Privacy & analytics.

PACT stores the information needed to run classrooms and uses limited first-party analytics to understand adoption. This page describes the current pilot.

Classroom information

Teacher profiles, classes, assignments, uploaded files, local policies, student display names, journal entries, pasted-text metadata, and signed disclosures are stored in PACT’s hosting database or file storage. Teachers can access their own classes. Students can access their own work through their private return code or an explicitly linked Google or email account. Return-code and account-session tokens are stored as hashes on the server.

School details and private feedback

Teachers may optionally add their school’s country or territory, region and school type. These self-reported details are grouped in the owner dashboard; PACT does not infer location from IP addresses. Student counts use their class teacher’s school details.

Teachers, students and school representatives may voluntarily submit a rating or a one-line comment to the PACT owner. Feedback is private, not a public testimonial. Only your latest response per role is kept. You can update or remove it in your workspace. Please do not include names, contact details or private coursework. Feedback is stored until you remove it or request administrative deletion, separately from optional analytics.

PACT also stores the date an assignment is published and the first time a student saves valid journal entries for every stage. These operational milestones support completion and repeat-use counts; they do not measure grades or learning gains.

Optional learning measurement and surveys

Schools may authorize diagnostic scores, short quiz responses, teacher rubric marks, comparable follow-up results, and external assessment records. Teachers must confirm the applicable authorization and consent or other lawful basis and select covered students. These records use existing class identities; PACT does not infer that memberships in different classes are the same person.

Students see their own permitted assessments and results; teachers see their classes. The owner receives aggregate educational reports with small-group suppression, not student answers, identities or individual scores. Score changes and survey perceptions are reported separately and do not establish that PACT caused improvement.

Structured surveys are optional and dismissible. Each scheduled timepoint has one response per eligible person. You can remove your submitted response from the survey card. Comments remain private; owner reports may include aggregate keyword themes, never public quotations or raw comments in educational exports.

Teachers set a school-approved retention period of 1–730 days for optional assessments, surveys and imports. Expired records immediately stop appearing and are deleted on the next authorized teacher measurement or owner evidence request. This is request-driven cleanup, not a scheduled background deletion job. A teacher can remove a student's optional class outcomes and surveys when handling an authorized withdrawal. Score corrections preserve revision history until removal or expiry. Import audit metadata records the authorization reference and row count.

PACT does not send these educational outcomes or survey responses to an AI provider or use them for model training. Research publication, external sharing and any future model-training use require separate authorization and governance. No external assessment provider is automatically connected.

Optional usage analytics

PACT records known page paths, resource-link and contact-link clicks, a random browser-tab session identifier, the referring website’s hostname, and event times. A visit is an estimate based on a session that renews after 30 minutes of inactivity. PACT also records daily activity of internal teacher and student profile IDs and counts requests to selected classroom features, including AI suggestions. The owner dashboard exposes aggregates, not individual journal contents.

Analytics do not collect journal text, uploaded file contents, email addresses, IP addresses, browser fingerprints, full referral URLs, class codes, or form messages. This describes PACT’s application analytics; the hosting and sign-in providers may process technical information needed to operate their services. No separate advertising analytics service is installed.

Retention and access

Optional analytics are kept for up to 90 days, with older records removed on the next analytics collection or owner-dashboard request. Existing coursework records provide current totals such as teacher profiles and signed disclosures, even when optional analytics are off. Coursework is retained in this pilot until removed administratively; there is no automatic coursework deletion schedule. Contact the site owner for an access, correction, or deletion request.

Sign-in and device storage

ChatGPT sign-in is provided by the hosting platform. When enabled, Google sign-in requests basic identity information (openid, email, and profile) to verify your account. PACT keeps the Google subject identifier and a session, and does not retain Google access or refresh tokens. It does not request Gmail messages or Drive access. Sign-in methods that prove ownership of the same email address return to the same workspace. PACT stores a hash of that verified address and account links to preserve your profile and coursework. You can also connect another sign-in method from an authenticated workspace or journal.

Email sign-in uses Supabase Authentication and the configured email delivery provider to send and verify a one-time code. These providers process your email address for authentication and delivery. PACT keeps a hashed provider identity and a session lasting up to 30 days; it does not retain your code or Supabase access and refresh tokens. A pending sign-in request temporarily stores your email address, expires after ten minutes, and is removed on successful verification, cancellation, or the next code request after expiry. Hashed email addresses and short-lived counters help limit repeated code requests.

Essential cookies keep you signed in. Browser storage can hold student drafts and a private return code for offline use. This device also remembers your last teacher sign-in method, without your email or password, to help you return to the right account. On shared devices, sign out and clear your saved coursework. Optional analytics use session storage and a preference cookie; browser Do Not Track and Global Privacy Control are honored for future optional collection.

AI and spoken journals

If a teacher requests AI autofill or planning suggestions, the relevant assignment context and extracted material text are sent to the configured AI provider. Review materials before submitting personal or confidential information. Spoken journals use the browser’s speech recognition feature, which may use that browser’s service. PACT stores the resulting transcript rather than an audio file.

Questions and requests

Contact jiwoohwang8@gmail.com. Schools should agree the pilot’s use, appropriate accounts, and coursework retention with their community before classroom adoption.