Security & Privacy

Your content is yours. Your students’ data stays safe.

We built Eluency with privacy at the core — not as an afterthought. Here’s exactly how we handle data, who has access, and what we promise.

Our Promises

Seven commitments we make to every teacher and student.

No student accounts required

Students join with a class code. We never ask students for an email, password, or any personal information.

No ads. Ever.

There are zero advertisements anywhere on Eluency. We make money from teacher subscriptions, not from student attention.

We will never sell your data

Teacher content, student data, usage information — none of it is sold, shared with advertisers, or monetized in any way.

Your lessons belong to you

The content you create — vocabulary, phrases, tests — is yours. It stays with your account and is never shared with other teachers.

Students are always free

Students never pay to use Eluency. That’s not a promotion — it’s a permanent part of our model.

Full data deletion on request

Teachers can delete their account and all associated data — including all student records — at any time.

Data We Collect

Only what’s needed. Nothing more.

We follow a principle of data minimization — we only collect information that is necessary for the platform to function.

Teacher Data

NameUsed for your account profile and dashboard.
EmailUsed for login, account recovery, and important notifications.
CountryUsed to provide relevant language and regional settings.
Payment InfoProcessed securely through Stripe. We never see or store your full card details.
Lesson ContentVocabulary, phrases, tests, and curriculum you create. Stored securely and accessible only to you.
You can export or delete all your data at any time
Lesson content is never shared with other teachers

Student Data

First NameUsed to identify the student within their teacher’s dashboard. That’s it.
Practice ResultsScores and completion data so teachers can track progress.

What we do NOT collect from students:

No email addresses
No passwords
No dates of birth
No phone numbers
No photos or profile images
No location data

Students are never asked to create an account. They join with a class code and a first name — nothing else.

Content Ownership

Your lessons stay yours. Full stop.

When you create a lesson, vocabulary list, or test on Eluency, that content belongs to you. It is stored securely in your account and is never visible to other teachers or users on the platform.

Eluency team members may access your content only for the purpose of providing technical support or troubleshooting — and only when you request help. We will never copy, reuse, redistribute, or share your lessons with anyone else. That’s a promise.

Our content access policy:

Your lessons, tests, and vocabulary are private to your account
Eluency staff access content only for support when you ask
We will never reuse or redistribute your teaching materials
We will never share your content with other teachers or third parties
If you delete your account, all content is permanently removed
Infrastructure

Where your data lives and how it’s protected.

Hosting & Database

Eluency is hosted on Vercel (frontend) and Supabase (database and authentication), with servers located in Canada and the United States.

Data transmitted over HTTPS/SSL encryption
Supabase provides encryption at rest for all stored data
Regular automated backups

Authentication & Payments

Teacher authentication is handled through Supabase Auth with secure session management. Payment processing is handled entirely by Stripe — a PCI-DSS Level 1 certified payment processor.

Stripe handles all payment data (PCI-DSS Level 1 compliant)
No credit card numbers are stored on Eluency servers
Secure session tokens for teacher authentication

Third-Party Services

Eluency does not use any third-party advertising networks, analytics trackers, or data brokers. The only external services that interact with your data are:

VercelFrontend hosting and deployment. May process standard web request data (IP addresses in server logs).
SupabaseDatabase, authentication, and storage. All teacher and student data is stored here.
StripePayment processing only. Handles subscription billing for paid teacher plans.

No advertising networks. No analytics trackers. No data brokers. No third-party access to your content or student data.

AI & Student Data

AI helps teachers, not mine student data.

Eluency offers optional AI tools to help teachers build lessons and tests faster. These tools are designed to assist with content creation only — they are teacher-facing features.

No student data is processed by AI. No student practice results, names, or activity data is sent to any AI model. AI tools only process the curriculum content that teachers voluntarily input when creating lessons.

AI assists lesson creation
AI never touches student data
Compliance

Working toward formal certification.

Eluency is a young company, and we believe in being transparent about where we are and where we’re headed.

In Progress

COPPA

Children’s Online Privacy Protection Act

Eluency collects minimal student data (first name only) and does not collect personal information from children. We are actively working toward formal COPPA compliance documentation.

In Progress

FERPA

Family Educational Rights and Privacy Act

Eluency is designed to align with FERPA principles. Teacher content is private, student data is minimal, and schools retain control. Formal FERPA compliance review is underway.

In Progress

PIPEDA / GDPR

Canadian & European Data Protection

As a Canadian company, we are working toward PIPEDA compliance. For European users, we are building toward GDPR alignment including data portability and right-to-erasure.

Data Processing Agreement (DPA)

We are currently preparing a formal Data Processing Agreement for schools and organizations that require one. If your school needs a DPA before adopting Eluency, please reach out.

Incident Response

What happens if something goes wrong.

No system is immune to incidents. Here’s our commitment to handling them transparently and responsibly.

Immediate Notification

In the event of a data breach, we will notify all affected users via email as quickly as possible with clear details about what happened, what data was involved, and what steps we’re taking.

Regular Backups

We perform regular automated backups of all data to ensure quick recovery in the event of data loss or system failure.

Transparent Communication

We will always be upfront about security incidents. No hiding, no spin. If something goes wrong, you’ll hear it from us directly.

Security questions we get asked.

No. Your lessons, vocabulary lists, tests, and all teaching content are private to your account. Other teachers on the platform cannot access, view, or copy your materials.
Eluency team members may access your content only for the purpose of providing technical support or troubleshooting — and only when you request assistance. We will never copy, reuse, or share your content with anyone.
When you delete your account, all associated data is permanently removed — including your lessons, tests, vocabulary, and all student records linked to your classes. This action is irreversible.
No. Students join with a class code and provide only a first name. We do not collect email addresses, passwords, dates of birth, phone numbers, location data, or any other personally identifiable information from students.
No. Our AI tools are teacher-facing features that help with lesson creation. No student data — including names, scores, or practice results — is ever processed by AI.
Eluency does not use third-party advertising trackers or analytics services. Standard web infrastructure (Vercel) may process basic request data like IP addresses in server logs, but we do not use this data for tracking, profiling, or advertising.
Eluency is designed with minimal data collection specifically because students of all ages may use the platform. We collect only a first name — no email, no password, no personal information. We are actively working toward formal COPPA compliance certification.
All payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor. Eluency never sees, stores, or has access to your full credit card number. Stripe’s security documentation is available at stripe.com/docs/security.

Have a security question?

If you have questions about data handling, need a DPA for your school, or want to report a security concern, we’re here to help.

This page was last updated on March 1, 2026. We review our security practices regularly and update this page as our compliance posture evolves.

Ready to teach with confidence?

Your content stays yours. Your students’ data stays safe. Start building lessons today.

Free to start. Students always free. No ads. No data selling. Ever.