ENL Ready â Privacy Policy
Last updated: [DATE]. Operator: [COMPANY LEGAL NAME], [ADDRESS], [PRIVACY EMAIL].
Summary
ENL Ready is English language practice for New York students in grades Kâ6. The current version collects no personal information from students. There are no student accounts, no analytics, no advertising, and no third-party trackers.
What we collect today
| Data | From whom | Where it goes |
|---|---|---|
| Practice answers (typed text, choices) | Anyone using the practice page | Stays in the browser page; erased on reload. Never sent to us. |
| Voice recordings (Speaking practice) | Students, if they press Record | Stay on the device only (in browser memory); never uploaded; erased on reload. Microphone use needs browser permission. |
| Waitlist email and role | Adults only (teachers/parents) | Currently not sent anywhere (form is a placeholder). When enabled we will name the provider here. Children should not use this form. |
| Reviewer approvals and notes | Our educator reviewers | Saved in that reviewer's browser (localStorage) until they export a file. |
| Standard web server logs (IP address, browser type, time) | All visitors | Our host (Cloudflare) processes these to deliver and secure the site. [CONFIRM retention with host] |
Read-aloud uses your browser's built-in speech voice. Some browsers may use an online voice service from the browser maker. [VERIFY before launch; consider forcing on-device voices.]
Children under 13 (COPPA)
The service is directed to children. We do not knowingly collect personal information from children. Before any feature collects a child's personal information we will (a) give direct notice to parents, (b) obtain verifiable parental consent, or, where allowed under FTC guidance, school authorization for an educational purpose only, (c) publish our written data-retention policy (16 CFR 312.10) and keep a written information security program (16 CFR 312.8).
New York schools (Education Law § 2-d)
When we contract with a New York school or district and receive student data, we act as a third-party contractor: we use data only for the contracted educational purpose, never sell it or use it for marketing, encrypt it in transit and at rest, follow a NIST CSF-aligned security plan, and notify the district of any breach within 7 calendar days of discovery. See our Data Security and Privacy Plan and Data Privacy Agreement.
Your rights
Parents can ask us to review or delete any information about their child, and to stop further collection: [PRIVACY EMAIL]. NY parents may also file complaints with their school and the NYSED Chief Privacy Officer (https://www.nysed.gov/data-privacy-security).
Changes
We will post changes here and, where required, notify parents and schools before material changes take effect.