Privacy Policy

Effective Date: April 19, 2026 | Last Updated: April 27, 2026

Chem-Titan EdTech ("Chem-Titan," "we," "us," or "our") operates the chem-titan.com website and all associated educational software modules (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect information when you use our Service. By accessing or using Chem-Titan, you agree to this Privacy Policy.

1. Definitions

"Student" means any individual under the age of 18 who uses the Service for educational purposes, or any individual whose use of the Service is directed by a school, school district, or teacher.
"Teacher" or "Educator" means any instructor, administrator, or school employee who uses the Service to create, manage, or monitor educational content and student progress.
"School" means any K–12 educational institution, school district, or educational organization that authorizes the use of the Service.
"Personal Information" means information that identifies, relates to, describes, or could reasonably be linked to a particular individual or household.
"Education Records" has the meaning given under the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g.

2. Information We Collect

2.1 Information Provided Directly

Account Information: When a teacher or administrator creates an account, we collect name, email address, school name, and role. Students may provide a first name or display name at the direction of their teacher.
Authentication Credentials: Passwords are hashed using industry-standard algorithms (bcrypt or equivalent). We never store plaintext passwords.
Contact Information: If you contact us for support, we collect the information you provide in your communication.

2.2 Information Generated Through Use

Progress and Performance Data: Quiz scores, checkpoint completions, lesson progress, simulation interactions, drag-and-drop exercise results, and other learning activity data generated within the Service.
Preferences and Session State: Learning preferences such as selected difficulty level (On-Level, Pre-AP, AP) and calculator settings, stored server-side and associated with your authenticated account. These preferences are synchronized from our servers at login and are not stored permanently in the browser.
Device and Browser Information: Browser type, operating system, screen resolution, and device type — collected solely for ensuring compatibility and optimizing the user experience.
Teacher Administrative Action Logs: When an authorized Educator uses Teacher Mode or the Teacher Dashboard, we record an audit log of administrative actions (such as adding, modifying, or deactivating student records). Each log entry captures the timestamp, the authenticated teacher account, the action taken, the affected account or record, and any reason the Educator provided. These logs are retained to support accountability, incident response, and institutional oversight.

2.3 Information We Do NOT Collect

We do not collect Social Security numbers, financial information, biometric data, or geolocation data.
We do not use cookies for advertising, behavioral tracking, or cross-site profiling.
We do not collect information from third-party data brokers.
We do not serve, display, or integrate any third-party advertisements whatsoever.

3. How We Use Information

We use collected information exclusively for the following educational purposes:

Providing the Service: Delivering interactive chemistry lessons, simulations, quizzes, and educational content.
Personalizing Learning: Adapting content difficulty and tracking progress to support individualized learning paths.
Teacher Dashboards: Providing educators with aggregated and individual student performance data to inform instruction.
Audit and Accountability Logging: Recording administrative actions taken by authenticated Educators (e.g., student record changes) to support institutional oversight, incident investigation, and the ability to identify and revert unauthorized changes. Audit logs are accessible to Chem-Titan administrators and, upon written request, to the School or District whose accounts are involved.
Technical Operation: Maintaining, securing, and improving the Service; diagnosing technical problems; and ensuring compatibility across devices.
Communication: Sending transactional emails (account setup, password resets) to teachers and administrators. We do not send marketing emails to students.

4. How We Share Information

We do not sell, rent, lease, or trade Personal Information or Education Records to any third party. Period.

We may share information only in the following limited circumstances:

With Schools and Teachers: Student progress and performance data is shared with the teacher and school that authorized the student's use of the Service.
Service Providers: We use a limited number of third-party service providers (e.g., Supabase for database hosting, Cloudflare for content delivery and security, Resend for transactional email) that process data on our behalf under strict contractual obligations to protect that data and use it only for the purposes we specify.
Legal Obligations: We may disclose information if required by law, regulation, court order, or governmental request, provided we make reasonable efforts to notify the affected School or user in advance unless legally prohibited from doing so.
Safety: We may disclose information if we believe in good faith that disclosure is necessary to protect the safety of students, teachers, or the public.

5. FERPA Compliance

When Chem-Titan is used by a school or school district, we operate as a "school official" with a "legitimate educational interest" under FERPA (34 CFR § 99.31(a)(1)). This means:

We use Education Records solely to provide the educational services specified in our agreement with the School.
We do not use Education Records for any purpose other than providing, improving, and maintaining the Service as directed by the School.
We do not disclose Education Records to any third party except as authorized by the School, required by law, or as otherwise permitted under FERPA.
Parents and eligible students retain all rights under FERPA, including the right to inspect, review, and request amendment of Education Records. These requests should be directed to the student's School, which may contact us to facilitate access.
We do not use Education Records to engage in targeted advertising directed at students.

6. COPPA Compliance

The Children's Online Privacy Protection Act (COPPA) applies to the online collection of personal information from children under 13. Chem-Titan is designed for use in educational settings under the direction of schools and teachers.

School Consent: When Chem-Titan is used in a school setting, we rely on the school to provide consent for the collection of student information on behalf of parents, consistent with COPPA's exception for educational services (16 CFR § 312.5(c)(3)).
Minimal Collection: We collect only the minimum information necessary to provide the educational service. For students under 13, we limit identifiable information to a first name or display name assigned by the teacher.
No Commercial Use: Information collected from children is used solely for educational purposes. We never condition participation on the disclosure of more personal information than is reasonably necessary.
Parental Rights: Parents may request to review their child's personal information, have it deleted, and refuse further collection by contacting their child's school or by emailing us at [email protected].

7. State Student Privacy Laws

We are committed to complying with applicable state student privacy laws, including but not limited to:

Student Online Personal Information Protection Act (SOPIPA) — California: We do not use student information for non-educational purposes, do not sell student information, and do not use student data to create advertising profiles.
New York Education Law § 2-d: We implement data privacy and security protections consistent with the requirements for third-party contractors handling student data.
Texas Education Code, Chapter 32: We comply with the student data privacy requirements applicable to operators of educational technology used in Texas schools.
We endeavor to comply with all applicable state laws governing student data privacy. Schools and districts are encouraged to contact us with specific compliance questions.

8. Data Security

We implement and maintain reasonable administrative, technical, and physical safeguards to protect Personal Information and Education Records, including:

Encrypted JSON data transmission over TLS 1.2 or higher for all data exchanged between users and our servers.
Encryption of sensitive data at rest.
Password hashing using bcrypt or equivalent one-way hashing algorithms.
Mandatory authenticated login for access to any personal data, progress records, notes, or account features — no Personal Information is accessible without valid credentials.
Access controls limiting employee and contractor access to Personal Information on a need-to-know basis.
Row-level security policies on all database tables, ensuring users can only access data associated with their own account or, for Educators, their authorized students.
Regular security reviews of our infrastructure and codebase.
Hosting on Cloudflare's infrastructure, which provides DDoS protection, Web Application Firewall (WAF), and SSL/TLS management.
Database hosting through Supabase with row-level security policies.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. In the event of a data breach involving Personal Information or Education Records, we will notify affected Schools and individuals as required by applicable law.

9. Data Retention and Deletion

We retain student data only for as long as the student's account is active or as needed to provide the Service.
When a School's agreement with Chem-Titan ends, or when a School requests deletion, we will delete or de-identify all student Education Records within thirty (30) days, unless retention is required by law.
Teachers and administrators may request deletion of their account and associated data at any time by contacting [email protected].
Certain anonymized and aggregated data (which cannot be used to identify any individual) may be retained indefinitely for the purpose of improving the Service.

10. Data Architecture and Login Requirement

Chem-Titan is designed as a server-side, login-required platform. Full use of the Service requires an authenticated account. User data, preferences, notes, progress, and session state are stored on Chem-Titan's secure servers or, where applicable, within the contracting School or District's designated data environment — not in the user's browser.

10.1 Encrypted Transmission

All data exchanged between a user's device and Chem-Titan's servers is transmitted as encrypted JSON payloads over TLS 1.2 or higher. This applies to all account data, learning content interactions, notes, progress records, and administrative actions. Data in transit cannot be read by third parties intercepting the connection.

10.2 No Persistent Browser Storage of Personal Data

Chem-Titan does not use localStorage, sessionStorage, or browser cookies to permanently store Personal Information or Education Records. Transient session tokens necessary for maintaining an active authenticated session may be held in memory or short-lived browser session storage and are invalidated immediately upon logout or session expiration. No personal data persists in the browser after the user signs out.

10.3 Data Residency

Student and teacher account data is stored either on Chem-Titan-managed infrastructure (currently Supabase, as described in Section 11) or, under applicable institutional agreements, within a storage environment designated or controlled by the contracting School or District. In both cases, data is accessible only to authenticated users with the appropriate permissions for that account.

Functional cookies may be used solely for session management and authentication. These cookies are strictly necessary for the operation of the Service and cannot be disabled without impairing functionality.

11. Third-Party Services

We use the following third-party service providers, each bound by contractual obligations to protect data:

Supabase (database and authentication) — data stored in SOC 2 Type II compliant infrastructure.
Cloudflare (content delivery, DNS, security) — provides DDoS mitigation and edge caching; does not access or process student content data.
Resend (transactional email) — used solely for teacher account emails (onboarding, password resets); never used for marketing; never used to email students.

We do not integrate with social media platforms, advertising networks, or behavioral analytics services.

12. Links to Other Websites

The Service may contain links to external resources for educational reference. We are not responsible for the privacy practices of external websites. We encourage users to review the privacy policies of any external site before providing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service (e.g., a banner notification) and update the "Last Updated" date at the top of this page. Continued use of the Service after the effective date of a revised Privacy Policy constitutes acceptance of the changes. For changes that materially affect how we handle Education Records, we will provide Schools with at least thirty (30) days' advance notice.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights regarding your data, or need to report a privacy concern, please contact us:

Email: [email protected]
Website: chem-titan.com

For FERPA-related requests, please contact your School's administration, who may work with us to address your request.