Last updated: September 9, 2026 · Version 2026-09-09
This notice supplements SwayForm LLC's general Privacy Policy and applies specifically to students who use the Learning Portal or S1 hardware through their school, including children under 13. Where anything here conflicts with the general Privacy Policy, this notice controls for student data. Schools should also see the School Data Agreement.
On this page
This notice applies to any K-12 student who is given access to the Learning Portal or S1 hardware through their school, regardless of age, and specifically addresses the additional protections that apply to children under 13 under the Children's Online Privacy Protection Act ("COPPA").
SwayForm operates as a school service provider under COPPA. For students under 13, SwayForm relies on authorization from the student's school (acting in place of a parent for the limited purpose of the school's educational program) where COPPA permits this — for example, for a properly limited educational technology in a school context. Where SwayForm cannot rely on school authorization, or where a school has not authorized SwayForm's collection, we will seek verifiable parental consent before collecting personal information from a child under 13.
Specifically, and consistent with COPPA:
| Category | Examples |
|---|---|
| Identity & account | Name, school-provided or personal email address, school name, account role, robot-seat assignment |
| Learning activity | Lesson/activity completion, current step; code written in the editor (stored locally, not on SwayForm's servers); and, when a student submits code to run on physical robot hardware, the submitted program and its output (stored on SwayForm's servers temporarily to process that request — see the Privacy Policy and Data Retention & Deletion Policy) |
| Technical | Session cookie, IP address and request logs from our hosting provider |
| Camera/video/biometric | None collected by SwayForm as of the date of this notice — see Section 10 |
We do not knowingly collect more than this from students, and we do not ask students to supply information (such as a home address or phone number) beyond what the school itself provides for account setup.
We do not use student information to serve advertising, to build a profile of the student for commercial purposes, or to train general-purpose AI models.
We disclose student information only: (a) to the service providers listed in the Privacy Policy's subprocessor table, each of which may use it only to provide its contracted service to SwayForm; (b) to the student's own school, which already controls the underlying roster; (c) where required by law or to protect the safety of a student or others; or (d) as part of a business transfer described in the Privacy Policy. We do not disclose student information to third parties for their own marketing or commercial purposes.
SwayForm does not sell student personal information under any circumstances, does not use it for targeted or behavioral advertising, and does not create a commercial advertising profile of any student.
For schools subject to the Family Educational Rights and Privacy Act ("FERPA"), SwayForm operates consistent with the "school official" exception: we use education records only for the purpose the school has authorized, under the school's direct control with respect to the use and maintenance of those records, and we do not redisclose education records except as the school authorizes or as law requires.
See the Data Retention & Deletion Policy for full detail. In short: a student's account and progress data is retained while the student's account is active, and is purged within 30 days of a verified deletion request or account closure. If an entire school leaves the platform or requests full deletion, SwayForm will complete that deletion within 45 days of a verified request from an authorized school representative.
As explained in the Privacy Policy, SwayForm does not use facial recognition, voiceprint recognition, or gesture-based biometric identification, and does not create biometric identifiers from classroom images, video, or sensor data. S1's camera and sensor processing runs locally on the robot; classroom images and video are not uploaded to SwayForm's servers automatically, are not stored by SwayForm, and are not recorded by SwayForm, as of the date of this notice. If this ever changes, we will update this notice and the Privacy Policy before the change takes effect, and will treat any resulting video or biometric data with the heightened protections COPPA and Illinois-style biometric privacy laws require, including specific consent before enabling any such feature.
Student information is protected using the safeguards described on the Security page. No system can be guaranteed 100% secure. If we become aware of a security incident affecting student information, we will notify the affected school(s) and provide notifications required by applicable law.
We will update the version number and "Last updated" date whenever this notice changes, and will provide advance notice of material changes to school administrators on file before the change takes effect where practical.
Questions, review requests, or deletion requests can be sent to contact@swayform.net, or routed through your school. SwayForm LLC is based in Atlanta, Georgia.