Here's exactly what information GradeGrow collects, why we collect it, and how families and schools stay in control of it.
GradeGrow is a learning app owned and operated by SIKADIRA LLC ("GradeGrow", "we", "us"), a Maryland limited liability company. This policy explains how we handle personal information in the GradeGrow apps for iOS and Android, on gradegrow.com, and in the services behind them (the "Service").
This policy applies to everyone who uses GradeGrow, in every country: parents, students, tutors, teachers and schools. Where a school uses GradeGrow, Section 5 explains the additional commitments we make to that school, and any signed data privacy agreement with the school takes priority over this policy if the two differ.
This policy covers the app, the website and everything behind them. Schools get extra protections, explained in Section 5.
Account information: name, email address, password (stored only in hashed form) and role (parent, student, teacher, tutor or school administrator). For schools: school name, classes, and the teachers and students the school adds.
Student learning information: grade level, country, state or region, school board or curriculum, subjects, learning plans and timetables, assignments, practice answers, scores, progress history, rewards and settings.
Content you choose to provide: photos of schoolwork you scan or upload, text you type, and text produced from voice input. We store this so you can review feedback later.
Technical information: device type, operating system, app version, IP address, a push-notification token, in-app events (such as screens viewed and features used) and crash diagnostics.
We do not collect: precise location, contacts, advertising identifiers, payment card details, or biometric data. We do not ask for more information than an activity needs.
We collect the account and learning info needed to run the app, plus basic technical data. No location, no contacts, no ad IDs.
We use personal information only to provide, secure, support and improve the educational Service, including to: create and manage accounts; generate learning plans, practice and feedback; show progress to the student, their parent, and (for school accounts) their teachers and school; send service notifications and emails you have asked for; prevent fraud and abuse; diagnose problems; and meet legal obligations.
We may use de-identified, aggregated information (which cannot reasonably identify any person) to understand how features are used and to improve the Service.
Your info is used to run and improve the learning app, and for nothing else.
GradeGrow does not show advertising in the app, and does not have advertising partners.
We do not sell personal information, and we do not rent or trade it.
We do not use student information for targeted advertising, and we do not build profiles of students for any purpose other than supporting their learning in GradeGrow.
We do not use student information to market other products to students.
We do not allow our AI provider to use student information to train its AI models (see Section 7).
We share student information only as described in Section 10, and only for the purposes in Section 3.
These commitments apply to every student, whether they use GradeGrow through a family, tutor or school account, and wherever they live.
No ads. No selling data. No ad profiles. No using kids' work to train AI. Ever.
When a school, district or teacher uses GradeGrow, we process student records on the school's behalf and under its direct control. In the United States, we act as a "school official" with a legitimate educational interest under the Family Educational Rights and Privacy Act (FERPA). In the UK, EU and other places with similar laws, we act as the school's data processor.
The school owns and controls student data. Student records created through a school account belong to the school. We use them only to provide the Service to that school and its students, and we do not re-disclose them except as the school directs or as the law requires.
Access within the school: teachers and administrators at the school can see the progress of students in their classes. Students in one school cannot see another student's data.
Parent requests: parents of students using GradeGrow through a school may review or correct their child's records by contacting the school, and we will help the school respond. Parents may also contact us directly and we will coordinate with the school.
End of service: when a school stops using GradeGrow, or asks us to delete its data, we will delete or return the school's student data within 60 days, unless the school asks us to keep it or the law requires us to keep limited records. We confirm deletion in writing on request.
Data privacy agreements: we will sign a data privacy or data processing agreement with any school, district or education authority that needs one. Contact support@gradegrow.com to request one.
For schools, the school owns the student data, we only use it to serve that school, and we delete it within 60 days when they leave.
Many GradeGrow students are children. We comply with the Children's Online Privacy Protection Act (COPPA) in the United States and with the children's privacy laws of the other countries where GradeGrow is available.
Family accounts: a parent or guardian creates the account, adds each child, and gives consent (including a separate consent for AI processing) before a child uses the Service. Children do not create their own accounts.
School accounts: where a school adds students for an educational purpose, the school may give consent on behalf of parents as COPPA allows. Information collected this way is used only for the school's educational purpose.
We collect from children only the information described in Section 2 that the activity needs, and we do not condition a child's participation on giving more information than is reasonably necessary.
Parents and guardians may at any time review their child's information, ask us to correct or delete it, and refuse further collection, by using Settings ("Download My Data" and "Delete Account") or by emailing support@gradegrow.com.
A parent or school must say yes before a child uses GradeGrow, and parents can see, fix or delete their child's info any time.
To create learning plans, practice questions and feedback, GradeGrow sends requests to Google's Gemini API. Requests contain the learning context (such as grade, country, subject and topic) and, where you use a feature like scanning homework, the work you provide.
We do not attach a student's name, email address or account ID to AI requests. Because a scanned page may contain whatever is written on it, we encourage students not to photograph pages that show personal details.
Google processes these requests under its paid-service terms for the Gemini API, which do not permit Google to use them to train or improve its AI models. GradeGrow does not train AI models on student data either.
AI-generated content can contain mistakes. GradeGrow checks generated answers automatically, but students and parents should treat AI feedback as guidance, not a final grade.
Learning requests go to Google's Gemini AI without names or IDs attached, and Google isn't allowed to train on them.
GradeGrow uses the camera only when you choose to scan schoolwork, and the microphone only when you choose a voice feature. They are never used in the background, and you can turn off access at any time in your device Settings.
Voice input is converted to text by your device's built-in speech service (provided by Google on Android and Apple on iOS; on Android we ask for on-device processing where available). GradeGrow receives only the resulting text and does not store voice recordings.
Camera and mic only switch on when you tap scan or voice. We keep the text, never the recording.
We use Firebase Analytics and Firebase Crashlytics (by Google) to see which features are used and to fix crashes. This data is pseudonymous: it is linked to an app-installation identifier, not to a student's name or email. We have turned off advertising-ID collection and ad personalization in these tools.
On iOS, when a parent first signs in, we use Apple's AdServices framework to learn whether the app was installed from one of GradeGrow's own Apple App Store search campaigns. This uses no advertising identifier, does not track anyone across other apps or websites, and is used only to measure our own marketing. It does not show any ads in GradeGrow.
Standard bug and usage tools, with ad features switched off. On iPhone we check whether the app came from our own App Store campaign. That's it.
We share information only with service providers that help us run GradeGrow, under contracts that limit them to providing that service, and only to the extent needed:
GoDaddy — web hosting and database for the GradeGrow servers.
Google — Gemini API (AI processing), Firebase Analytics, Firebase Crashlytics and Firebase Cloud Messaging (push notifications).
Resend — sending account and service emails, such as password resets and reports you've asked for.
Apple and Google — app distribution, in-app purchases and, on iOS, install attribution.
We may also disclose information when the law requires it (for example, a valid court order), to protect the safety of a child or others, or to a successor if GradeGrow is merged or acquired. Any successor must keep the commitments in this policy for information already collected, or give notice and the chance to delete before anything changes.
Within GradeGrow, a student's information is visible to the student, their parent or guardian, and, for school or tutor accounts, the teachers, tutors and school administrators connected to that student.
Only the companies that actually run the app get data, and only what they need. Your school or tutor sees their own students.
Subscriptions, passes and credit purchases are processed by the Apple App Store or Google Play. GradeGrow never sees or stores payment card details. We receive only confirmation of the purchase, the plan or pack bought, and its price, so we can activate your account.
Apple and Google handle the money. We're just told what was bought.
We protect personal information with reasonable administrative, technical and physical safeguards appropriate to student data, including: encryption of all data in transit (HTTPS); hashed passwords; access to production systems and data limited to authorized GradeGrow personnel who need it; server-side credentials kept outside public web directories; and use of prepared database statements to protect against injection attacks.
No system is perfectly secure, and we review and improve our safeguards over time.
We lock data down in transit, hash passwords, and only authorized staff can reach it.
If we discover unauthorized access to personal information, we will act promptly to contain it, investigate, and notify affected users, and the affected school or district, without unreasonable delay and as required by applicable law. For school data, we will notify the school within 72 hours of confirming a breach, and cooperate with its investigation and its notices to families.
If something ever goes wrong, we tell you and your school quickly. For schools, within 72 hours.
We keep account and learning data while the account is active, so progress history stays available. You can delete your account at any time in Settings, which deletes the personal information in it.
Records of AI requests are deleted automatically 90 days after they complete. School data is deleted as described in Section 5. We keep a record of parental consent, and limited purchase records, where the law requires it or to prevent fraud; these are not used for any other purpose.
Delete your account in Settings and your data goes. AI request records clear out after 90 days anyway.
Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict some processing. This includes rights under laws such as FERPA and COPPA and U.S. state privacy laws, the UK and EU GDPR, Canada's PIPEDA, and other national privacy laws.
Most of this can be done in the app's Settings ("Download My Data" and "Delete Account"). For anything else, email support@gradegrow.com. We will respond within 30 days, and we will not treat you differently for exercising your rights.
It's your data. Download or delete it in Settings, or ask us and we'll help within 30 days.
We may update this policy as the Service changes. If we make a material change, we will tell users in the app or by email, and tell schools directly, before it takes effect. We will not make a material change to how we use student data already collected without the consent of the parent or school.
If anything important changes, we tell you first, and we won't change how we use kids' data already collected without permission.
Questions, requests or complaints about privacy, including those under COPPA, FERPA, GDPR or PIPEDA, can be sent to SIKADIRA LLC at support@gradegrow.com. This inbox is read by a real person, and SIKADIRA LLC is accountable for handling these requests.
Mailing address: SIKADIRA LLC, 10131 Lewisdale Road, Ijamsville, MD 21754, United States.
Email us any time — a real person reads it.