Lirecoach

Lirecoach for schools

Student data privacy agreement

What a school agrees with us before its students use the app. Print it, sign it, and send it to info@lirecoach.com.

Last updated 22 October 2026

Between Noctara Enterprise LLC, Pasco, Washington, United States, which makes the Lirecoach app ("Lirecoach"), and the school or district named in the signature block ("the School").

1. What this agreement is for

The School wants its students to use Lirecoach, a reading and writing app for people with dyslexia. To do that, Lirecoach holds some information about the School's students and staff. This agreement says what that information is, what Lirecoach may do with it, and what it must never do.

2. Roles

  1. The School owns and controls its student data. Lirecoach holds it only to provide the app to the School.
  2. For FERPA, the School designates Lirecoach a school official with a legitimate educational interest, under the School's direct control as to the use and keeping of education records.
  3. For COPPA, the School consents for its students under 13 on behalf of their parents, for the educational use of the app only. Lirecoach uses that consent for nothing else.

3. The data

Held for each student

  • school email address, and the School it belongs to;
  • the classes their teacher put them in;
  • what they did in practice: which lessons were finished, and when;
  • words they looked up in the app, and when;
  • their reading settings (font, size, spacing, page colour, voice speed);
  • the text of documents they made or brought into the app;
  • for every phone or tablet used: the kind of device, app version, and when the app was last opened;
  • a password, stored only as a one way hash, if the student chose one.

Held for each staff member: email address, role (teacher or school admin), the classes they teach, and the lessons they wrote.

Never collected: names (other than as part of an email address), dates of birth, addresses, grades, test scores, reading ages, assessments or diagnoses, location, contacts, or advertising identifiers. The app keeps no score, percentage, streak or ranking of any kind.

Kept on the device and never sent: photos of pages, imported files, voice recordings and dictation audio.

4. Who sees what

  • A teacher sees the progress of students in the classes they teach: lessons finished and words looked up, with dates. A school admin sees this for the whole School.
  • No one at the School can read a student's documents. They are readable by the student alone.
  • No school can see anything belonging to another school.
  • Lirecoach staff have access only to keep the service running, to answer the School's requests, and as the law requires.

These limits are enforced in the database itself and tested.

5. What Lirecoach will never do

  • sell or rent student data, or give it away;
  • show advertising to students, or use student data for targeted advertising;
  • build a profile of a student for any purpose other than the School's educational use;
  • use student data to train artificial intelligence models;
  • use student data for marketing of any kind;
  • disclose student data except to the service providers in section 6, or as the law requires (in which case Lirecoach tells the School first, where the law allows).

6. Service providers

Lirecoach uses these providers to run the service. Each is bound by terms at least as protective as this agreement for the data it handles.

Provider What for Data it handles
Supabase (on Amazon Web Services, Sydney, Australia) Accounts and storage All data in section 3
Google Workspace Sending sign in codes and the welcome email Email address
Vercel The teacher website Staff sign in, pages shown to staff
Expo, Apple, Google Notifications, only if a student turns on news Notification address
Google Gemini Reading a hard photo, only when the student taps Send That one photo
dictionaryapi.dev and Wikipedia Word meanings The single word looked up, with no account information

Lirecoach tells the School before adding a provider that handles student data.

7. Security

  • Data is encrypted in transit (TLS) and at rest.
  • Access is limited by role, as in section 4, enforced in the database, and tested.
  • Lirecoach staff access is limited to those who need it.
  • If a breach affects the School's data, Lirecoach tells the School within 72 hours of learning of it, with what is known, and helps the School meet any notice duties it has.

8. Requests from parents, students and the School

  • A parent or eligible student who wants to see, correct or delete data asks the School; Lirecoach helps the School answer within 30 days.
  • The School can remove a student from a class, and remove a staff member, at any time from the teacher website. It can ask Lirecoach to delete any student's data, and Lirecoach does so within 30 days. A student can delete their own account in the app.

9. When the agreement ends

  • Within 60 days of the School's licence ending, or sooner on the School's written request, Lirecoach deletes the School's student and staff data, and confirms in writing.
  • Before deletion, on request, Lirecoach gives the School a copy of its data in a common file format (CSV).
  • Data in backups is deleted as the backups expire, within 30 further days.

10. General

  • This agreement takes priority over any other terms between the parties about student data, including the app's own terms and privacy policy.
  • Governed by the laws of the State of Washington, United States, unless the School's own state law requires otherwise for student data, in which case that law applies.
  • Changes must be in writing and signed by both parties.

Signatures

Noctara Enterprise LLC (Lirecoach) The School
Name
Title
School or district
Signature
Date