At InquiryCycle, we are deeply committed to protecting the privacy of educators and students. This policy outlines how we handle your data.
1. Ephemeral Student Data (Zero Login)
InquiryCycle is designed with student privacy as its core architecture. We do not require student logins, emails, or personal identifiers. Students join rooms using an anonymous 8-digit PIN and choose a temporary pseudonym.
Student Device Storage: To ensure students stay connected to the live room even if they accidentally refresh their browser, we use local sessionStorage on their device to hold a temporary anonymous connection token. This token is not linked to the student's real identity and clears automatically when the session ends.
Zero Student Analytics: We do not use analytics or advertising trackers on student-facing pages. Google Analytics and all other tracking scripts are completely blocked and disabled on all student-facing URLs (including the /join page and live rooms under /play/*).
All student submissions, drawings, and interactions are stored temporarily in our databases to facilitate the live presentation and are permanently hard-deleted within 24 hours via automated cron jobs. We do not keep backups of student evidence.
2. Teacher Data & Analytics
For educators who create accounts, we collect minimal information (email address) required for authentication. This data is secured by Supabase. Your generated Inquiry Decks and Informed Reviews are saved to your private Library.
On teacher-facing and public marketing pages, we utilize Google Analytics (via Google Consent Mode v2) to understand aggregate usage and optimize platform performance. Analytics cookies are strictly opt-in and blocked by default until explicit consent is given on our cookie banner. Educators can modify or revoke their consent preferences at any time via the "Cookie Preferences" link in the footer.
3. Data Sharing & AI Processing
We do not sell, rent, or trade any personal information or student data. When you generate decks or request AI Formative Feedback, text is sent to Google's Gemini API via secure ephemeral requests under Zero Data Retention (ZDR) terms. While no student identifiers are sent by our system automatically, free-text response fields could contain real names if students type them. We instruct educators to remind students not to use their real names in free-text responses.
4. Compliance
We actively comply with GDPR, COPPA, and FERPA standards by strictly minimizing data collection, preventing student tracking, and ensuring total data ephemerality for students.
5. Contact Us
InquiryCycle is owned and operated by InquiryCycle. If you have any questions or concerns about this Privacy Policy, your data, or our practices, please contact our privacy team at privacy@inquirycycle.com.