™Privacy promise
Last updated October 21, 2026
Students join with a code. No student emails. Names never leave your computer. No ads to students. We never sell data. Delete everything any time.
What leaves a device
Student nickname → student device only
Teacher roster names and optional family/student emails → locked on the teacher’s computer with their passphrase → only the locked copy is saved to Scholar
Class code → numbered label + hashed device token/recovery code → classroom storage
Submitted work → server-side identifier redaction → AI feedback → student and class teacher
Local email recipients → teacher-selected Gmail, Outlook or email app draft → teacher reviews and sends
Opening an email draft passes recipients to the mail service you choose; Scholar does not send messages or hold those addresses.
Your roster key, on any computer
Real names never reach Scholar in readable form. When you create a roster key, your computer locks the names with your passphrase (PBKDF2-SHA256, 600,000 rounds, then AES-256-GCM encryption) before anything is saved. Scholar keeps only that locked copy, so after a cleared browser, a school laptop reset or a switch to your home computer, you sign in, type your passphrase, and the names come back.
We never see your passphrase or the names, and we never log them. Unlocked names stay in the page’s memory only and lock again after 15 minutes without activity.
When you set it up, you get a one-time Recovery Kit: 24 words that can also unlock your roster key. Print it and keep it safe. If you lose both your passphrase and your Recovery Kit, Nyclogic AI™ cannot recover the names. Your class work stays, labelled Student 1…n. You can also download an encrypted backup file.
AI processing
Before an AI prompt leaves Scholar, a conservative text filter replaces detected names, contact details, school names, labels and identifiers. Automated detection is not perfect; do not paste personal details. AI storage is disabled using the provider’s store:false setting. This is a request, not independently verified zero retention or a no-training guarantee. [CONFIRM PROVIDER CONTRACT AND RETENTION TERMS]
Sub-processors
- Lovable Cloud (Supabase): classroom storage and teacher authentication.
- Lovable AI Gateway / OpenAI: lesson generation, feedback and translation of scrubbed text.
- Google / Apple: optional teacher sign-in only.
Your controls
Export class data as CSV and JSON. Delete students and their work immediately. Delete classes or your account with 7 days to undo. Archive a class to start default 12-month student-work retention; this can be switched off. Deletion and export remain available when free access ends.
District agreement
Download draft Data Privacy Agreement template
Provided by theveteraneducators AI LLC (Nyclogic AI™). All legal commitments require lawyer review and signed terms.