited period as part of normal backup and disaster-recovery systems before being overwritten or deleted.

18. End of a School Relationship

When a School's pilot, subscription, or agreement ends, the School may request the return, export, or deletion of Student Data according to the applicable agreement.

ZillyPlanet will delete Student Data according to the contractual retention and deletion requirements established with the School.

ZillyPlanet will not retain identifiable Student Data merely to create advertising profiles, market directly to former students, or sell the information.

Any information retained to meet a legal obligation will remain protected and will not be used for another purpose.

19. De-Identified and Aggregated Information

ZillyPlanet may create aggregated or de-identified information that cannot reasonably be used to identify an individual student.

This information may be used to:

Measure product performance.
Identify technical issues.
Assess educational-content quality.
Understand broad usage patterns.
Conduct internal research.
Improve educational experiences.
Improve safety and system reliability.

ZillyPlanet will maintain measures designed to prevent de-identified Student Data from being associated again with an identifiable student.

Where a School agreement restricts the use of de-identified or aggregated information further, that agreement will control.

20. Changes to This Notice

ZillyPlanet may update this School & District Privacy Notice as our Service, technology, legal requirements, or school privacy practices change.

Material changes affecting the handling of Student Data will be communicated to affected School customers as required by applicable agreements or law.

A material change will not authorize ZillyPlanet to use previously collected Student Data for a new unrelated commercial purpose.

21. School Privacy Reviews

We welcome privacy and security reviews from Schools evaluating ZillyPlanet.

Schools may contact us to request information related to:

Student privacy
FERPA
COPPA
State privacy requirements
Canadian privacy requirements
Data Privacy Agreements
National Data Privacy Agreements
Security questionnaires
AI data processing
Subprocessors
Data retention and deletion
Accessibility
Procurement

Contact:

ZillyPlanet, Inc.
151 Crandon Blvd, Unit 928
Key Biscayne, FL 33149
United States

support@zillyplanet.com

22. Contact Us

Questions about this notice or ZillyPlanet's handling of School Data can be sent to:

ZillyPlanet, Inc.
151 Crandon Blvd, Unit 928
Key Biscayne, FL 33149
United States

support@zillyplanet.com

No ads. No student data sold. School-controlled. Child-first by design.