School Student Data Notice

Operator

Why the school is seeing this notice

Number Ninjas is requesting authorization to collect and process student personal information for the school’s educational use. A teacher may view and select available course metadata first, but roster access and student processing will not begin until the required school authorization is recorded and the teacher separately grants the necessary Google permissions.

Information Number Ninjas will collect

• Google student identifier, display name, and class membership;
• relevant coursework context;
• gameplay, questions, answers, correctness, timing, and scores;
• progress and mastery information;
• diagnostic participation, attempts, answers, timing, and results;
• cosmetic rewards, inventory, unlocks, and character choices; and
• the categories listed above; we will update this notice and obtain additional authorization where required before collecting a materially new category of student personal information.

Google may provide a student email address during roster synchronization and student sign-in. It is used transiently for authentication, account matching, or fallback and is cleared before the active student record is stored. Student sign-in cannot create a new school-connected account: the Google identifier must match a student already provisioned from an authorized roster. Student display names from the authorized roster are retained for teacher dashboards.

How Number Ninjas uses the information

We use student information only for authentication and account matching, classroom membership, math gameplay, assignments, diagnostics, progress and mastery, authorized teacher reports, teacher-directed Google Classroom actions, security, support, and operation, maintenance, and improvement of the authorized educational service.

Uses we prohibit

Student information is not used for behavioral or targeted advertising, marketing to students, sale, data brokerage, unrelated profiling, unrelated product development, or general-purpose AI or machine-learning training.

Service providers

Student information may be processed by providers strictly necessary to operate Number Ninjas: DigitalOcean for application and infrastructure hosting and backups; self-hosted PostgreSQL and Redis running on DigitalOcean infrastructure; local Docker and system logging on DigitalOcean for security and operations; Google Classroom and Google Workspace/Gmail for teacher-directed integrations and email communications. These infrastructure disclosures are integral to operating Number Ninjas and cannot be separately declined while using the applicable service. We will update this notice and obtain additional authorization where required before a material change to providers or disclosure purposes. Rybbit receives teacher-only analytics and no student or guest events. See the Privacy Policy for the current provider list and purposes.

Retention

• Student gameplay: 13 months after collection.
• Diagnostics: 25 months after collection.
• Inactive classroom relationships: 90 days after the relationship becomes inactive.
• Operational/security logs: no more than 30 days after creation.
• Active Redis game state: no more than four hours after creation or refresh.
• Backups: no more than 35 days after creation.

These periods support student progress, classroom reporting, periodic diagnostics, security, service continuity, and the applicable school relationship. A relationship deadline may shorten applicable student-record retention. Children’s personal information is not retained indefinitely. Non-identifying daily and weekly aggregates may be retained longer only if they cannot reasonably be linked to a student or user.

School controls

The school may request the categories and purposes of information held, review applicable course and student information, export applicable information where reasonably available, request correction, request individual/class/school-wide deletion, stop future collection or use, or terminate authorization. Use dashboard privacy controls or contact privacy@yinyang-interactive.com. Active-system deletion is targeted within 24 hours; backups expire within 35 days. A stopped or deleted student is suppressed from routine roster recreation.

Parent requests

Parents and guardians may contact privacy@yinyang-interactive.com to request access, correction, deletion, withdrawal of permission, or a stop to further collection. We may coordinate school-managed education-record requests with the school after verifying identity and authority.