Privacy Policy

Last updated: September 26, 2026

The short version: ClassroomOS is built so we can't see your students' information. Class lists and classroom activity stay on the teacher's own devices, encrypted. We use first names only. We never sell data, show ads, or track anyone, and our servers never store anything readable about a student.

Who we are

ClassroomOS is made by Tirré Logston, an educator. Questions: support@tirrelogston.com.

What ClassroomOS handles

Teachers may enter: student first names (last names are automatically shortened to an initial), class or period names and times, a daily schedule, hall-pass settings, and the teacher's display name. During the day ClassroomOS records attendance status and hall-pass activity (who has a pass, for how long, and who is in line).

If the teacher turns on the optional morning check-in, students can also answer short questions on the door tablet: how they are feeling (for example "Great" or "Worried"), their lunch choice, and a "Would you rather" vote. Feelings answers are visible only to the teacher on the teacher's own phone or computer. They are never sent to the smartboard, never shown to other students, and the tablet doesn't keep them. The board shows lunch totals only, never who chose what. Answers reset every day.

The smartboard can also show a timer, the day's learning target, a calendar, a to-do list, a random name picker (which briefly shows a first name when the teacher picks someone), student groups, and classroom jobs (first names). For "Would you rather" the board shows vote totals only, never who voted for what. "Keep apart" pairs the teacher sets for making groups are visible only to the teacher.

Videos and slides. If the teacher adds a YouTube video or Google Slides presentation to the board, that box is loaded directly from YouTube or Google, and their privacy policies apply to it. YouTube videos use YouTube's privacy-enhanced (no-cookie) player. ClassroomOS sends them nothing about the class; the only thing they learn is the address of the ClassroomOS page the video is shown on. Nothing loads from them unless the teacher adds that box.

If the teacher adds the Reward Meter box, the board loads our Reward Meter from meter.tirrelogston.com. It measures classroom noise on the board computer; audio never leaves that computer.

We do not collect student last names, photos, email addresses, phone numbers, locations, or accounts. Students never sign up or log in. Nurse and office passes can be set to private so students' names aren't shown on the board.

Where the data lives

The teacher's host device. All classroom data is stored in the browser on the device the teacher chooses as the host, and in any save files the teacher downloads. Save files are encrypted with a password only the teacher knows.
Paired school devices (board and tablet). They receive only what they need to show (for example, first names for check-in). They forget everything at the end of the day unless the teacher chooses to keep them paired for the school year, and the teacher can unpair them at any time.
Our relay. Devices talk through a relay hosted on Cloudflare. Every message is end-to-end encrypted before it leaves a device, and the relay has no key to open it. The relay forwards messages and does not keep them. The one exception: encrypted alerts for the teacher's phone or watch are held for up to 10 minutes so a locked phone can fetch them, then deleted. We cannot read them.
Phone and watch alerts. To wake a locked phone, the relay sends an empty signal through the phone's push service (such as Google's or Apple's). That signal contains no classroom information.

What we never do

Sell, rent, or trade any information.
Show ads or use student information for marketing or profiling.
Use analytics, trackers, or third-party scripts. ClassroomOS loads no outside fonts or code. (The only exception is a YouTube or Google Slides box the teacher chooses to put on the board, described above.)
Use student information for anything other than running the teacher's classroom.

How long data is kept

Today's attendance, hall-pass activity, feelings answers, lunch choices, "Would you rather" votes, groups, and picker history reset automatically at midnight or when the teacher starts a new day.
Class lists and settings stay on the teacher's host device until the teacher deletes them.
School devices forget everything at the end of the day by default, or when the pairing period chosen by the teacher ends.
Encrypted alerts on the relay are deleted within 10 minutes.

Deleting data

Teachers can delete a single student, a whole class, or everything (which also unpairs every device) from the Data and Setup screens. Because the data lives on the teacher's devices, deletion is immediate and there is no copy on our side to remove.

Schools, students, and the law

ClassroomOS is designed to support compliance with student-privacy laws such as FERPA, COPPA, and Oregon's Student Information Protection Act (ORS 336.184) by collecting as little as possible and keeping it under the teacher's control. It is used only for school purposes. Teachers should follow their school or district's rules for approved classroom tools. Schools and districts with questions, or who need a data privacy agreement, can contact us at the address above.

Security

Classroom data is encrypted with AES-256-GCM. Pairing a board or tablet uses a one-time key exchange so the relay never sees the device's key. Save files are protected with your password using PBKDF2. Keep your password safe; we cannot recover it.

Changes

If this policy changes, we'll update the date above and describe what changed.