At a glance
Operate and improve CARL, support educators, and enable collaborative lesson sharing.
We do not sell personal information.
Student personal data is not required to browse or remix public lessons.
Information we collect
We collect information you provide directly to us, and information generated when you use CARL.
Information you provide
- Account information: name, email, school or organization affiliation.
- Profile information: bio, subjects, grades taught, location region.
- Content you create: lessons, components, resources, comments, ratings, and metadata.
- Communications: messages to support and feedback you share.
Information we collect automatically
- Usage data: page views, feature interactions, performance events, and standard log data.
- Device data: browser type, operating system, language, and approximate location derived from IP.
- Cookies and analytics: cookie identifiers and analytics events described in Cookies and tracking.
How we use your information
- Provide, maintain, and improve CARL features and reliability.
- Personalize your experience and surface relevant curriculum content.
- Process transactions and send related information such as receipts.
- Send technical notices, updates, and security or support messages.
- Respond to comments and questions, and provide customer support.
- Monitor and analyze usage to inform product decisions and prevent abuse.
- Comply with law and enforce our Terms of Service and policies.
Legal bases
Where applicable, we process personal information on the following bases:
- Contract to provide CARL when you create an account.
- Legitimate interests such as platform security, fraud prevention, and product improvement.
- Consent for optional features like marketing emails and certain cookies.
- Legal obligation where we must retain or disclose information under applicable law.
Data security
We use technical and organizational measures to help protect information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction.
- Encryption in transit and at rest where appropriate.
- Hardened hosting environment, access controls, and logging.
- Least privilege practices for staff and system credentials.
- Regular updates and security reviews of our infrastructure.
No method of transmission or storage is completely secure. We work to minimize risk and will notify you of material incidents as required by law.
Data retention
We keep personal information only as long as necessary to provide CARL, comply with our legal obligations, resolve disputes, and enforce our agreements. You can delete your account to remove most personal data. We may keep limited logs and records as required by law.
Children's privacy
CARL is designed for use by educators. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.
Your rights and choices
- Access and update your account information in Settings.
- Delete your account to remove personal data we store, subject to legal retention requirements.
- Opt out of non-essential emails by using unsubscribe links.
- Request a portable copy of your data, object to or restrict certain processing, and make other requests where laws like PIPEDA or GDPR apply.
To exercise rights, contact us at [email protected]. We may need to verify your identity.
AI features and content
CARL includes AI assisted tools for lesson planning and remixing. When you use these tools, your prompts and the related context you choose to include may be processed by our systems and trusted AI providers to generate results.
- We do not use private lesson content to train public models without your consent.
- You control what materials are shared with AI tools inside CARL. Avoid including personal information about students in prompts.
- Outputs may be inaccurate or incomplete. You are responsible for reviewing AI outputs for accuracy, safety, and appropriate classroom use.
Data residency and transfers
We aim to support Canadian education privacy requirements. Certain processing may involve trusted service providers in other regions. When information is processed outside your province or country, it may be subject to the laws of those jurisdictions.
We use contractual and technical safeguards with service providers to help protect personal information. Contact us if you need current information about data locations and subprocessors.
Changes to this policy
We may update this policy from time to time. We will post updates on this page and revise the effective date. For material changes, we may provide additional notice such as email or in product messaging.