Student Data & Privacy Commitment
How we treat student information, purpose limitation, and the boundaries around use—high level and easy to share with your board or community.
EBNix LLC
Last updated March 25, 2026
Trust Center
Privacy-first practices, careful security, and clear documentation—so students can grow with dignity while schools and families stay informed. We do not sell student data or use it for advertising.
Blue is a student-centered platform for reflection, narrative, and readiness—not a surveillance product. We build for transparency, limited data use, and agency: your community should understand what we collect, why it matters, and how it is protected.
Our commitment
Blue exists to help students make sense of experiences, strengths, and goals—not to watch them. We do not design for surveillance, excessive data collection, or eroding student agency.
Blue is designed to align with FERPA and common state student data privacy expectations. We do not sell student data, and we do not use student data to run ads.
Blue is operated by EBNix LLC.
Policies & documentation
Central place for privacy, security, and terms—written for leaders, privacy officers, and families who need clarity without excess legalese.
Data Security & Privacy Plan
Operational and technical overview of how Blue safeguards student data—hosting, encryption, access, monitoring, and response. This is the deeper companion to our privacy commitment, for security and compliance reviewers. Detailed documentation is available for district security and compliance reviews.
- Hosting on AWS in the United States
- Encryption in transit and at rest
- Role-based access controls for staff and partners
- Logging and incident response practices appropriate to our environment
- Security posture informed by the NIST Cybersecurity Framework
Privacy Policy
How we collect, use, disclose, and protect personal information across Blue’s services.
Terms of Service
The agreement that governs use of Blue’s products and websites for your organization or household.
Accessibility & Inclusion
How we design for students and educators of all abilities—standards we work toward, our approach, and how to report a barrier.
Accessibility Conformance Summary
A concise, district-ready summary of our accessibility posture for procurement and compliance reviewers (VPAT-style context).
Subprocessors & infrastructure
Blue uses a limited set of vetted infrastructure providers to support secure platform operations. Amazon Web Services (AWS) provides our primary hosting environment in the United States. We also use trusted providers for email delivery and application notifications.
We intentionally minimize third-party dependencies to reduce risk and improve transparency. Subprocessors are used only to support core platform functionality and are not used for advertising or data brokerage.
Subprocessors overviewAI use & boundaries
Where we use AI, it is limited, transparent, and supportive of the student experience.
- AI may help summarize stories or surface themes so students can see patterns in their own work—always as guidance students can review and revise.
- Outputs are advisory and student-facing; they are not automated disciplinary or evaluative decisions about a student.
- Student data is not used to train general-purpose or provider foundation models.
Contact privacy & security
For privacy and security questions, district onboarding, or procurement and compliance reviews—including security questionnaires and standard documentation—contact our team.
Frequently asked questions
Does Blue sell student data?
No. Blue does not sell student personal information. Student data is not used for third-party advertising.
Does Blue track student location or keystrokes?
No. Blue is not designed to track precise location or to perform keystroke logging.
Does Blue monitor student activity outside the app?
No. Blue supports reflection and growth inside the product. It is not a surveillance tool for activity beyond Blue.
Does Blue use microphones or record audio?
Blue includes an optional feature that allows students to record personal stories or reflections within the app. This feature is student-initiated, can be disabled by schools, and is not used for monitoring or surveillance.
Can districts see student stories and reflections?
Schools primarily see summary-level progress data. Access to detailed student content occurs only when a student explicitly chooses to share it.
How is student data protected?
We combine infrastructure safeguards, encryption, tight access controls, and operational practices described in our Data Security & Privacy Plan. See that document for the full technical and process-level picture.
Does Blue use student data to train AI models?
No. Student data is not used to train general-purpose or provider foundation models.