Privacy notice: Story Classrooms

DRAFT 2026-10-19 (updated 2026-10-21: parents and guardians, teachers' videos and recordings; 2026-11-02: assignment versions with extra help for some students, opening and due times; each draft kept as sent, read back by the student; Review: a "To work on" line, comments on words in the writing and a teacher's voice note; 2026-11-04: JotJay's "Recently deleted" keeps work in a deleted assignment 30 more days), for legal review. Not yet in force. Facts come from data-inventory.md.

Applies to the Story Warriors classroom site (classroom.ourstorywarriors.com), run by [COMPANY]. JotJay (app.jotjay.com) has its own privacy policy on its own site. Last updated: [DATE].

The short version

• Students don't use email. They sign in with a made-up writing name and a password. Their teacher sees their first name and last initial, like "Maya R.", never a full name.
• Student work belongs to the classroom. Only the student's own teacher can read it. The school sees totals, never the stories.
• Work is deleted at the end of the school year (after June 30), or sooner if the school or teacher chooses.
• Parents and guardians get email only if the teacher adds them, with their agreement. Every email has a link to stop them. (2026-10-24: this feature is switched off on every site, so no parent or guardian addresses are collected. Section 3 stays here for the day it is switched on again; until then it does not apply.)
• No ads, no tracking, no selling data, and no artificial intelligence reads students' work.
• Questions: [PRIVACY CONTACT].

1. Who we are

Story Classrooms is run by [COMPANY] ("we"). When a school or school board uses Story Classrooms, the school or board is in charge of its students' information, and we handle it on its behalf under a written agreement. When a teacher signs up on their own, we are responsible for the teacher's account information, and the teacher decides how their class uses it.

Our privacy officer is [NAME], reachable at [PRIVACY CONTACT].

2. For students (and their families)

What we keep about you

• Your first name and the first letter of your last name (only your teacher sees it).
• Your account: a writing name you make up (what the class page calls you, and what you sign in with) and a password you make. We store only a scrambled version of the password, so nobody can read it, not even us.
• The stories and writing you send, any recordings you make, your story plan and notes, and your answer to "how did you use AI?"
• Each draft you send (Draft 1, Draft 2, your final draft), kept just as you sent it, with which draft it was. You can read your earlier drafts and the feedback on them, but not change them. Your teacher sees them too. They are deleted with the rest of your work.
• If you choose to, a recording of you reading your sent story out loud. Your teacher can listen to it; you can delete it until they have. Nobody else hears it, and it is never emailed.
• If your assignment has pages (one step at a time): what you write on each page, the pages you hand in, your teacher's replies and your answers, and any drawings, photos of your paper work or recordings you add.
• If your teacher gives you extra help on an assignment (a word bank, sentence starters, a shorter word goal, a page you can skip, or the instructions read to you): that you get it. Your teacher keeps this with the assignment. Only your teacher sees it; your page shows you only your own help, never the name of the group or who else is in it.
• If your teacher sets when an assignment opens and is due: the page won't take work before it opens, and if your teacher marks late work, your teacher sees "Late" on work you send after the due time.
• If your teacher turns on the story idea spinner: the story idea you spun (a who, when, where and what) and how many spins you used. Your teacher sees it next to your work.
• How your writing grew: each time you send, the page also sends a step-by-step history of the story box (what was typed, what was pasted in, what came from speaking or from your plan, and when). Your teacher can play it back to see how your story was built. It is kept and deleted with the work it belongs to.
• Your teacher's feedback and grade on your work: their note, one thing to work on, comments on words in your writing, and sometimes a voice note from your teacher you can play. You see them only once your teacher sends them to you. They are deleted with the rest of your work.
• Quizzes (JotJay, paid plans): your answers (saved as you go, so nothing is lost if your Chromebook turns off), when you started and handed in, how long it took, your score, and the points and notes your teacher gives. On a practice quiz, each try.
• Talk To The Page (JotJay): what you write in the five minutes on the thought of the day, which thought it was on, the spins you made, and whether you handed it in or kept it. Everything you write there is kept in your Talk To The Page journal, which only you can read. If you hand it in, your teacher can read it too and can write a short note back to you. If you keep it, your teacher can see only that you wrote something that day, never the words. While you write, a copy stays on the computer you're using until it's saved to your class. In a class vote, your vote is counted so you can vote only once, but no screen shows what you voted for, and it's deleted when your teacher closes the vote.
• Notes your teacher writes about your work to help with report cards. Only your teacher can see them.
• If your teacher excuses you from an assignment, that it doesn't count toward your mark. It is deleted with the rest of your class's work.

Your account. You have one account for your school. You sign in with your writing name and password to write and to see your teachers' feedback, and you join each class with it from the link or QR code your teacher gives you. Each of your teachers sees your name and writing name, and only the work you do in their class. Your writing name can't have your real name in it. Keep your password to yourself. If you forget it, any of your teachers can give you a one-time password, and you make a new one. Your account is deleted with your classes' work at the end of the school year.

Story codes from before. If you sent work with a code like TIGER-LAMP-42, type it once on the class page to make your account: your work comes with you, and after that the code only tells you to sign in.

On a shared computer. While you're signed in, your work in progress is saved to your class as you write, so you can carry on from any computer. Your teacher doesn't see it until you send it. It's also kept on the computer you're using, so it isn't lost if the page reloads; that copy is removed when you press "Not you?" or "I'm done on this computer", once you send your final version, or after 10 hours. The copy saved to your class is removed once you send your final version, or with the rest of your work at the end of the school year.

Live words. When you tell your story out loud, the words that appear on screen come from your browser's speech service (Google, on Chrome and Android). Your voice goes to that company while you record, under the browser's own rules. On iPhone and iPad we only record, without live words. You can always type instead.

Read it to me. The button that reads your story, instructions or feedback out loud sends the words, one sentence at a time, to Microsoft's speech service in Canada, where a computer voice turns them into sound and sends it straight back. It gets only the words being read, never your name or story code. Your words and their sound are not saved. The sound of our own lesson pages (the writing lessons every class gets) is made once and kept, so the voice does not have to make it again for each class; none of it is yours. If that voice isn't available, your device's own voice reads instead; if your device only has an online voice, the words go to that voice's company (Google, on Chrome), and the page tells you so next to the button.

Videos, recordings and pictures from your teacher. Your teacher can put a recorded instruction, a video, pictures of textbook pages or readings at the start of an assignment. Files your teacher uploads are kept by us like the assignment itself. If your teacher adds a YouTube, Vimeo or Google Drive video, it plays inside the page but comes from that company: when you press play, your browser connects to it, and it can see your device's internet address and use its own cookies under its own rules. YouTube videos use YouTube's privacy-enhanced mode. We don't send that company anything about you.

Your teacher's voice. When your teacher has recorded a lesson, Watch the lesson has a button that plays it in their voice. That recording is your teacher's; nothing you say is recorded by it.

Word sounds. In a language lesson (Tahltan, Plains Cree, Carcross Tlingit), the Listen button on a word card plays a recording kept on our platform, made by a fluent speaker your school or the language's community chose, with their name under the words. Nothing about you is sent anywhere when you press it. The “Look it up” link beside it opens the community's own dictionary in a new tab, under that site's rules.

Quizzes. If your teacher turns on quiz safety, the quiz tells you before you start that your teacher can see if you leave the quiz page or paste an answer. While you take it, it notes how many times you left the page and for how long, which questions had something pasted in, tries to copy a question, and leaving full screen. Your teacher sees these under "During the quiz". They are facts to talk about, and they never change your score. Your teacher can also give you extra help on quizzes (more time, every question read aloud, or one fewer choice to pick from). Only your teacher sees that setting; it never appears as a label on your screen and is never in a download. Your quiz answers, score, notes and any extra-help setting are deleted with the rest of your work (see "When it's deleted"), when your teacher removes you from the class, or when the class is closed.

Talk To The Page. Your Talk To The Page writing is deleted with the rest of your work (see "When it's deleted"), when your teacher removes you from the class, or when the class is closed. The microphone button there uses the same live words as telling your story out loud (see "Live words"), and "Read it to me" reads only the thought of the day.

Stay safe. Don't put your full name, your address, or your school's name in your story.

Who can see your work. Your teacher, and your parents or guardians if your teacher emails it to them (see section 3). Not other students (the class story wall on the class page shows only how many stories the class has sent and finished, never anyone's story or name), not your school's office, and not us, except where we must to keep the service running or fix a problem.

Book rewards. When you finish six stories, books unlock for you on the class page. We work this out from your account; nothing extra is collected.

When it's deleted. At the end of the school year (after June 30), or earlier if your school or teacher picks an earlier date or deletes it. Your teacher gets a reminder two weeks before, so they can save grades first.

If your teacher deletes an assignment (JotJay). It goes to your teacher's "Recently deleted" first, like a recycle bin. It comes off your class page right away, and you can't see it or your work in it any more. Your work in it is kept, unchanged, for 30 days, in case your teacher deleted it by mistake and puts it back. Then it is deleted for good, with everything in it. Your teacher can also delete it for good sooner. If it is put back, you can read your work in it again (it is never put back on the class page for new work without your teacher choosing to). The end-of-year date above still applies: work is never kept past it because it was in Recently deleted.

3. For parents and guardians

How you get on the list. Only your child's teacher can add you, by typing your email address (and, if they like, your name) under your child, or by pasting a class list. The teacher must confirm that you agreed to get emails about your child's writing. A child can have up to three parents or guardians on the list. Students never see or give out these addresses.

What we keep about you: your email address, your name if the teacher typed it, the date the teacher confirmed you agreed, and whether you asked to stop. We also keep a record of each email the teacher sent you: the date, what kind of thing was in it (feedback, grade, writing or a note) and how many people it went to, never the email itself.

What you may receive. Only what the teacher chooses to send, after previewing it: their feedback on your child's work (only once your child can see it too), the grade and rubric, your child's writing, and/or a short note. Your child is named by first name. Teachers' private notes and report card notes are never emailed. Each parent or guardian gets their own copy, so nobody sees the other addresses. Emails come from the classroom site's address with the teacher's name; when you reply, your reply goes straight to the teacher's own email, not to us.

Stopping the emails. Every email has a "To stop them" link. Open it and press Stop the emails: you get no more emails from that teacher through Story Classrooms, and your address can't be added again in that classroom. To remember that, we keep only a scrambled (one-way hashed) copy of your address, until the classroom's deletion date. You can also reply to the teacher or write to [PRIVACY CONTACT].

When it's deleted. With the class's work at the end of the school year (after June 30), or earlier if the school or teacher picks an earlier date, deletes all student work, or closes the classroom. The teacher can also remove you at any time. Emails already delivered stay in your mailbox.

4. For teachers

What we keep: your name as students see it, your email address, your password (stored only as a one-way hash), an optional photo, your classroom name, grade band, welcome message, school, assignments and rubrics (including each assignment's steps, checklist, opening and due times, and any versions you make, with the students you put in each and the help they get), files you add to assignments (recorded instructions, videos, pictures, readings) and links, and the grades, feedback (including a "To work on" line, comments on words in a student's writing and any voice note you record for a student), private notes and report card notes you write, and which assignments you excused a student from on Grades. If you send a feedback email to an address you type, we keep that address only as long as the student work it's about. If you add parents or guardians, see section 3. Story Ninjas teachers who bought individually: your order number.

Signing in: email and password; emailed links only to set or reset your password. You're signed out after 12 hours without use.

How long: your account stays while you use it. To close it, use Settings → Delete my classroom: it deletes your classroom, all of its student work and your account details at once, and emails you a confirmation. You can also ask [PRIVACY CONTACT].

Your responsibilities: use Story Classrooms for your class, follow your school's rules on student information, and don't ask students for more than the first name and last initial. Add a parent's or guardian's email only when they have agreed to get emails from you about their child's writing, and only for your own students. Videos and files you add should be ones you may share with your class.

5. For schools and school boards

School contacts see each classroom's totals, the teacher invitation link, and the deletion date, and can delete all of the school's student work at once. They never see student work. The details of how we handle student information for a school or board are in our data agreement with that school or board, which takes precedence over this notice.

6. Why we use information

Only to run Story Classrooms: show students their class page, deliver their work to their teacher, let teachers grade and give feedback, send the emails the service needs (sign-in, welcome, feedback, the emails teachers send to parents and guardians, deletion reminders), keep it secure (stopping spam and abuse), and answer support questions. We use counts (never content) to bill schools by teacher seats.

We do not sell or rent information, show ads, build profiles of students, use student work to train artificial intelligence, or use tracking or advertising cookies.

7. Services that help us

Some of these companies store or process information outside Canada, including in the United States, where it may be accessible to authorities under those countries' laws. [VERIFY: storage location; boards may require Canada or North America only.]

8. Keeping it safe

Encrypted connections everywhere; passwords (teachers' and students') and codes stored only as one-way hashes; each teacher can reach only their own classes; limits on repeated guesses and sign-in attempts; the admin page behind a second lock; content-free logs; a record of who opened which piece of work. No system is perfect: if a breach affects your information, we'll tell the school or teacher responsible without undue delay and report it where the law requires.

9. Your rights

You can ask to see, correct or delete information about you.

• Students and families: ask your teacher or school first; they control the work and can view, correct or delete it right away. You can also write to [PRIVACY CONTACT].
• Parents and guardians on an email list: use the stop link in any email, ask the teacher to correct or remove your address, or write to [PRIVACY CONTACT].
• Teachers: most of it you can change yourself in Settings; for the rest, write to [PRIVACY CONTACT].
• If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

10. Changes

If we change this notice in a way that matters, we'll update the date above and tell teachers and schools by email before it applies.

11. Contact

[COMPANY], [ADDRESS]. Privacy officer: [NAME], [PRIVACY CONTACT].

Privacy policy

Effective November 1, 2026

This policy explains what information JotJay keeps, why, who helps us handle it, and how long we keep it. It covers the JotJay classroom app at app.jotjay.com (formerly Story Ninjas, at classroom.storyninjasrock.com) and our website, jotjay.com. JotJay is run by JotJay Inc. ("JotJay", "we", "us"). We've written it in plain language for teachers, schools, students and families. Our terms of service explain the rest of how JotJay works.

The short version

• Students don't need an email address. They sign in with a made-up writing name and a password. Their teacher knows them by first name and last initial, like "Maya R.".
• Student work is the school's and the teacher's to control. Only the student's own teacher reads it. A school sees totals, never the writing.
• Student work is deleted after the school year ends (after June 30), or sooner if the school or teacher chooses. Teachers get an email 14 days before.
• No ads, no tracking, and we never sell information. No artificial intelligence reads, writes or grades students' work, and we never use student work to train AI.
• A few companies help us run JotJay, such as Cloudflare for hosting, Microsoft for the reading voice and Stripe for payments. Information can be processed in Canada and the United States (sections 5 and 6).
• You can ask to see, correct or delete information about you: students and families through their teacher or school, or by writing to us.
• Questions? Email support@jotjay.com.

1. Who we are and our privacy officer

JotJay is a writing classroom for Canadian schools, Kindergarten to Grade 12, run by JotJay Inc., 2015 46 Ave SW, Calgary, Alberta. We follow Canada's federal privacy law (PIPEDA) and, where a school's own provincial privacy law applies, we help the school meet it.

Who is in charge of what.

• Student information is under the control of the school, or of the teacher when a teacher uses JotJay on their own. The school or teacher decides how JotJay is used in class. We handle student information only to provide JotJay to them, on their behalf, as their service provider. When a school or board has a data agreement with us, that agreement wins if it differs from this policy. When a teacher joins a school, moves to another school or leaves one, their classes' student information moves with them and is under the new school's (or the teacher's own) control from then on, including its deletion date; the first school keeps only the totals it already had. We move a teacher between schools only when the teacher or a school asks us to.
• We are responsible for teachers' and school contacts' account information, for payments, and for the people who visit our website or write to us.

Our privacy officer is Sigmund Brouwer, who is accountable for how JotJay handles personal information. You can reach them at support@jotjay.com (please put "Privacy" in the subject) or by mail at JotJay Inc., 2015 46 Ave SW, Calgary, Alberta.

2. What we collect

We collect only what JotJay needs to work. Most of it is typed in by the people who use it.

From teachers

• Your account: your name as students see it, your email address, and a password, which we keep only in scrambled (hashed) form, so nobody can read it. An optional photo for your class page.
• Your classes: class names, grades, your welcome message, your school, your "Say it right" list of words for the reading voice, and, if you have no school, the link your Grades button opens (your report card system's sign-in page). A school's admin sets that link for the school's teachers. It's only an address: JotJay never signs in to that system or sends it anything.
• What you make and add: assignments, rubrics, lesson plans, files, pictures, recordings and video links, your word bank, saved comments, and any recording of your own voice on a lesson.
• What you write about students' work: feedback (with a "To work on" line and comments on words in the writing), any voice note you record for a student, grades, rubric scores, term marks, private notes, report card notes and report card comments. These are part of the student's record and are deleted with it (section 7).
• Your plan: which plan you're on, when it ends, and which assignments used a free plan place. If you bought from our earlier store, the order number and purchase email.
• Payments: if you pay by card, your name, email and billing address go to our payment processor, Stripe, which collects your card details directly. We never see or store your card number. We keep a record of the payment (plan, amount, date).
• Sign-in: a sign-in session, kept only as a hash, so you stay signed in.

From students

• Name: the student's first name and last initial, like "Maya R.". Only their teachers see it.
• Account: a writing name they make up (what the class page shows and what they sign in with) and a password, kept only as a hash. A writing name can't contain the student's first name. We never ask a student for an email address, phone number, address or birthday. One account works for every class they join at their school.
• Their work: writing and its title (each draft they send is kept as it was sent, with which draft it was; the student can read their own earlier drafts but not change them), plans and notes, recordings if they tell their work out loud, pages and hand-ins for step-by-step assignments (including drawings and photos of paper work), their answer to "How did you use AI?", their starting idea if the teacher uses the idea spinner, and, if they choose, a recording of them reading their sent work aloud.
• Unsent work: while a student is signed in, their unsent work is saved to the class a few seconds after each change, so it isn't lost if they move to another computer. The teacher doesn't see it until it's sent.
• Writing history: how the writing box changed while they wrote (section 4).
• Their teacher's feedback and grades on their work, including comments on words in their writing and any voice note the teacher records for them, which the student sees only once the teacher sends it.
• Quizzes (paid plans): their answers, when they started and handed in, how long it took, their score and the teacher's points and notes; each try on a practice quiz. If the teacher turns on quiz safety, the student is told before starting, and the quiz notes how often and how long they left the quiz page, which questions had a paste, copy attempts and leaving full screen ("During the quiz" for the teacher; it never changes a score). Extra help a teacher sets for a student on quizzes (more time, every question read aloud, one fewer choice) is seen only by that teacher, never shown to the student as a label and never exported.
• Talk To The Page (a five-minute free write on a thought of the day): what the student writes, which thought it was on, their own spins, and whether they handed it in or kept it. Every piece is kept in the student's own journal. The teacher can read a piece only if the student hands it in (and can write a short note back); a piece the student keeps is never shown to the teacher, who sees only that something was written that day. A class vote counts one vote per student; no one sees who voted for what, and the votes are deleted when the vote closes (only the totals stay). Deleted with the rest of the student's work.

From schools

The school's name, its plan and number of teacher places, the email domains its teachers use (so they can join the school), the school contact's name, role and email, the teachers it invites, and, for invoices, the school's billing address. If someone asks us to bring JotJay to their school, we keep the request: school name, their name, role and email, about how many teachers, and their message.

From parents and guardians

Nothing. JotJay doesn't collect parents' or guardians' contact details. If we ever add a way for teachers to email families, we'll update this policy first, and it will work only with the family's agreement.

From website visitors and people who contact us

• Our website, jotjay.com, has no analytics and no tracking. Its one form is the waitlist: your name, email and whether you're a teacher, homeschool parent, school leader or something else. We use them only to email you that you're on the list and, when your turn comes, your link to start. Email support@jotjay.com and we'll take you off it. The website loads its typefaces from Google Fonts, which means your browser shares its internet address with Google.
• If you book a call with us, you do that on Calendly, under Calendly's own privacy policy.
• If you email us, we keep your email and our reply to answer your question.

Collected automatically

• Internet (IP) addresses, for a short time, to stop spam and abuse (limits on repeated attempts, and Cloudflare's "I am human" check on some forms, such as teacher sign-up).
• Service logs: technical records of what the app did (event names, ids and status), never what anyone wrote.
• Browser storage: only what keeps you signed in, remembers your settings (like the reading speed) and keeps work in progress safe on the device. No advertising or tracking cookies.

3. How we use it

We use information only to run JotJay and to look after the people who use it:

• show students their class page and deliver their work to their teacher;
• let teachers plan, teach, read the work, give feedback and grade;
• show schools their totals, and let them invite teachers and set their deletion date;
• send the emails JotJay needs (below);
• take payments, send invoices and know which plan applies;
• keep JotJay secure, stop abuse, fix problems and answer support questions;
• improve JotJay using totals and counts, never the content of students' work.

We do not sell or rent information, show ads, use information for marketing to students, build profiles of students for anything outside their own classes, or use student work to train artificial intelligence.

Emails. JotJay sends only the emails the service needs: confirming an address, sign-in and password links, welcome and invitation emails, deletion reminders, and a confirmation when a classroom is deleted. They come from hello@jotjay.com, and replies go to support@jotjay.com. Card receipts and school invoices are emailed by Stripe. A teacher can also choose to email feedback to an address they type in, such as a student's school email; that email holds the student's first name, the assignment, the grade and the feedback, and the address is deleted with the work. We never send marketing email to students, and we send it to teachers only if they agree.

4. AI and writing insights

• No artificial intelligence reads, writes, analyses or grades students' work. JotJay doesn't send student work to any AI service. The teacher does the teaching and the grading.
• Writing history. When a student sends their work, the page also sends a step-by-step history of the writing box: what was typed, pasted, moved, spoken or brought in from their plan, when, and when the page was out of view while they wrote. It covers only that writing box, never other tabs, apps or what else is on the computer, and it isn't a record of keystrokes. It's kept beside the work and deleted with it.
• Writing insights are a few plain facts the teacher sees from that history, such as how much of a piece was pasted in, compared with the student's own other pieces, and a replay of how it grew. They're worked out by our own code, not by AI. They're facts for a conversation with the student, never a verdict that a student used AI or copied.
• Report card comment drafts. Where we've switched it on, a teacher on a paid plan can press "Draft one for me" when writing a student's report card comment. Only then, JotJay sends Cloudflare's AI service (Workers AI, on Cloudflare's network) the student's first name, their grade band, the term mark, each piece's title, mark and the feedback the teacher already shared with the student that term, and the "To work on" next steps the teacher shared in earlier terms of the same school year. It never sends the student's writing, last name or recordings, or the teacher's private notes. The draft comes back to the teacher to change; it isn't saved until they edit it, and students never see it. Teachers who don't press it send nothing.
• "How did you use AI?" is a question students answer in their own words for their teacher. Their answer is part of their work.
• Speaking instead of typing. When a student tells their work out loud, the words that appear come from the browser's own speech service (Google, in Chrome and on Chromebooks). The student's voice goes to that company while they record, under the browser's own terms; JotJay doesn't send it there. On iPhone and iPad the page records without live words. Students can always type instead.
• Read aloud. On paid plans, and for our premade lessons, a natural voice from Microsoft's speech service reads text out loud. It receives only the words being read, one sentence at a time, never a name or account. We don't save a student's words or their sound; we keep only the sound of our own lesson text, which is the same in every class. Otherwise, the device's own voice reads, and if that voice is an online one, the device sends the words to its maker (Google, in Chrome), and the page says so.

5. Who we share it with

We share information only with the companies that help us run JotJay, and only what each one needs. They may use it only to provide their service to us. We don't share information with anyone else unless the law requires it (for example, a court order), and then only what's required.

If JotJay or our company is ever sold or merged, information would move to the new owner only under the same promises as this policy, and we'd tell schools and teachers first.

6. Where it's stored

JotJay's database and files are stored with Cloudflare. They aren't set to stay in a particular country, so we don't promise that information stays in Canada. Information can be stored and processed in Canada and the United States, and wherever the providers above operate. Information held in another country is protected by our agreements with these providers, but it can be accessed by courts and authorities there under that country's laws. If your school or board needs information kept in Canada, please talk to us before you start.

7. How long we keep it

We keep information only as long as it's needed, and we delete it automatically on these schedules:

After deletion we keep only records with no content in them, such as counts and dates that school totals and billing need. Emails already sent stay in the inboxes they went to.

8. Security

We protect information with care that fits how sensitive it is, especially children's work:

• encrypted connections (HTTPS) everywhere;
• passwords, sign-in sessions and codes stored only as one-way hashes;
• each teacher reaches only their own classes, and schools and our own team see totals, never student work;
• limits on repeated sign-in attempts, and sign-in that never says whether the name or the password was wrong;
• our admin page behind a second lock, with every admin action logged;
• service logs that never contain what anyone wrote;
• no real student information in our test and demo systems.

We look at student work only when we must to keep JotJay running, to fix a problem a teacher or school reports, or because the law requires it.

If something goes wrong. No system is perfect. If a breach affects personal information, we'll tell the school or teacher responsible without undue delay, so they can act. Where there's a real risk of significant harm, we'll report it to the Privacy Commissioner of Canada and notify the people affected, as the law requires, and keep a record of every breach.

9. Your rights and choices

You can ask to see the information we hold about you, to correct it, or to delete it. You can also withdraw your consent, though some of JotJay may stop working for you if you do.

• Teachers: you can change most of your information yourself in Settings, download your grades, and delete your classroom and account. For anything else, email us.
• Students and families: ask the teacher or school first. They control the student's work and can see, correct or delete it right away. You can also write to us, and we'll work with the school to answer.
• Schools: your school page shows your totals, lets you set your deletion date and lets you delete all student work at once.
• Requests go to support@jotjay.com. We'll answer within 30 days, and tell you if we need more time or can't do what you ask, and why. We may ask you to confirm who you are first.
• If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or to your provincial or territorial privacy commissioner.

10. Children and students

JotJay is made for children, so we've built it to collect as little about them as we can:

• students use JotJay only through their teacher's class page, with their school's or teacher's permission;
• they sign in with a made-up writing name, never an email address, and classmates see only that writing name;
• teachers ask only for a first name and last initial;
• no ads, no tracking, no selling, no marketing to students, and no AI reading or training on their work;
• their work is deleted after the school year ends.

Students: don't put your full name, your address or your school's name in your writing. Keep your password to yourself. If you forget it, your teacher can give you a new one-time password.

11. Schools' and teachers' responsibilities

Because schools and teachers control student information in JotJay, they also have a part to play:

• use JotJay for teaching, and follow your school's and board's rules on student information and on getting parents' consent where those rules require it;
• if you sign up on your own, make sure your school allows you to use JotJay with your students;
• ask students for their first name and last initial only, and remind them not to put personal details in their writing;
• add only files, pictures and videos you're allowed to share with your class;
• download what you need to keep, such as grades, before the deletion date;
• pass on to us any request from a student or family that you can't handle yourself.

12. Changes to this policy

We'll update this policy when JotJay changes. If a change matters, we'll email teachers and school contacts at least 30 days before it applies and show the new date at the top of this page. We'll never start using information already collected in a new way without telling you first and, where the law requires, asking for your consent.

13. Contact

JotJay Inc., 2015 46 Ave SW, Calgary, Alberta

Privacy officer: Sigmund Brouwer, support@jotjay.com (please put "Privacy" in the subject).

Everything else: support@jotjay.com.