Privacy at Multilinguals
We built Multilinguals for classrooms with real students. That means privacy is not optional, not configurable away, and not bolted on. Seven principles that define how we handle student data.
§01 — §07 · Read each below
- 01
Data minimization, by design
K-8 students join by a three-letter code and give a first name or an alias. We collect the minimum needed to run the classroom support. Students do not have accounts, profiles, or persistent identity.
- 02
Server-side AI only
All translation, text-to-speech, and other AI processing happens on our servers. Student devices never contact external AI vendors. Student records such as names, aliases, and session data are never sent to AI vendors; vendors see only lesson content and teacher speech, processed server-side.
- 03
No advertising, no data sale
We do not sell student data. We do not show ads. We do not build student profiles for commercial purposes. Our business model is school and district licensing, never student data.
- 04
Short retention windows
K-8 session data is retained for 30 days by default. HS session data for 90 days. HS transcript segments for 7 days. We are building district controls to set shorter windows.
- 05
Teacher authority
Teachers control what students see. Students cannot access AI features, external content, or each other's data. The teacher is the gatekeeper.
- 06
Designed for compliance
Designed with FERPA and COPPA considerations in mind from the start. We will work within your district's Data Privacy Agreement process.
- 07
No dark patterns
Nothing tries to trick students into engagement. No streaks, no badges, no notifications that shame a student for inactivity. The tool exists to make a lesson accessible, not to manufacture time-on-app.
What we collect, by mode
Exactly what is collected, for how long, and who can see it.
Table A
Student data collected by product mode
Student identity
K-8
First name or alias. No accounts, no persistent identity.
High school
Minimal: provider ID, first name, and an email hash (not the email itself).
Data collected
K-8
Session participation, selected language, activity responses.
High school
Above, plus placement results and transcript display preferences.
Retention
K-8
30 days for session data, then deleted.
High school
90 days session data. 7 days transcript data.
External AI vendor PII
K-8
No student records sent.
High school
No student records sent. Transcript text is processed server-side, and teachers review every segment before students see it.
Advertising or sale
K-8
Never.
High school
Never.
Compliance documentation
IT whitelist guide, security overview, and DPA support on request.
District evaluations usually want a security brief, a data flow diagram, and a DPA. We have the first two ready to send, and we will work through your district’s DPA process with you.
Request documentation