School Student Data Notice

Operator

Why the school is seeing this notice

Number Ninjas is requesting authorization to collect and process student personal information for the school’s educational use. For Google Classroom, a teacher may view and select available course metadata first, but roster access and student processing will not begin until school authorization is recorded and the teacher separately grants the necessary Google permissions. For ClassLink, the school or district manages the connection and the explicitly authorized classes shared through its roster service; authorization must be recorded before Number Ninjas reads that roster. Provider sign-in alone is not school authorization.

Information Number Ninjas will collect

• Google student identifier, display name, and class membership;
• for ClassLink connections, district, account and roster identifiers, student or teacher role, names, class identifiers and titles, membership, and status;
• relevant coursework context;
• gameplay, questions, answers, correctness, timing, and scores;
• progress and mastery information;
• diagnostic participation, attempts, answers, timing, and results;
• cosmetic rewards, inventory, unlocks, and character choices; and
• the categories listed above; we will update this notice and obtain additional authorization where required before collecting a materially new category of student personal information.

Google may provide a student email address during roster synchronization and student sign-in. It is used transiently for authentication, account matching, or fallback and is cleared before the active student record is stored. Student sign-in cannot create a new school-connected account: the Google identifier must match a student already provisioned from an authorized roster. Student display names from the authorized roster are retained for teacher dashboards.

ClassLink sign-in likewise requires an account already provisioned from an authorized district roster. Identifiers are scoped to the district; ClassLink and Google accounts are not automatically merged. Email and other unused district roster fields are not retained. ClassLink passwords are not received or stored, and the sign-in access token is not retained after the authenticated profile lookup. See the ClassLink privacy disclosure for details.

How Number Ninjas uses the information

We use student information only for authentication and account matching, classroom membership, math gameplay, assignments, diagnostics, progress and mastery, authorized teacher reports, teacher-directed Google Classroom actions, security, support, and operation, maintenance, and improvement of the authorized educational service.

Uses we prohibit

Student information is not used for behavioral or targeted advertising, marketing to students, sale, data brokerage, unrelated profiling, unrelated product development, or general-purpose AI or machine-learning training.

Service providers

Student information may be processed by providers strictly necessary to operate Number Ninjas: DigitalOcean for application and infrastructure hosting and backups; self-hosted PostgreSQL and Redis running on DigitalOcean infrastructure; local Docker and system logging on DigitalOcean for security and operations; Google Classroom and Google Workspace/Gmail for teacher-directed integrations and email communications; and ClassLink and the school-designated roster service when the school uses that connection. Number Ninjas does not send answers, scores, progress, or diagnostic results back to ClassLink or the roster service. These infrastructure disclosures are integral to operating Number Ninjas and cannot be separately declined while using the applicable service. We will update this notice and obtain additional authorization where required before a material change to providers or disclosure purposes. Rybbit receives teacher-only analytics and no student or guest events. See the Privacy Policy for the current provider list and purposes.

Retention

• Student gameplay: 13 months after collection.
• Diagnostics: 25 months after collection.
• Inactive classroom relationships: 90 days after the relationship becomes inactive.
• Operational/security logs: no more than 30 days after creation.
• Active Redis game state: no more than four hours after creation or refresh.
• Backups: no more than 35 days after creation.

These periods support student progress, classroom reporting, periodic diagnostics, security, service continuity, and the applicable school relationship. A relationship deadline may shorten applicable student-record retention. Children’s personal information is not retained indefinitely. Non-identifying daily and weekly aggregates may be retained longer only if they cannot reasonably be linked to a student or user.

School controls

The school may request the categories and purposes of information held, review applicable course and student information, export applicable information where reasonably available, request correction, request individual/class/school-wide deletion, stop future collection or use, or terminate authorization. Use dashboard privacy controls or contact privacy@yinyang-interactive.com. Active-system deletion is targeted within 24 hours; backups expire within 35 days. A stopped or deleted student is suppressed from routine roster recreation.

For ClassLink connections, coordinate roster and authorization changes with the district integration administrator. Deleting a Number Ninjas account does not delete its source ClassLink account or district roster. Disabling sign-in alone does not delete stored Number Ninjas records or revoke existing school authorization.

Parent requests

Parents and guardians may contact privacy@yinyang-interactive.com to request access, correction, deletion, withdrawal of permission, or a stop to further collection. We may coordinate school-managed education-record requests with the school after verifying identity and authority.