Creative Learning by Design ("CLD," "we," "our," or "us") is committed to protecting the privacy of students, educators, and administrators who use our platform. This Privacy Policy describes how we collect, use, store, and protect information in connection with the Creative Learning by Design platform, the website at cldedu.org, and the SupplyCloset iPad app.
1. FERPA Compliance
Creative Learning by Design acts as a school official under the Family Educational Rights and Privacy Act (FERPA) when processing student education records on behalf of educational institutions. We handle student data solely for the purpose of providing contracted services to your school or district, and we do not use student data for any other purpose.
Schools and districts that use CLD retain ownership of all student education records. CLD does not sell, share, or disclose student data to third parties except as required to provide our services or as required by law.
2. Information We Collect
From Educational Institutions
When a district or campus onboards with CLD, we may receive: student roster data (names, grade levels, enrollment status), staff user account information, IEP and special education records entered into the system, discipline and attendance records entered into the system, and other educational records necessary to provide platform services.
From Users
When educators and administrators use CLD, we collect: login credentials (username and hashed password), usage activity within the platform, content created within the platform (lesson plans, worksheets, IEP documentation, classroom posts, and file attachments), and communications submitted through contact and support forms.
From Visitors to a Campus
Where a campus uses the Visitor Log, visitors sign in at a front-office kiosk. With the visitor's consent, the kiosk may photograph a government-issued ID and read the information encoded in its barcode (name, address, date of birth, and ID number) to complete the sign-in record. This information is stored in the campus's visitor log and is used only for campus safety and visitor management.
Technical Data
We automatically collect certain technical information including IP addresses, an approximate (city-level) location derived from the IP address for the sign-in audit trail, browser and device type, screen size and time zone reported at sign-in, application error reports, and platform usage logs. This information is used for security, troubleshooting, and service improvement.
3. How We Use Information
We use collected information solely to:
- Provide and operate the Creative Learning by Design platform
- Maintain user accounts and authentication
- Send compliance deadline alerts and system notifications
- Respond to support requests
- Improve platform functionality and reliability
- Comply with legal obligations
We do not use student data for advertising, analytics sold to third parties, or any purpose unrelated to providing educational services to your institution.
4. Data Security
CLD implements reasonable technical and organizational security measures to protect data against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (HTTPS), role-based access controls, and regular security reviews.
Access to student data within the platform is strictly role-controlled — teachers see only their assigned students, campus administrators see only their campus, and district administrators see only their district.
5. Data Retention
Student and staff data is retained for as long as the institution maintains an active subscription with CLD. Upon termination of a subscription, we will delete or return data in accordance with the terms of the service agreement with the institution.
6. Third-Party Services
CLD may use third-party service providers for hosting, email delivery, text messaging, and platform infrastructure. These providers are contractually bound to use data only to provide services to CLD and are prohibited from using data for any other purpose.
Artificial intelligence features
Some optional tools use large language models provided by Anthropic to generate or summarize text. In the AI Assistant and in survey summaries, student and staff names are replaced with placeholders on our servers before any text is sent to the provider, and the provider's responses are mapped back on our servers. In the detention compliance check and in lesson-planning and worksheet tools, the text a staff member types is sent to the provider as written; staff are instructed not to enter student names or other identifying details into those fields. AI providers used by CLD do not train their models on this data. Districts may turn these features off for their campuses.
7. Cookies
CLD uses session cookies solely for authentication and maintaining user sessions within the platform. We do not use tracking cookies or advertising cookies.
8. Children's Privacy
CLD does not knowingly collect personal information directly from children under 13. All student data is provided by and controlled by the educational institution, which is responsible for obtaining appropriate parental consent under applicable law. Where students interact with a shared classroom or hallway kiosk, they do so under the supervision of school staff and the kiosk records only the check-in and check-out events the school has configured.
9. The SupplyCloset iPad App
SupplyCloset by CLD is the School Tracker platform delivered as an iPad app for staff, teachers, and supervised student use inside a school. The app displays the same platform described in this policy; it does not collect any information beyond what the platform collects through a web browser, and everything described above applies to it.
- Accounts. Sign-in uses the School Tracker account issued by your district. The app does not create accounts; accounts are created, changed, and removed by district administrators.
- Camera. The app asks for camera access only when a campus uses the Visitor Log kiosk to capture a visitor's ID, as described in section 2. It may also ask for photo library or camera access when you choose to attach a photo or video to a support request or a resource. Nothing is captured without your action.
- No tracking, analytics, or advertising. The app contains no advertising, analytics, or tracking software and does not share information with data brokers or ad networks. It does not track you across other companies' apps or websites.
- Settings stored on the device. The app stores its own settings (the device mode, the screen a shared iPad opens on, and a device PIN for shared iPads) on the iPad only. These settings never leave the device.
- Notifications. If a future version offers push notifications for Hall Monitor safety alerts, staff who opt in will have an anonymous device token associated with their account so that alerts can be delivered; notification text uses student initials only. Notifications can be turned off at any time in iPad Settings.
- Files you download. Reports and attachments you open from the app are kept temporarily in the app's cache on the iPad so they can be previewed, shared, or printed, and may be cleared by iPadOS at any time.
10. Contact
If you have questions about this Privacy Policy or our data practices, please contact us through our contact page. Requests to access, correct, or delete a staff account or student record should be directed to your district administrator, who can act on them within the platform.
This Privacy Policy is provided for informational purposes. Districts and campuses should review and execute a Data Processing Agreement with Creative Learning by Design before deploying the platform with student data.