Privacy Policy

Last updated: November 4, 2024

ClassTrack — Privacy Policy

ClassTrack is a service of Teaching Tomorrow, a division of ZeroPoint Holdings LLC.

NOTICE: This Privacy Policy applies to ZeroPoint Holdings LLC dba Teaching Tomorrow, operating the ClassTrack attendance and classroom-management platform. It should be read together with our Terms of Service and Data Processing Addendum. This policy is written in plain language but remains legally binding once accepted by authorized users on behalf of their institutions.

Revised November 10, 2025 to reflect self-hosted analytics implementation.

Last Updated: November 10, 2025 Entity: ZeroPoint Holdings LLC dba Teaching Tomorrow ("ClassTrack," "we," "us," or "our") Contact: privacy@teaching-tomorrow.com Principal Address: 2135 E. Independence St. #1160, Springfield, MO 65804, USA Registered Agent: 117 S Lexington St., Ste 100, Harrisonville, MO 64701-2444, USA

1 · Who We Are & How We Handle Roles

  • Schools (control or "Controllers") determine what student information is entered into ClassTrack.
  • ClassTrack acts only as a Processor / Service Provider under FERPA, COPPA, GDPR/UK GDPR, and applicable state laws.
  • Under FERPA, we function as a school official with a legitimate educational interest, processing data strictly per School direction.

Note: ZeroPoint Holdings LLC may process limited administrative data across its brands for compliance and security purposes, but Student Data from ClassTrack is never shared or combined for unrelated business use.

2 · Information We Process

A · Account Information (Teachers & Staff)

  • Email address
  • Optional display name
  • Encrypted password (never stored in plain text)
  • User preferences (date format, default view, etc.)
  • Authentication logs and last-login timestamp

B · Student Information (Entered by Schools)

  • Full and preferred names
  • Grade / year / level
  • Program or track (academic, vocational, ESL, etc.)
  • Guardian / parent / emergency contact name, email, phone
  • Attendance records (present/absent/tardy/excused) with timestamps
  • Class and term associations
  • Teacher notes and optional interests or hobbies

Privacy Enhancement: We have removed collection of date of birth and disabled medical or special-needs fields by default to reduce risk.

C · Technical Information & Anonymous Analytics

Essential system logs for security (IP, device/browser metadata, error logs).

We collect anonymous usage analytics to improve ClassTrack (e.g., page views, feature usage, error tracking). Our analytics system is:

  • 100% self-hosted in our own database (no third-party analytics services)
  • Cookie-free and does not track users across sites
  • Does not collect or store any personally identifiable information (PII)
  • Never tracks student data, names, grades, or attendance records
  • Automatically deleted after 90 days
  • Opt-out available at any time via What We Track or account settings

For complete transparency about what we track and why, see our What We Track page.

No cross-site tracking or advertising cookies are used.

3 · Sources of Data

We receive information only from:

  • The School and its authorized staff; and
  • Devices that access our Service.

We do not collect data directly from students or parents unless explicitly authorized by the School.

4 · How We Use Information

  • Provide and secure the Service (attendance, rosters, exports).
  • Authenticate users and manage accounts.
  • Diagnose issues and support troubleshooting.
  • Improve functionality using de-identified or aggregated data (never re-identified).
  • Comply with legal obligations and School instructions.

We do NOT:

  • Sell or share Student Data for marketing or advertising.
  • Train AI models on Student Data.
  • Engage in cross-context behavioral profiling.

5 · Legal Bases (Where GDPR/UK GDPR Applies)

  • Contract performance with the School.
  • Legitimate interest in providing and securing the Service.
  • For any sensitive Student Data enabled by the School: explicit consent or substantial public interest in education (as determined by the School).

6 · Data Retention

  • Active accounts: retained while the School subscription is active.
  • Inactive classes: retained for 12 months post-term (default; configurable by School).
  • Deleted accounts: all associated data purged within 30 days.
  • Backups: kept for 90 days for disaster recovery, then deleted.
  • After termination, exports available for 60 days, then data is deleted or de-identified.

7 · Data Sharing and Subprocessors

We share information only as needed to operate ClassTrack and under binding DPAs.

CategoryProviderPurpose
Hosting / AuthenticationSupabaseDatabase storage, auth & self-hosted analytics
Email deliveryMicrosoft Outlook / Microsoft 365Transactional emails only

Note: Our analytics system is self-hosted within our existing Supabase infrastructure. We do not use third-party analytics services.

All Subprocessors undergo security and privacy reviews. We remain liable for their performance.

8 · International Transfers

Data may be processed in the United States or other jurisdictions where our providers operate. We use appropriate safeguards (e.g., EU Standard Contractual Clauses and UK Addendum) to protect Personal Data.

9 · Security Measures

We maintain technical and organizational controls summarized in the DPA Annex A: encryption in transit and at rest, role-based access, logging, monitoring, secure development, vendor management, and incident response. No system is 100% secure, but we continuously assess and improve our controls.

10 · Children's Privacy (COPPA / FERPA)

ClassTrack is used by adults (teachers and staff) on behalf of Schools. We do not permit children to create accounts or interact directly with the Service. The School is responsible for:

  • Providing parental notices and obtaining consents where required.
  • Ensuring Student Data is entered lawfully and minimally.

11 · Your Rights and How to Exercise Them

Depending on your jurisdiction, parents/guardians or eligible students may have rights to:

  • Access or receive a copy of Student Data;
  • Request corrections or deletion; or
  • Object to certain processing.

Requests must go through the School (the Controller). We assist Schools in fulfilling verified requests as required by law.

12 · Breach Notification

If a data breach affects Student Data, we will:

  1. Notify the School within 72 hours of confirmation;
  2. Describe the nature and scope of the breach;
  3. Explain mitigation steps and recommendations; and
  4. Cooperate with the School's own notification processes.

13 · Business Transfers

If ClassTrack is acquired or merged, Student Data may transfer to the successor entity, subject to the same protections and notice requirements.

14 · Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated to School administrators via email or in-app notice. The "Last Updated" date reflects the current version. Continued use after changes indicates acceptance.

15 · Contact Us

Email: privacy@teaching-tomorrow.com Postal: ZeroPoint Holdings LLC dba Teaching Tomorrow, 2135 E. Independence St. #1160, Springfield, MO 65804, USA

We strive to respond to privacy requests within 48 hours.

© 2024-2025 ZeroPoint Holdings LLC dba Teaching Tomorrow. All rights reserved.

Other Legal Documents