Privacy Policy

Last updated: March 2026

1. Who We Are

OSSLTPrep is an online practice testing platform that helps Ontario high school students prepare for the Ontario Secondary School Literacy Test (OSSLT). The platform is provided to schools under a licensing agreement.

2. What Information We Collect

We collect the minimum information needed to provide the service:

Nickname: A student-chosen alias (e.g., "BluePanda17"). We do not collect real names from students.
School and Board: The school board and school name selected at login.
Test Responses: Answers to practice test questions, including written responses and essays.
Scores and Feedback: Auto-graded scores and AI-generated feedback on written responses.
Google Account (Dojo only): If a student uses the Literacy Dojo feature, they sign in with Google. We store only their display name for identification. We do not store Google email addresses or profile photos.

We do not collect: real names (students choose a nickname), home addresses, phone numbers, payment information, browser history, contact lists, device identifiers, or location data.

3. Why We Collect This Information

We use student information solely for educational purposes:

To deliver practice tests and provide instant feedback
To allow teachers to view student progress and grade written responses
To generate progress reports (CSV and PDF exports)
To provide AI-powered writing feedback using a third-party AI service

4. Third-Party Services

We use the following third-party services to operate the platform:

Google Firebase (Firestore): Cloud database for storing test attempts and scores. Data is stored in Google's Canadian data centre (northamerica-northeast2, Toronto).
Anthropic (Claude AI): AI service used to generate feedback on student essays and written responses. Student essay text and short-answer responses are transmitted to Anthropic's API servers for grading and returned with feedback. Anthropic's API data usage policy states that API data is not used for model training. We do not send student names, email addresses, or school identifiers to Anthropic — only the text of the written response and the question prompt. See Anthropic's privacy policy.
Netlify: Website hosting and serverless functions. Netlify processes API requests but does not store student data persistently.
Google Authentication: Used for Dojo sign-in only. Governed by Google's Privacy Policy.

5. Who Has Access to Student Data

Teachers at the student's school can view test attempts, scores, and written responses for students at their school only.
Platform administrators have access to all data for technical support and maintenance purposes.
Students can see their own scores and feedback after submitting a test.
Student data is never sold to third parties or used for advertising.

6. Data Retention and Deletion

Student test data is retained for the current school year.
At the end of each school year, schools may request deletion of all student data for their school.
Teachers can delete individual student attempts through the teacher dashboard.
To request deletion of all data associated with a student or school, contact us at the email below.

7. Student Rights

Students (and their parents or guardians) have the right to:

Access & Download: Students can download a copy of all their data (test responses, scores, feedback, and Dojo submissions) directly from the Dojo Profile page using the "Download My Data" button. Parents or guardians may also request a data export by contacting us.
Correction: Request correction of inaccurate information.
Deletion: Students can delete their account and all associated data from the Dojo Profile page. This permanently removes all test attempts, written responses, scores, feedback, and Dojo submissions. Parents or guardians may also request deletion by contacting us.
Withdrawal: Stop using the platform at any time. No data is collected unless a student actively takes a test.
Copyright: Students retain full ownership and copyright of all content they create on the platform.

8. Data Security

We protect student data through:

School-specific access codes required for login
Separate teacher access codes for the teacher dashboard
Server-side data storage (students cannot access other students' data)
HTTPS encryption for all data in transit
Firebase security rules restricting direct database access

9. Children's Privacy

OSSLTPrep is designed for use by Ontario secondary school students (typically ages 15-18) under the supervision of their school. Access is controlled by school-issued passwords. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page will reflect when changes were made. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Related Documents

Terms of Service
Data Processing Agreement (for school boards)
Parental Consent Form

12. Contact Us

If you have questions about this privacy policy or wish to exercise your data rights, contact us at:

reece@levelupclassroom.com