The Prodigies PK-5 portal (pk5.prodigies.com) is a curriculum tool used by teachers, with a small student-facing activity (Bell Composer). This page explains what information the portal collects and how it is handled. The portal is intended for use by schools and teachers in the United States.
Students do not create accounts or sign in, and we intentionally collect as little as possible:
We do not ask students for email addresses, last names, birthdates, photos, or location, and we do not use advertising trackers, analytics profiles, or social-media pixels anywhere on the portal. Student work is visible only to the class's teacher unless the teacher explicitly publishes it to the class gallery, which is reachable only with the class code. Student-facing pages are served entirely from our own domain and our infrastructure providers — they load no third-party fonts, scripts, or advertising resources.
Like nearly every website, our infrastructure providers keep short-lived server logs — IP address, browser type, and pages requested — used solely to operate and secure the service (COPPA's "support for internal operations"). These logs are not used to profile, track, or advertise to anyone, and are retained only briefly by our hosting providers.
The portal also uses your browser's local storage to remember preferences on your own device — a teacher's favorites, courses, and sign-in session. We do not use advertising or cross-site tracking cookies.
The portal is used in schools under teacher direction. We rely on the school to provide consent on a parent's behalf, solely for use in the educational context. Before creating a class assignment, the teacher must attest — with a link to this policy as direct notice of our practices — that their school or district has obtained any parental consent required for students to submit a first name and composition.
Parents' rights: a parent or guardian may review the information collected from their child, have it deleted, and refuse to permit any further collection. The fastest path is through your child's teacher or school, which controls the class; you may also contact us directly (below) and we will verify the request with the school and honor it. Deleting a child's information is never a condition of anything — a student can use the Bell Composer without submitting work at all.
Where student submissions constitute education records, Prodigies acts as a school official with a legitimate educational interest, under the direction and control of the school with respect to those records. In that role:
Schools and districts that require a signed data privacy agreement (including under state laws such as Illinois SOPPA, New York Education Law §2-d, and Connecticut's student privacy act) may request one at hello@prodigies.com.
The portal includes an AI curriculum assistant for teachers. Messages you send it are routed through our server to Anthropic, our AI service provider, to generate a reply; they are used only to provide the response and are not used by us to train AI models. The assistant is a teacher planning tool — please do not enter student names or other student personal information into it. Students do not have access to the assistant.
We use a small number of vendors to run the portal, each acting only on our instructions:
| Provider | Role | Sees student data? |
|---|---|---|
| Supabase | Database & authentication (Postgres, hosted in the US) | Yes — stores submissions (first name, title, notes) |
| Vercel | Website hosting and server logs | Transient technical data only (e.g. IP in logs) |
| Anthropic | AI assistant responses (teacher tool) | No — teachers are instructed not to enter student data |
| Fonts on teacher pages; Google Classroom when a teacher connects their own account (governed by Google's terms) | No | |
| Vimeo | Curriculum video streaming on teacher pages | No |
| jsDelivr / cdnjs | Open-source script delivery on teacher pages | No |
Student-facing pages (the Bell Composer) load resources only from our own domain and Supabase — no fonts, scripts, or media from the other providers above.
All traffic is encrypted in transit (TLS). Access to student data is enforced with database row-level security: each teacher can read only their own classes' submissions, and anonymous visitors can read nothing. We routinely verify these access rules against the live database. If we learn of a breach affecting student data, we will notify affected schools without unreasonable delay so they can meet their own notification obligations.
If we make material changes to how we handle student data, we will update this page, change the date above, and notify teachers in the portal before the changes take effect. We will not materially weaken student privacy protections without giving schools the chance to consent or delete data first.
Questions, a review request, or a deletion request?
Prodigies Music, LLC
[MAILING ADDRESS — required by COPPA §312.4(d)]
(302) 307-1997
hello@prodigies.com