focusplay.aiTrust Center · For school and district review
Student privacy you can check, not just trust.
Everything a curriculum, technology or privacy reviewer usually asks for in one place: what we collect, who can see it, how long we keep it, who processes it and how to purchase.
Last reviewed September 26, 2026. The Privacy Policy is the governing document; this page summarizes it for reviewers.
Student data inventory
Focusplay was built to work with as little student information as possible. A teacher can set up a class with a first name and grade for each learner.
What we store
- Display name (first name or nickname) and grade
- Class association and a hashed three-picture password
- Selected avatar and customizations
- Game activity: games played, level, round length, items attempted and correct, stars, skill progress
- In-game rewards: gold, streaks, collected items
- Creative-activity submissions (most recent only)
What we do not collect
- Learner email address
- Surname or date of birth
- Phone number or home address
- Profile photographs
- Location beyond an IP-derived country code used for security
- Behavioral advertising profiles
Google Analytics runs only on public marketing pages. It is never loaded on sign-in, account, class, learner or game pages, so no learner activity reaches it.
Who can see what
Access is decided by role and relationship, and enforced on the server for every request that reads student records.
| Role | Can see |
|---|---|
| Learner | Their own games, progress and rewards. Signs in with a class code and picture password, no email needed. |
| Teacher | Learners in the classes they are assigned to: activity, progress and assignments. |
| School administrator | School-level summaries only. Administrators do not browse individual play records. |
| Parent | Only their own children in a family account. |
| Focusplay staff | A separate operator console protected by multi-factor authentication, with every access written to an audit log. |
Leaderboards rank weekly improvement using class and school team averages, so no child is singled out by name to other schools.
Security
- Encrypted HTTPS for all traffic, on Cloudflare's global network with its DDoS and bot protections
- Passwords and picture passwords stored only as salted hashes
- Secure, HTTP-only session cookies, with shorter sessions for children
- Rate limiting on sign-in and sign-up; IP addresses stored only as shortened hashes for abuse prevention
- Server-side role checks on every endpoint that reads student data
- Audit logging when authorized adults view or manage student information
- Multi-factor authentication required for the staff operator console
No system can guarantee absolute security. If an incident affects school data, we notify the school or district as required by law and by our agreement with you.
Retention and deletion
| Record | Kept for |
|---|---|
| Raw game rounds | 90 days, after daily progress summaries are created |
| Daily activity tracking | Up to 35 days |
| Expired sessions | Deleted after 30 days |
| Student-access audit log | Up to 2 years, to support school and security requests |
| Progress and account records | While the account is active, or as your agreement specifies |
Schools can request deletion of school-managed records at any time. When a learner is deleted, related records are removed through database relationships, active sessions are revoked and stored creative work is removed.
Subprocessors
Service providers process information only to operate Focusplay.
| Provider | Purpose | Student data? |
|---|---|---|
| Cloudflare | Hosting, database, file storage, security and delivery | Yes, as host |
| Resend / Cloudflare Email | Verification, password reset and opt-in summary emails to adults | Adult email only; a parent's opt-in summary includes the child's display name |
| Stripe | Family membership payments | No. Not used for school accounts' learners |
| Optional adult sign-in; analytics on public marketing pages | No |
Laws and agreements
FERPA
When a school uses Focusplay, we act under the school's direct control as a school official with a legitimate educational interest. Student records are used only to provide the service to that school.
COPPA
For school use, the school authorizes collection for the educational context in place of individual parental consent, as the FTC permits. We collect only what the service needs.
California and other state student-privacy laws
We do not use student information for targeted advertising, do not build profiles for non-educational purposes and do not sell it, consistent with California's Student Online Personal Information Protection Act (SOPIPA) and similar state laws.
Data privacy agreements
We review and sign district data privacy agreements, including agreements based on the Student Data Privacy Consortium's National Data Privacy Agreement (NDPA) and state versions of it.
Send us your agreementAccessibility
Focusplay is played by learners from kindergarten up, many of whom are early or emerging readers, so accessibility is part of the game design.
- Spoken instructions and read-aloud support in early-grade games
- Large tap targets and scalable text for small hands and tablets
- No speed pressure: stars reward how efficiently a learner solves a round, not how fast
- Picture-based sign-in that does not depend on reading or typing
We are preparing an Accessibility Conformance Report (VPAT) against WCAG 2.1 AA. Contact us for the current version.
Research basis
Focusplay is designed around a logic model that meets the ESSA "demonstrates a rationale" level of evidence (Tier IV), and we invite pilot schools to take part in a structured evaluation.
- Short, game-based practice
- Teacher class view and assignments
- 42+ skills across math, brain, attention, creativity and social strands
- Adaptive next activity aimed at an 80% success range
- Progress unlocks by skill mastery, not grade level
- Rewards earned only through learning, never elapsed time
- More frequent, focused practice
- Rising accuracy on practiced skills
- Teachers identify who needs support
- Fluency in foundational skills
- Stronger working memory and attention habits
- Healthy, non-compulsive practice routines
Principles behind the design
- Mastery learning: learners advance when they show a skill, not when time runs out.
- Desirable difficulty: activities are tuned so learners succeed most of the time but still have to stretch.
- Retrieval and spaced practice: short, repeated rounds bring skills back over days and weeks.
- Habit, not dependency: daily goals can be completed and the app stops prompting; streaks pause on weekends; nothing earned is ever taken away.
Purchasing
- Vendor: Trans Factor Inc., Irvine, California (operator of Focusplay.ai)
- Pricing: quoted per school or district by learner count. Ask for a quote.
- Start small: a teacher or a school team can begin with a class trial before any purchase.
- Vendor paperwork: W-9 and district vendor forms available on request.
Questions from your review team?
Email hello@focusplay.ai or call (949) 529-6867. We answer privacy and security questionnaires directly.