Student data never reaches us
This isn’t a policy we could quietly change — it’s how the software is built. There is no account to create and no cloud to opt out of.
The commitments
- The app runs on your computer. There is no SimpleGroup server holding your roster.
- Student data moves between your machine and your district’s Canvas — nowhere else.
- No analytics, no telemetry, no crash reporting, no AI services. None.
- Your Canvas token is encrypted on disk and never shown, logged, or sent anywhere.
- Nothing is written to Canvas until you read the plan and confirm it.
What districts ask
Where does the data live?
In a database file on the teacher’s own machine, alongside whatever their district Canvas already holds. We operate no server that student records pass through, so there is no breach surface on our side to ask about.
What leaves the machine?
Exactly two kinds of outbound connection: your district’s Canvas, and Google sign-in for the teacher’s own account. That is the whole list, and it is enforced in the code rather than promised in a policy.
What shows on the projector?
The student-facing view hides scores and criteria, uses non-ordinal team names, and orders groups independently of their scores — so nothing about a student’s ratings is legible from the back of the room.
Can a record be recovered?
Removing a student from a roster is permanent, and the app says so before you confirm. The teacher’s database file is the only copy of their trait ratings — Canvas holds none of them, by design.
Do you collect demographics?
No, and we won’t ship a grouping criterion that stands in for one. Gender was a built-in trait until we removed it: grouping on a protected characteristic carries civil-rights exposure, and shipping the trait pre-seeded amounted to suggesting it.
Accessibility and a VPAT
We build to WCAG 2.1 AA and know districts ask for a VPAT. A formal audit and the document itself are on the roadmap, not finished — we’d rather say so than claim a conformance level we haven’t tested.
Bring it to your district.
We’re happy to go through the egress list, the data model, or anything else your review process needs.