Student data, treated like it's someone's future
Because it is. Atlara is built and operated by CodeHS — trusted by more than 10,000 schools — and runs on the same privacy program: collect the minimum, never sell it, never advertise with it, and put schools in control. This page is the front door to everything we promise and how we keep those promises.
Six things that will always be true
We never sell student data
Student personal information is never sold or rented to anyone, for any purpose. Full stop.
No ads, no ad profiling
No advertising on Atlara, and no student data is ever used for targeted advertising or non-educational profiling.
Minimum collection
We collect only what the product needs to help a student explore, plan, and launch — nothing speculative.
Schools stay in control
Student records belong to the school and district. Schools can access, correct, export, and delete their students' data.
Deletion is real
Data is deleted on request and when a school relationship ends — with an export first, so districts keep their records.
Transparency over fine print
Our Privacy Policy is written to be read. If something is unclear, ask us and we'll fix the wording.
Built for the laws that protect students
FERPA
When a school or district uses Atlara, we operate as a "school official" with a legitimate educational interest under FERPA. Education records are used only to provide the service, under the school's direction, and are never redisclosed except as the school directs or the law requires.
COPPA
Atlara serves students in grades 9–12, who are 13 or older. If we ever extend to younger grades, we will collect personal information from a child under 13 only where the school or district has agreed to obtain the required parental consent, consistent with FTC guidance for school-authorized educational services.
State student-privacy laws
We design to the strictest common denominator of state laws — including California's SOPIPA, Illinois' SOPPA, and New York Education Law 2-d — and support district Data Privacy Agreements, including the SDPC National DPA with state exhibits.
The CodeHS privacy program
Atlara is operated by CodeHS, Inc., whose privacy and security program includes SOC 2 Type II certification, membership in the Student Data Privacy Consortium and state privacy alliances, a published incident response plan, and a decade of serving K-12 schools.
Read the details
Privacy Policy
What we collect, why, who sees it, how long we keep it, and the rights students, families, and schools have.
Read the policy →Terms of Service
The agreement for using Atlara — accounts, acceptable use, school terms, and how district agreements take precedence.
Read the terms →Security
How Atlara is protected: encryption, access controls, backups, incident response, and how to report a vulnerability.
Read about security →Accessibility
Our WCAG 2.1 AA commitment, what's in place today, and how to reach us if something gets in your way.
Read the statement →Common questions from districts and families
Who owns the student data in Atlara?
The school and district. We process it on their behalf to provide the service. When a district leaves, they get their data out, and we delete what remains on our systems per the agreed retention schedule.
Will you sign our Data Privacy Agreement?
Yes. We work from the Student Data Privacy Consortium's National DPA and state-specific exhibits, and we review district-specific agreements. Email support@codehs.com with "DPA" in the subject to start.
Do you use student data to train AI models?
No. Student personal information is not used to train AI models. Any future AI-assisted features will be opt-in for districts, disclosed plainly, and covered by the same no-ads, no-selling, minimum-collection commitments.
What do parents and guardians see?
Family accounts are invited by the student or the school and see that student's readiness plan, goals, deadlines, and approvals — nothing about other students. Parents can ask their school to review, correct, or delete their child's information at any time.
How do I request data deletion?
Schools and districts: email support@codehs.com from an administrator account. Students and families: ask your school, which controls the record — or contact us and we'll route the request to your school. Deletion requests are confirmed in writing.
Where is data hosted?
In the United States, on access-controlled cloud infrastructure, encrypted in transit and at rest. Details are on the Security page.
Who can I actually talk to?
A person. Email support@codehs.com — privacy questions are answered by the team that builds the product, not a form that goes nowhere.