Student Data Privacy

Last updated: July 15, 2026

Flowstone is a calm and self-regulation tool for classrooms. It is built so that schools can use it without handing over any student data. This page explains what that means and how we work with districts on data-privacy agreements.

Flowstone Classroom collects no student personal information

When flowstone is used in a classroom:

• No student signs in. There are no student accounts, usernames, or passwords.
• We do not collect student names, email addresses, student ID numbers, dates of birth, photos, biometric data, location, or any other personally identifiable information from students.
• We create no education records. Because no student is identified, nothing a student does in flowstone is tied to that student.
• Classroom use is anonymous. A teacher or counselor runs the tools for the room or for one child, and the session leaves no student-level record behind.

The only account holders are the adults who license and set up flowstone, for example a teacher entering a classroom access code. Their information is handled under our Privacy Policy.

FERPA

The Family Educational Rights and Privacy Act (FERPA) protects student education records. Because flowstone Classroom does not collect student personal information and does not create education records, it does not receive, store, or disclose FERPA-protected records. If a district designates us as a "school official" under FERPA for any future feature, we will use any information only for the authorized purpose and under the district's direction.

COPPA

The Children's Online Privacy Protection Act (COPPA) governs the online collection of personal information from children under 13. Flowstone Classroom does not collect personal information from children. See our Privacy Policy for how the consumer app handles children's privacy with verifiable parental consent.

State student-data-privacy laws and DPAs

Many states, for example New York Education Law Section 2-d and California's student-privacy statutes, require a data-privacy agreement between a district and an education vendor. We support this:

• We are glad to review and sign a district's Data Privacy Agreement (DPA), including agreements based on the Student Data Privacy Consortium (SDPC) national template.
• Because flowstone Classroom collects no student data, most DPA data-element and data-flow schedules will be marked "none" or "not collected."
• We do not sell student data, we do not use it for advertising, and we do not share it with third parties, because we do not collect it in the first place.

Security

Adult account and licensing data is transmitted over encrypted connections and stored with a reputable cloud provider. Payment card details are handled by our PCI-compliant payment processor and are never stored on our servers.

Requesting a DPA or asking a question

Email support@flowstoneapp.com with your district name and any DPA or privacy paperwork you need completed. We aim to respond within two business days.

The Nest Investment Group, LLC · 217 Patrick Henry Cir, Kingsport, TN 37663