Privacy Policy

TruePaper (“we”, “us”) is operated by TruePaper. This policy explains how we handle personal information when you use https://www.truepaper.school and related services.

Privacy questions: privacy@truepaper.school.

Teachers (registered accounts): name, email address, password (stored in hashed form by our authentication provider), profile and role, forms and questions you create, live session metadata, and grading data.

Students (typically without an account): a display name you provide, session join codes, written and multiple-choice responses, anonymous device identifiers used to save progress and support rejoin, and optional personal rejoin codes.

Automatically: authentication cookies, locale preferences, server and security logs (IP address, browser type, timestamps), and error diagnostics needed to keep the service reliable.

We do not intentionally collect payment card data through TruePaper today. If paid features are introduced, we will update this policy before charging you.

Contract: to provide accounts, forms, live sessions, autosave, live feedback, grading, and exports you request.

Legitimate interests: to secure the platform, prevent abuse, improve reliability, and support teachers in running classes—balanced against your rights.

Consent: where required for optional cookies or marketing communications you opt into.

Legal obligation: when we must retain or disclose information to comply with law.

Supabase — authentication, database, and file storage (processing may occur in the United States and other regions where Supabase operates).

Google — optional “Sign in with Google” for teachers (Google’s privacy policy applies to that sign-in flow).

Vercel — application hosting and content delivery.

We do not sell your personal information. We do not share student answers with advertisers.

Teacher account data is kept while your account is active and for a reasonable period afterward so you can recover work or resolve disputes.

Live session and student response data are kept according to your use of the product (including when you delete sessions from your dashboard) and our backup cycles.

Server logs are rotated on a short schedule unless needed for security investigations.

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing, and to data portability.

You may withdraw consent where processing is consent-based (this does not affect prior lawful processing).

EU/UK users may lodge a complaint with their local supervisory authority.

To exercise rights, email privacy@truepaper.school. We respond within the timeframes required by applicable law.

Schools and districts acting as controllers may request a Data Processing Agreement (DPA) describing our subprocessors and security measures—contact us at the same address.

We do not sell or share personal information for cross-context behavioral advertising as defined under California law.

California residents may request access, deletion, or correction, and may limit use of sensitive personal information where applicable.

Do Not Sell or Share My Personal Information: we do not sell personal information. To confirm or submit a request, email privacy@truepaper.school with the subject line "California privacy request".

TruePaper is designed for classroom use under teacher direction. Teachers and schools are responsible for obtaining any parental or institutional consent required for student participation.

Students should not enter more personal information than their teacher asks for (typically a first name or display name).

We use industry-standard measures including encrypted connections (HTTPS), access controls, and row-level security in our database. No online service can guarantee absolute security.

If you access TruePaper from outside the United States, your information may be processed in the U.S. and other countries where our providers operate. We rely on appropriate safeguards where required by law.

We may update this policy from time to time. Material changes will be announced on this page and, where appropriate, by email to registered teachers at least 30 days before they take effect when practicable.

Effective date: June 1, 2026. Last updated: June 1, 2026.