Privacy Policy

Who We Are

EARNEDU LLC ("EARN EDU," "we," "us," or "our") operates the EARN platform, accessible at earnedu.com. EARN is an educational technology tool designed to help K–12 teachers and students in Virginia track SOL (Standards of Learning) performance and access targeted academic resources.

Information We Collect

We collect the following categories of information in order to provide the EARN platform. Information is collected in three distinct ways depending on the user's role:

How We Use Your Information

Information collected through EARN is used solely to operate and improve the platform. Specifically, we use it to:

• Display individual SOL performance data to the student associated with that data
• Allow teachers to view class-level performance and growth data
• Generate school-level reports for authorized administrators and principals
• Authenticate users and enforce appropriate access controls
• Improve platform functionality and user experience

FERPA Compliance

EARN handles student education records as defined under the Family Educational Rights and Privacy Act (FERPA). We operate as a "school official" with a legitimate educational interest, acting under the direction of the school or district that deploys EARN.

We do not disclose student education records to any third party without appropriate authorization, except as required by law. Schools and districts retain control over student data at all times.

Data Sharing

We do not sell student data. We do not share personally identifiable student information with third parties for commercial purposes. Limited data sharing occurs only in the following circumstances:

• Service providers: We use Google Firebase to store and process data securely. Firebase is bound by Google's data processing terms
• Legal requirements: We may disclose information if required by law or valid legal process
• School/district administrators: Authorized administrators may access aggregated, school-level reports

Data Security

EARN is built entirely on Google Firebase infrastructure, which has been independently audited and certified under the following security frameworks:

• ISO 27001 — International standard for Information Security Management Systems
• ISO 27017 — Cloud-specific security controls
• ISO 27018 — Protection of personally identifiable information in cloud environments
• SOC 1, SOC 2, and SOC 3 — Independent audits of security, availability, and confidentiality controls

In addition to Firebase's certified infrastructure, EARN implements the following platform-level controls:

• Google OAuth authentication — no passwords are stored by EARN
• Domain-based authentication limiting access to approved school email addresses
• Firebase security rules enforcing per-user data access controls
• Role-based access separating teacher and student data views

For full details on Google Firebase's security certifications, visit firebase.google.com/support/privacy.

No system is completely secure. In the event of a data breach affecting student information, we will notify affected schools and districts in accordance with applicable law.

Data Retention

Student data is retained only as long as necessary to provide the EARN platform. When a school or district ends its relationship with EARN, we will delete student data upon request.

Teachers may request deletion of their data at any time by contacting us at the address below.

Children's Privacy

EARN is designed for use in K–12 schools and may be used by students under the age of 13. Students do not register for EARN directly — they are added to the platform by their teachers. EARN operates as a school official under a Data Processing Agreement (DPA) executed by the student's school district, which authorizes EARN to handle student data on the district's behalf under FERPA.

We do not knowingly collect personal information from children under 13 outside of this school-authorized context. Parents or guardians with questions about their child's data should contact their school or district directly, as the district retains control over student records. Parents may also contact EARN directly using the information below.

Your Rights

Depending on your role and applicable law, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Opt out of certain data uses

To exercise these rights, please contact us using the information below. For student data rights under FERPA, please contact your school or district directly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We encourage schools, teachers, and administrators to review this policy periodically. Continued use of EARN after changes are posted constitutes acceptance of the updated policy.