Privacy Policy

1. Introduction

Ladderly Learning ("Ladderly", "we", "our", or "us") operates a web application that helps school districts manage Response to Intervention (RTI) programs. This Privacy Policy explains how we collect, use, disclose, and protect information about the students, educators, and other individuals whose data is processed through our service.

By accessing or using Ladderly, you agree to the practices described in this policy. If you do not agree, please do not use our service.

2. Information We Collect

We collect the following categories of information:

• Account information — name, email address, and school or district affiliation provided when you register or sign in via Google OAuth.
• Student records — referral data, intervention plans, assessment results, and meeting notes entered by authorized school staff.
• Usage data — pages visited, features used, and approximate access times, collected to improve reliability and performance.
• Cookies and local storage — session tokens and preferences necessary to keep you signed in and remember your settings.

3. How We Use Information

We use the information we collect to:

• Provide and improve the Ladderly application;
• Authenticate users and enforce role-based access controls within each school district;
• Store and retrieve student RTI records on behalf of authorized school staff;
• Send transactional emails (e.g., password resets, meeting notifications); and
• Diagnose technical issues and monitor service health.

We do not sell personal information or use student data for advertising purposes.

4. Sharing and Disclosure

We do not share personal information with third parties except in the following circumstances:

• Service providers — infrastructure and email delivery partners who process data solely on our behalf and under appropriate data processing agreements;
• Legal requirements — when disclosure is required by law, court order, or to protect the rights and safety of our users; and
• School district — authorized administrators of your school district may access records entered by staff within their organization.

5. Data Retention

We retain account and student data for as long as your district maintains an active subscription with Ladderly, and for a reasonable period thereafter to comply with legal obligations or resolve disputes. You may request deletion of your account by contacting us at the address below.

6. Security

We use industry-standard security measures, including encrypted connections (HTTPS), hashed credentials, and role-based access controls, to protect the information stored in our systems. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy (FERPA & COPPA)

Ladderly processes student education records on behalf of schools and districts. We comply with the Family Educational Rights and Privacy Act (FERPA) and do not knowingly collect personal information directly from children under 13 for our own purposes. Student data is processed solely at the direction of, and under the authority of, the school or district that controls the records.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete personal information we hold about you. Requests relating to student records should be directed to your school district's data privacy officer in accordance with FERPA. Requests relating to your own account information may be sent directly to us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy with an updated "Last updated" date. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: