Qweebi Privacy Policy
Last Updated: Apr 7, 2026
This Privacy Policy is issued jointly by Qweebi Inc. (2093 Philadelphia Pike #8009, Claymont, DE 19703, USA) and Virtual Learning Machines Pte. Ltd. (68 Circular Road #02-01, Singapore 049422) (“VLMPL”) (collectively, “Qweebi,” “we,” “our”). It explains how both entities collect, use, share, and protect your personal information when you use our website, online makerspace, teacher dashboard, and related services.
We may make changes to this Privacy Policy from time to time. If we make changes, we will notify you by revising the "Last Updated" date above, and, in some cases, we may provide you with additional notice (such as adding a statement to our website or sending you a notification when you access the Qweebi teacher dashboard or makerspace platform). We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.
Table of Contents
Who is the Data Controller?
Data Subject Rights
Information that Qweebi Collects
Use of Personal Information
Information We Share
Information Users Share
Third-Party Service Providers
Security and Data Retention
Cookies and Similar Technologies
Removing Content
COPPA & FERPA Compliance
Contact Information
1. Who is the Data Controller?
Depending on where you live, one of these entities is responsible for your personal information:
If you’re in the U.S.:
Qweebi Inc. (2093 Philadelphia Pike #8009, Claymont, DE 19703, USA) decides why and how your data is processed under U.S. privacy laws. Our parent company, Virtual Learning Machines Pte. Ltd., handles the technical processing of that data on our behalf.
If you’re outside the U.S.:
Virtual Learning Machines Pte. Ltd. (68 Circular Road #02-01, Singapore 049422) decides why and how your data is processed under the laws that apply in your country and processes it to provide, secure, and improve our services.
2. Data Subject Rights
1. United States (CCPA / State Privacy Laws)
Right to Know what personal information we collect, use, share, or sell.
Right to Delete your personal information, subject to statutory exceptions.
Right to Opt-Out of any sale or sharing of personal information (we do not sell data).
Right to Non-Discrimination for exercising your privacy rights.
Additional State Rights (for example, Nevada’s “Right to Access” and “Right to Delete”).
2. European Union / United Kingdom (GDPR / UK-GDPR)
Right of Access – obtain confirmation and a copy of your personal data.
Right to Rectification – correct inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”) – request deletion of your data.
Right to Restriction of Processing – block or suppress processing.
Right to Data Portability – receive your data in a structured, commonly used format.
Right to Object – object to processing based on public interest or direct marketing.
Right to Withdraw Consent – withdraw consent for processing at any time.
Right to Lodge a Complaint with a supervisory authority.
3. Other Jurisdictions
Where local law grants additional rights (for example, Brazil’s LGPD or Canada’s PIPEDA), we will honor those to the fullest extent required by law and respond through the same request channels listed above.
To exercise your rights under any applicable law (CCPA, COPPA/FERPA, GDPR, LGPD, PIPEDA, etc.), please email [email protected]. We will route your request to the appropriate controller—Qweebi Inc. for U.S. residents or VLMPL for non-U.S. residents—and respond within the timeframes required by the relevant law.
3. Information That Qweebi Collects
We collect the personal data described below
(California residents: the categories & purposes listed here also serve as our CCPA “Notice at Collection”; other readers can skip this notice.)
Categories & Purposes
Identifiers:
Teachers
Name, email address, school name, school type, school address, role, and grades taught → used to create and manage teacher accounts.
Google Sign-In name, email address, and Google Account ID → used to create and authenticate teacher accounts when teachers choose to sign up or log in using Google.
Microsoft Sign-In name, email address, and Microsoft Account ID → used to create and authenticate teacher accounts when teachers choose to sign up or log in using Microsoft.
Clever Sign-In name, email address, and Clever User ID → used to create and authenticate teacher accounts when teachers choose to sign up or log in using Clever.
Google Classroom e-mail + Google Account ID → authenticate the teacher and let them import classes from Google Classroom.
Clever account information (including name, email address, class roster data, and Clever User ID) → used to authenticate the teacher and enable class roster import when teachers choose to import classes from Clever.
Students
Full name (imported from Google Classroom or Clever) → lets teachers recognise students in the dashboard.
Google Account ID (imported from Google Classroom) or Clever User ID (imported from Clever) → used only to let students sign in and access the makerspace.
username (may be pseudonymous) → classroom login credential.
Device & Performance Data: CPU, RAM, OS version, application crash reports → to monitor and improve service quality.
Usage Data: Project launches, video uploads, makerspace interactions → to operate, optimize, and enhance the platform.
A. User Accounts
1. Teacher Accounts:
Teachers may create accounts using:
Standard email sign-up
Google Sign-In
Microsoft Sign-In
Clever Sign-In
Account Information We Collect for All Teachers:
After account creation, all teachers are required to provide:
Name
Email address
Role (e.g., “4th grade teacher”)
School name, type (public/private/charter), and address
Grades you teach
Additional Information Based on Sign-In Method:
If you use Google Sign-In:
• Google name and email address
• Google Account ID (used only to authenticate your account)
If you use Microsoft Sign-In:
• Microsoft name and email address
• Microsoft Account ID (used only to authenticate your account)
If you use Clever Sign-In:
• Clever name and email address
• Clever User ID (used only to authenticate your account)
If you later choose Import from Google Classroom or Clever, we additionally collect:
If you import from Google Classroom:
• Google-Classroom email (if different from your sign-up email)
• Google Account ID (used only to authenticate your Google Classroom connection)
If you import from Clever:
• Student full names (from Clever roster)
• Class roster information
• Clever User IDs (used only for authentication and class access)
2. Student Accounts (under 18):
Students cannot sign up themselves. Teachers create—or import—student accounts and provide:
Student full name (from manual entry or Google Classroom or Clever import)
Username (may be pseudonymous)
Google Account ID or Clever User ID (only when classes are imported from Google Classroom or Clever)
How students log in: depending on how the teacher sets up the class, students can sign in with (a) Google or Clever Sign-In, (b) a class code and username. We do not require any additional personally identifiable information from student users.
B. Automatically Collected Information
1. Device & Performance Data
Device type (desktop, tablet, mobile)
System details (CPU, RAM, OS version)
Application crash and error reports
2. Usage Data
Actions such as launching a project, adding objects in the makerspace, or uploading a video
Feature usage metrics (e.g., which challenges are attempted most)
4. Use of Personal Information
Teacher Information:
Used exactly as described in Section 3 to deliver classroom functionality (e.g., manage teacher accounts, authentication via Google, Microsoft, or Clever, and class roster import via Google Classroom or Clever).
Additionally, we may use your information to contact you about feature updates, product support, or optional training resources. (You can opt out of these messages at any time.)
Student Information
Used only as described in Section 3 to deliver classroom functionality (e.g., dashboard display, Google, or Clever Sign-In).
We do not use student information for marketing, profiling, or advertising, and we do not disclose it to unauthorised third parties.
Device, Performance, and Usage Data
Used only as described in Section 3 to help us operate, maintain, and improve the platform
We may share or publish aggregated information about our users, such as statistics about the number of users using our product, the most popular student challenges, etc., on our website, social media channels, and on any other public platform. We ensure that none of the above updates disclose any personal information about you.
We never sell personal information, and all uses are limited to providing, securing, and enhancing the Qweebi platform.
5. Information We Share
As described in this policy, we do not share any personal information about you with third parties for their direct marketing purposes.
CCPA – Sales & Financial Incentives: We do not sell or share your personal information for monetary consideration and do not offer financial incentives for the retention of your data.
6. Information Users Share
The Qweebi online makerspace includes a “show-and-tell” feature that allows students to record project videos. Use of this feature is optional. Teachers may choose to incorporate video recording as part of classroom activities.
Students may:
Share their screen
Enable or disable their camera and microphone
Record a project video
Upload the recording to Qweebi’s secure servers
How Project Videos Are Shared
Project videos recorded within Qweebi are shared only in the following ways:
Submission to the Teacher Within the Platform
Students may submit their project video directly within Qweebi for teacher review as part of classroom activities. These videos are accessible only to the student and their teacher within the platform.Teacher-Controlled Sharing via Private Link
Teachers may generate a private link to a student’s project video from the teacher dashboard for limited educational sharing, such as with parents or school staff.
• Only teachers have the ability to generate and manage these links
• Qweebi does not allow students to create or share links to their videos
• Access to the video is limited to individuals who have been provided the link by the teacherThese links are intended for limited, teacher-directed sharing and are not designed for public distribution. Teachers are responsible for determining whether and how these links are shared externally.
Teacher-Created Showcase Galleries
Teachers may choose to curate selected student project videos into a private Showcase gallery. The Showcase feature is optional and fully controlled by the teacher.A Showcase may include:
• Student project videos selected by the teacher
• Student display names as configured by the teacher
• Project titles
• The teacher’s name, if displayedA Showcase is accessible via a unique link generated and controlled by the teacher. These links are intended for limited educational sharing, such as with parents, school staff, or within school communities.
Qweebi does not make Showcase pages publicly searchable or index them within the platform. Teachers are responsible for determining whether and how Showcase links are shared externally.
Teachers may publish, unpublish, or delete a Showcase at any time.
Important
Students do not have the ability to generate or share public or private links to their project videos.
All student-generated content remains accessible within the educational context defined by the school or teacher. Any external sharing is initiated and controlled solely by the teacher.
Privacy and User Responsibility
We encourage teachers and students to review recordings carefully before sharing and to avoid disclosing sensitive personal information such as full names, home addresses, or personal contact details.
Qweebi does not actively review videos prior to upload and is not responsible for personally identifiable information voluntarily disclosed by users within recordings.
Removal of Student Content
To permanently remove any student content, teachers or parents/guardians can email us at [email protected] with the student identifier (username and link to the video) that you want to be removed. We will remove the video within 7 working days and confirm once completed.
7. Third-Party Service Providers
We use a handful of third-party service providers—companies that provide infrastructure and software services that help us operate the platform. These are-
Service is used to capture product usage metrics associated with student accounts, for educational and performance improvement purposes.
Used for app crash report and delivering assets and configuration to the online makerspace.
Used for storing and processing project videos and anonymous web analytics.
Primary cloud infrastructure for hosting application servers, databases, storage, and backups (primary region: us-east-1, N. Virginia).
Used for online makerspace crash reporting.
Used for capturing user interactions and events on the teacher dashboard (exclusively for teacher users!)
Used to provide chat support to teacher users on the teacher dashboard.
Google Classroom/ Google Workspace
Import class rosters and authenticate student and teacher log-ins via Google Sign-In.
Microsoft (Microsoft Entra ID / Microsoft 365)
Authenticate teacher log-ins via Microsoft Sign-In.
Used to authenticate teacher and student logins via Clever SSO and to import class rosters when schools choose to connect Clever.
Google APIs Limited Use: When you connect Google Classroom/Google Sign-In, our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Microsoft API Use: When you connect Microsoft Sign-In, our use of information received from Microsoft APIs is limited to authentication and account creation and complies with applicable Microsoft API Services Terms.
Clever API Use: Information received from Clever is used only for authentication and class roster management and is not used for any other purpose.
All third parties are bound by contract to process data only as needed to provide their services.
8. Security and Data Retention
Security Safeguards
Vendor-Managed Controls:
Amazon Web Services (AWS): independently audited cloud infrastructure (e.g., SOC 2 Type II, ISO 27001). Primary hosting region: us-east-1 (N. Virginia).
Cloudflare: SOC 2 Type II controls for edge services and storage; DDoS mitigation and WAF.
Encryption: Data is encrypted in transit (TLS 1.2+) and at rest (e.g., AES-256) within our cloud services.
Shared Responsibility: We follow the AWS shared-responsibility model—AWS secures the cloud; Qweebi secures how we configure and use services within the cloud.
Qweebi’s Controls:
Configuration Management: We enforce TLS for all endpoints, configure web-application firewall (WAF) rules, and rotate encryption keys quarterly.
Access Review: User permissions are audited monthly; access is granted on a least-privilege basis.
Logging & Monitoring: Production systems log all administrative actions and review logs from time to time for anomalies.
Incident Response: Documented procedures trigger breach notifications within 72 hours in accordance with applicable U.S. state laws.
Our primary backend runs on Amazon Web Services (AWS) in us-east-1 (N. Virginia), and we use Cloudflare for storing and delivering project videos.
Data Breach Notification
In the event of a data breach, the controller will notify supervisory authorities within 72 hours of becoming aware and will notify affected individuals as required by applicable U.S. state and international laws.
Data Retention
We retain personal data only as long as necessary to fulfill the purposes described in this policy or to comply with legal obligations:
Transactional Records: up to 7 years.
Temporary Logs: up to 30 days, unless otherwise required.
Note that deletion may also be triggered by account deletion, in which case we will permanently delete the relevant data within 30 days and certify its removal upon request.
Data Location:
Regardless of where you are located, your personal information may be processed and stored in the United States (AWS us-east-1).
9. Cookies & Similar Technologies
We use cookies and similar tracking technologies to:
Essential Cookies: enable core site functionality.
Analytics Cookies: capture anonymized usage metrics via Mixpanel and PostHog.
Performance Cookies: improve page load and asset delivery.
Managing Cookies: You can manage, block, or delete cookies at any time by adjusting your browser settings. For instructions, please refer to your browser’s help documentation.
10. Removing Content Posted By Users
1. Removal of Content
To remove content you have uploaded, you will need to send a request to [email protected] with your username and URL link of the uploaded content.
We will remove the content permanently within 7 working days.
2. Deletion of Account
To delete your account, please follow the steps in 10.1
11. COPPA & FERPA Compliance
COPPA School Exception: We rely on schools (and their teachers) to act as agents of parents by creating or importing student accounts—including importing full names and account identifiers (such as Google Account IDs or Clever User IDs) from platforms like Google Classroom or Clever—only after obtaining any permissions required by local law. Teachers provide us only the minimal information needed to deliver our educational services. We never collect student data directly from children. The information is used solely to enable classroom activities and is not shared with unauthorized third parties.
FERPA School Official Exception: Under FERPA’s School Official exception, we process student records only at the request of, and under the direct control of, the school or district. We implement procedures to limit redisclosure of those records and to support district requests for record review, amendment, and data-destruction certification. Optional features such as student video submission and teacher-created Showcase galleries are enabled and controlled by the school or teacher acting under this School Official exception.
If we learn that we have unknowingly collected a Child’s personal information without legally required parental consent, we will take steps to delete the information as soon as possible. Parents who believe that their child has submitted personal information to us and would like to have it deleted may contact us at [email protected].
We do NOT require student users to submit any personally identifiable information beyond what is provided by the school under these exceptions.
12. Contact Information
For any privacy inquiries or to exercise your rights, please contact us at:
Email:[email protected]
Mail (U.S. users):
Qweebi Inc.
2093 Philadelphia Pike #8009
Claymont, DE 19703, USA
Mail (non-U.S. users):
Virtual Learning Machines Pte. Ltd.
68 Circular Road #02-01
Singapore 049422