PencilGrade — privacy, built in from the start

Our commitments

Your center's data lives in its own isolated container. Every center is separated from every other center, with its own encryption key. One center can never see another's students.
We capture the bare minimum. A first name and a last initial — that's it. No birthdays, no grades, no addresses, no photos. Nothing we don't strictly need.
We never keep the read. A worksheet is read once and immediately discarded — we never store a copy of your students' work.
We never sell or advertise on your data — and our AI providers are contractually barred from training their models on your students' work.
Everything is encrypted in transit and at rest, with access controls and audit logging.
You stay in control. Data is deleted on request or when a center leaves, and a data-processing agreement is available for your center.

PencilGrade is designed to align with student-privacy expectations such as FERPA and COPPA. A data-processing agreement (DPA) is available on request — email contact@pencilgrade.com.

Why we built it this way

Because the safest data is the data that was never collected — and because trust is the whole product.

🧩Isolation

Separate, encrypted storage per center means a problem at one center can never reach another's records.

🗑️Minimalism

We collect almost nothing, and keep no reads. There's simply very little to expose, misuse, or lose.

🤝Accountability

Encryption, audit logs, deletion on request, and a DPA — the posture a business buyer should expect.

Questions about privacy?

We're happy to walk your center or its counsel through exactly how PencilGrade handles data.

contact@pencilgrade.com