Privacy
Mastery Board is where kindergarten and elementary teachers record how each child is doing on the skills they teach. This page explains what it keeps, who can see it, and how a school stays in control of its children’s records. Mastery Board, LLC provides the service.
Effective September 15, 2026
- Accounts only by invitationAn account can only be made from an administrator's invitation, for teachers and school staff. Children never use the app.
- Only what teaching needsA child's name, an optional Student ID, and how they did on each skill. The app asks for nothing about home, health or family.
- Never sold, no advertisingNo ads and no tracking scripts, and we never sell or rent information to anyone.
- The school stays in controlRecords belong to the school. We use them only to provide the service to that school.
- Deleted when the school asksA school or district can ask us to permanently delete its classes, children's records, results, files and staff accounts.
- Kept in the United StatesThe app and its database run in data centers in the eastern United States.
The school's records
Mastery Board holds education records on behalf of the schools and districts that use it. Under the Family Educational Rights and Privacy Act (FERPA), we act as a school official with a legitimate educational interest. The school’s administrators decide which staff get access and what is recorded, and we use the records only to provide the service to that school.
Children do not sign in to Mastery Board or give it any information themselves. Their teachers enter it, as part of teaching them.
What we keep about children
Teachers and school administrators enter:
- Name, and a Student ID if the school uses them.
- The school and classes a child belongs to, and when they joined or left a class. Only a district administrator can move a child to another school in the district; the results recorded at the old school stay with its classes.
- Assessment results: the score on each skill or question, which letters or words were missed, whether the child was absent or exempt, and which staff member recorded each mark and when.
- Teachers’ notes on a child’s assessment, written by the teacher.
- Small groups a teacher places a child in.
Mastery Board does not ask for dates of birth, addresses, parent or guardian contact details, photographs of children, health or disability information, or grades from other systems. Notes are free text, so we ask teachers to keep them to what a child is learning.
What we keep about staff
- Name and email address, and the schools, teams and roles someone has.
- A profile photo or icon, if they choose one.
- Invitations, including the name and email address the administrator entered and who sent them, and requests to join a team, including any message written with a request.
- Preferences, such as favorite pages and which school and school year are showing.
- Sign-in details: a password, stored only as a secure one-way hash, and when someone last signed in.
- Files uploaded to a board template, such as a printed assessment, and who uploaded them.
A change log records the changes people make — to marks, notes, children, classes, templates and who has access — with who made each one and when, and what it changed from and to.
Like every website, our hosting and sign-in providers keep standard technical logs, such as the IP address and time of a request, to keep the service secure and working.
How we use it
Only to provide Mastery Board to the school:
- to record, report and print children’s progress for their teachers and school;
- to send account emails: invitations, links confirming a new account’s email address, requests to join a team and the answers to them, and password resets;
- to keep the service secure and working, and to fix problems;
- to answer questions and requests from the school.
We never sell or rent information, never show advertising, never use tracking or analytics scripts, never build profiles of children for any purpose other than their teaching, and never contact children or their families.
Who can see it
- Teachers see the classes on their own teams, the children in those classes, and any children they added themselves. A teacher can add a colleague from the same school to their team, which opens that team’s classes to the colleague.
- Staff at a school can see the names, email addresses and photos of the other staff there.
- School administrators see their school, and district administrators see their district, including its change log. Teachers don’t see the change log.
- Mastery Board, LLC’s own administrators can see and change the records of every district and school. We use that access only to set up districts and schools, support the people using them, and keep the service running.
- Our service providers, listed below, process data only to run the service for us.
These rules are enforced by the database itself on every request, not only by the screens a person is shown. See Security for how.
We disclose information to anyone else only when the law requires it, and where the law allows, we tell the school first.
Service providers
These companies handle data so the service can run, under terms that let them use it only to provide their service to us.
| Provider | What for | What it handles | Where |
|---|---|---|---|
| Supabase | Database, sign-in and file storage, and the emails that confirm a new account or reset a password | Everything the app stores: accounts, classes, children's records, results and uploaded files | United States (AWS US East, Virginia) |
| Vercel | Runs the app's website and server code | Everything people send or are shown passes through it on the way to and from the database, including uploaded class lists, spreadsheets and photos, which it does not keep. It also keeps standard request and error logs | United States (US East, Washington, D.C.) |
| Resend | Sending invitations, join requests and the answers to them | The recipient's email address, the email itself, and the sender's address for replies | United States |
Keeping and deleting information
- Information is kept until it is deleted. Nothing is deleted automatically, including when a school stops using Mastery Board, so a school or district that stops should ask us to delete its information.
- A teacher can take a child off a class. The child’s past results stay with the school, so a year’s record isn’t lost when a child moves class.
- A school administrator can permanently delete a child’s record, for example one entered twice. A teacher can delete a class, and the results recorded in it are deleted with it. Both are asked to confirm first.
- When someone leaves, a school administrator can take them off their teams, which ends their access to those classes and their results. Mastery Board, LLC takes them off the school entirely, or deletes their account, when the school asks. The classes and templates they made stay with the school.
- Deleting a staff account deletes its profile, photo and preferences. Marks they recorded, and their entries in the change log, stay with the school without their name. Their name and email address stay on past invitations, and on any template handed over to someone else.
- A child’s record deleted for good takes their entries in the change log with it, leaving only a note that a child’s record was deleted, by whom and when.
- A school or district can ask for its information to be permanently deleted: its teams, classes, templates, children’s records, results, uploaded files, change log and staff accounts. Write to info@masteryboard.com, and we will delete it within 30 days and confirm when it is done.
Deleted information may remain in our database provider’s encrypted backups until those backups expire.
Parents and students
Parents and eligible students have the right to see and ask to correct education records under FERPA. Because the school controls these records, those requests go to the school, and we help the school respond. Teachers can print a child’s results from the app. If a parent contacts us directly, we will pass the request to the school.
Security
Information is encrypted when it travels and where it is stored, every request is checked against who may see what, and an automated suite of access-rule tests runs on every change pushed to the code. The Security page has the detail.
If we learn that information has been accessed without permission, we will tell the affected schools and districts promptly, explain what happened and what we are doing about it, and meet the notification requirements of the law.
Changes to this policy
If we change how we collect or use information, we will update this page and its effective date. For a change that matters to schools, we will email school and district administrators before it takes effect.
Contact
Questions, requests and concerns about privacy go to info@masteryboard.com. Mastery Board, LLC.