For district technology and privacy reviews

What we hold about your students, and what we do not

Written for the person filling in a vendor review form, not for a marketing page. If something you need is missing, email ejanecek@quantaim.org and you will get a straight answer from the person who built the platform.

What a student account contains

This is the complete list. QuantAim does not ask for a date of birth, a home address, a phone number, a photograph, or a government identifier of any kind.

Field	Why it exists	Required?
Name	So their teacher can identify them in the class roster and gradebook.	Yes
Email address	Login, password reset, and email verification.	Yes
Grade level	Used during onboarding to point a student at the right course.	Optional
Country	Used for currency and examples only.	Optional
Coursework and answers	Quiz attempts, written responses, simulated trades and the reasoning written for each.	Created by use
Progress data	Lessons completed, mastery per concept, time on task.	Created by use

Simulated portfolios use imaginary money. No student ever supplies a payment method, a brokerage account, or any real financial information, and QuantAim holds none.

Who else processes this data

The complete subprocessor list. Student names are never sent to any of them.

Service	What it does	What it receives
OpenAI	The AI tutor, first-pass marking of written practice, and quiz hints.	The text of the question and the student's own written answer. No name, no email, no school.
Brevo	Sends transactional email: verification, password reset.	Email address and the message body.
Google	Google Classroom roster import, only if a teacher chooses to connect it.	Course and roster data the teacher authorises. Read-only.
Stripe	Payment processing for individual subscribers only.	Nothing for school-licensed students, who never pay.
Market and economic data providers	Live prices and economic indicators for the simulators.	Nothing. These are outbound lookups and carry no student data.

Your rights, and how to exercise them today

These are built and working now, not roadmap items.

Under FERPA, QuantAim acts as a school official with a legitimate educational interest, under the direct control of the school. Student records are held on the school's behalf and are not used for any other purpose.
QuantAim is 13 and over, and that is enforced, not just stated. Signup asks for year of birth and the server refuses to create an account below the floor. No under-13 account is created and then cleaned up; it is refused outright, so there is no child's data to hold in the first place. Year rather than full date of birth, because the floor is all we need to know.
Any user can export everything held about them as a single JSON file, from the Privacy Centre in their account.
Any user can delete their account and its data from the same place. A school can request deletion for a class or a whole school by email, and it will be actioned.
Student data is never sold, rented, or used to train advertising models, and QuantAim shows no advertising to anyone.

What we do not have yet

Stated plainly, because you would find out during review anyway and an overstated claim would cost more than an honest gap.

No SOC 2 report. QuantAim is a small company and has not completed a SOC 2 audit.
No live Clever or ClassLink sync yet. OneRoster CSV import works today, as does Google Classroom roster import. What is missing is the nightly automatic sync, so a roster change at your end means re-uploading rather than updating by itself.
No signed state alliance DPA on file yet. QuantAim will sign your district's own Data Privacy Agreement, including a state alliance template. Send it and it comes back signed.

Send us your paperwork

Email ejanecek@quantaim.org with your district's DPA, vendor questionnaire, or security review and it will be completed and returned. A W-9 and a printable quote for a purchase order are at quantaim.org/purchasing.php.

Get started Full privacy policy