Student data never reaches us
This isn’t a policy we could quietly change — it’s how the software is built. There is no account to create and no cloud to opt out of.
The commitments
- The app runs on your computer. There is no SimpleGroup server holding your roster.
- Student data moves between your machine and your district’s Canvas — nowhere else.
- No analytics, no telemetry, no crash reporting, no AI services. None.
- Your Canvas token is encrypted on disk and never shown, logged, or sent anywhere.
- Nothing is written to Canvas until you read the plan and confirm it.
What districts ask
Where is the data stored?
In a database file on the teacher’s own machine, alongside whatever their district Canvas already holds. We operate no server that student records pass through, so there is no breach surface on our side to ask about.
What does the app connect to?
Your district’s Canvas, and nothing else. That is the whole list, and it is enforced in the code rather than promised in a policy.
What shows on the projector?
The student-facing view hides scores and criteria, uses non-ordinal team names, and orders groups independently of their scores, so nothing about a student’s ratings is legible from the back of the room.
Can a record be recovered?
Removing a student from a roster is permanent, and the app says so before you confirm. The teacher’s database file is the only copy of their trait ratings. Canvas holds none of them, by design.
Do you collect demographics?
No, and we won’t ship a grouping criterion that stands in for one.
Bring it to your district.
We’re happy to go through the egress list, the data model, or anything else your review process needs.