Privacy & Data Handling Policies

Purpose

This document explains what information you must provide to use this application, how we handle that information, and the steps we take to protect your data and privacy. This policy describes the most current application behaviors that are validated and supersedes previous versions unless otherwise noted.

If you are reviewing Classroom Token Hub for an educational institution, please visit For District Partners for more information.

If you are a student, your teacher has chosen this application on behalf of your class to facilitate classroom activities. If you and/or your families have any questions or concerns, please talk to your teacher.

Our Data Collection and Handling Principles

Classroom Token Hub is a self-funded, independently-operated platform supported by a single current full-time high school teacher. As such, we are not an edtech company nor are we incentivized to become one. Data collected by this platform is used solely for the operation of the platform and the useability of the application. This means we do not ask you to provide any identifying information unless absolutely necessary. We also do not display ads, use third-party tracking tools, or sell your information to third parties.

From day one, we operate on these three foundational principles:

1. I don't know you
2. I don't need to know you
3. I don't want to know you

Information Classroom Token Hub Collects

If you are a teacher user

• Display name: A front-facing name that will be visible on your dashboard and on student accounts.
• Class Identifier: A descriptive name for each class you manage (e.g., "Period 3 Economics").

If you are a student user

Your teacher has provided this information on your behalf to create your account:

• First and Last Name (or any two-part display name): Used to claim your account and display your name in the greetings and teacher roster
• Notes: Optional notes provided by your teacher.

How We Use Your Data

Student Name

Student name is used to claim student accounts and to display a user-friendly name in the greetings and teacher roster. This information is only visible to the student themselves and the teacher who owns the class.

Notes

Notes are optional text field for teacher to provide additional context for a particular student. This field is encrypted at rest and only accessible by the teacher owning the class. Classroom Token Hub does not interpret or use the notes field in any features.

Teacher Display Name, Class Display Name, Class Sections

These fields are used for display purposes within the bounded class universe and are visible to both teachers and students within the class.

Other Non-Personally Identifiable Data

This includes teacher-created store items, rent perks, and other classroom economy-related data.

• Attendance Records: Tap-in/out timestamps and calculated active/inactive duration.
• Account Balances: Checking and savings balances, updated from transaction history.
• Transaction History: Records of bonuses, payroll, rent, expenses, and store purchases.
• Class Settings: Payroll rates, rent amounts, economic policies, and other classroom configuration options.

These information are stored using an internal reference ID that links them to the corresponding student without using names directly.

Data Minimization & Retention

We collect only the data necessary to support classroom activities and educational objectives. Student names are encrypted at rest and are visible only to their teacher. When a class ends or is deleted, all associated student data is permanently removed from our system.

Data Encryption & Storage

• Encryption at Rest: All sensitive data (names, notes) is encrypted using industry-standard AES encryption before storage in our database.
• Secure Hashing: PINs and passphrases are hashed using bcrypt with an additional application secret. Hashes are not reversible, even if the database is compromised.
• Encrypted Transit: All data transmitted between your device and our servers is protected using HTTPS/TLS encryption.
• Secure Session Management: The application enforces session timeouts and uses secure, HTTP-only cookies.

Account Recovery

If you lose access to your account, your teacher can issue a recovery code. Recovery uses only your class join code and the recovery code. No personal information, such as your name, is required or transmitted during recovery.

Class-Level Data Isolation

Each class operates as a completely independent system. Your data is strictly isolated within your class:

• No cross-class visibility or data sharing
• Teachers can only access classes they create
• Student data is never aggregated or shared across classes
• The system does not maintain student identity across classes

Error Logging & Monitoring

To maintain system reliability and quickly resolve technical issues, our application automatically logs errors and technical failures. Error logs do not include personal names or identifiable information.

What CTH Does Not Do

• No advertising or data selling
• No third-party analytics or tracking
• No behavioral profiling or data mining
• No cross-class tracking or data aggregation
• No integration with external identity systems (e.g., SSO)
• No long-term data retention beyond active class lifecycle

Contact Information

For questions or concerns about privacy and data handling, please reach out to support@classroomtokenhub.com.