Skip to content

Qweebi Privacy Policy

Last Updated: August 5, 2026

This Privacy Policy is issued jointly by Qweebi Inc. (2093 Philadelphia Pike #8009, Claymont, DE 19703, USA) and Virtual Learning Machines Pte. Ltd. (68 Circular Road #02-01, Singapore 049422) (“VLMPL”) (collectively, “Qweebi,” “we,” “our”). It explains how both entities collect, use, share, and protect your personal information when you use our website, online makerspace, teacher dashboard, and related services.

We may make changes to this Privacy Policy from time to time. If we make changes, we will notify you by revising the “Last Updated” date above, and, in some cases, we may provide you with additional notice (such as adding a statement to our website or sending you a notification when you access the Qweebi teacher dashboard or makerspace platform). We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.

Table of Contents

  1. Who is the Data Controller?
  2. Data Subject Rights
  3. Information That Qweebi Collects
  4. Use of Personal Information
  5. Information We Share
  6. Information Users Share
  7. Third-Party Service Providers
  8. Security and Data Retention
  9. Cookies and Similar Technologies
  10. Removing Content Posted By Users
  11. COPPA & FERPA Compliance
  12. Contact Information

1. Who is the Data Controller?

Depending on where you live, one of these entities is responsible for your personal information:

  • If you’re in the U.S.: Qweebi Inc. (2093 Philadelphia Pike #8009, Claymont, DE 19703, USA) decides why and how your data is processed under U.S. privacy laws. Our parent company, Virtual Learning Machines Pte. Ltd., handles the technical processing of that data on our behalf.
  • If you’re outside the U.S.: Virtual Learning Machines Pte. Ltd. (68 Circular Road #02-01, Singapore 049422) decides why and how your data is processed under the laws that apply in your country and processes it to provide, secure, and improve our services.

2. Data Subject Rights

United States (CCPA / State Privacy Laws)

  1. Right to Know what personal information we collect, use, share, or sell.
  2. Right to Delete your personal information, subject to statutory exceptions.
  3. Right to Correct inaccurate personal information we hold about you.
  4. Right to Opt-Out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under applicable state privacy laws.
  5. Right to Limit certain uses and disclosures of sensitive personal information, where applicable.
  6. Right to Non-Discrimination for exercising your privacy rights.
  7. Additional State Rights (for example, Nevada’s “Right to Access” and “Right to Delete”).

European Union / United Kingdom (GDPR / UK-GDPR)

  1. Right of Access — obtain confirmation and a copy of your personal data.
  2. Right to Rectification — correct inaccurate or incomplete data.
  3. Right to Erasure (“Right to be Forgotten”) — request deletion of your data.
  4. Right to Restriction of Processing — block or suppress processing.
  5. Right to Data Portability — receive your data in a structured, commonly used format.
  6. Right to Object — object to processing based on public interest or direct marketing.
  7. Right to Withdraw Consent — withdraw consent for processing at any time.
  8. Right to Lodge a Complaint with a supervisory authority.

Other Jurisdictions

Where local law grants additional rights (for example, Brazil’s LGPD or Canada’s PIPEDA), we will honor those to the fullest extent required by law and respond through the same request channels listed above.

To exercise your rights under any applicable law (CCPA, COPPA/FERPA, GDPR, LGPD, PIPEDA, etc.), please email [email protected]. We will route your request to the appropriate controller — Qweebi Inc. for U.S. residents or VLMPL for non-U.S. residents — and respond within the timeframes required by the relevant law.

3. Information That Qweebi Collects

We collect the personal data described below.

(California residents: the categories & purposes listed here also serve as our CCPA “Notice at Collection”; other readers can skip this notice.)

Categories & Purposes

  • Identifiers — Teachers

    • Name, email address, school name, school type, school address, role, and grades taught → used to create and manage teacher accounts.
    • Google Sign-In name, email address, and Google Account ID → used to create and authenticate teacher accounts when teachers choose to sign up or log in using Google.
    • Microsoft Sign-In name, email address, and Microsoft Account ID → used to create and authenticate teacher accounts when teachers choose to sign up or log in using Microsoft.
    • Clever Sign-In name, email address, and Clever User ID → used to create and authenticate teacher accounts when teachers choose to sign up or log in using Clever.
    • ClassLink Sign-In name, email address, and ClassLink User ID → used to create and authenticate teacher accounts when teachers choose to sign up or log in using ClassLink.
    • Google Classroom email + Google Account ID → authenticate the teacher and let them import classes from Google Classroom.
    • Clever account information (including name, email address, class roster data, and Clever User ID) → used to authenticate the teacher and enable class roster import when teachers choose to import classes from Clever.
    • ClassLink account information (including name, email address, class roster data, and ClassLink User ID) → used to authenticate the teacher and enable class roster import when teachers choose to import classes from ClassLink.

  • Identifiers — Students

    • Full name (imported from Google Classroom, Clever, or ClassLink) → lets teachers recognize students in the dashboard.
    • Google Account ID (imported from Google Classroom), Clever User ID (imported from Clever), or ClassLink User ID (imported from ClassLink) → used only to let students sign in and access the makerspace.
    • Username (may be pseudonymous) → classroom login credential.

  • Device & Performance Data: CPU, RAM, OS version, application crash reports → to monitor and improve service quality.

  • Usage Data: Project launches, video uploads, makerspace interactions → to operate, optimize, and enhance the platform.

  • Internet or Other Electronic Activity Information: Pages viewed, website interactions, referral sources, session and engagement information, browser and device information, cookie choices, and browser identifiers → used to understand website usage, measure teacher sign-ups, and improve Qweebi.

  • Approximate Location Information: General location, such as country or region, derived from the visitor’s connection → used for analytics and applying regional privacy choices.

A. User Accounts

1. Teacher Accounts

Teachers may create accounts using:

  • Standard email sign-up
  • Google Sign-In
  • Microsoft Sign-In
  • Clever Sign-In
  • ClassLink Sign-In

Account information we collect for all teachers — after account creation, all teachers are required to provide:

  • Name
  • Email address
  • Role (e.g., “4th grade teacher”)
  • School name, type (public/private/charter), and address
  • Grades you teach

Additional information based on sign-in method:

  • Google Sign-In: Google name and email address; Google Account ID (used only to authenticate your account).
  • Microsoft Sign-In: Microsoft name and email address; Microsoft Account ID (used only to authenticate your account).
  • Clever Sign-In: Clever name and email address; Clever User ID (used only to authenticate your account).
  • ClassLink Sign-In: ClassLink name and email address; ClassLink User ID (used only to authenticate your account).

If you later choose to import from Google Classroom, Clever, or ClassLink, we additionally collect:

  • Google Classroom: Google Classroom email (if different from your sign-up email); Google Account ID (used only to authenticate your Google Classroom connection).
  • Clever: student full names (from Clever roster); class roster information; Clever User IDs (used only for authentication and class access).
  • ClassLink: student full names (from ClassLink roster); class roster information; ClassLink User IDs (used only for authentication and class access).

2. Student Accounts (under 18)

Students cannot sign up themselves. Teachers create — or import — student accounts and provide:

  • Student full name (from manual entry or Google Classroom, Clever, or ClassLink import)
  • Username (may be pseudonymous)
  • Google Account ID, Clever User ID, or ClassLink User ID (only when classes are imported from Google Classroom, Clever, or ClassLink)

How students log in: depending on how the teacher sets up the class, students can sign in with (a) Google, Clever, or ClassLink Sign-In, or (b) a class code and username. We do not require any additional personally identifiable information from student users.

B. Automatically Collected Information

1. Device & Performance Data

  • Device type (desktop, tablet, mobile)
  • System details (CPU, RAM, OS version)
  • Application crash and error reports

2. Usage Data

  • Actions such as launching a project, adding objects in the makerspace, or uploading a video
  • Feature usage metrics (e.g., which challenges are attempted most)

3. Website Analytics Data

  • We use Google Analytics on Qweebi’s public website and teacher sign-up and login pages. In regions where prior consent is required, analytics is off until you accept it. In other regions, analytics may be active by default, and you can opt out at any time through our cookie banner. It collects information about how visitors find and use these pages, including pages viewed, website interactions, referral sources, general device and browser information, approximate location, and a browser identifier.
  • Sign-up Attribution: We record the site that referred you and the page you landed on so we can understand which channels lead to teacher sign-ups. Where prior consent is required, this information is recorded only after you accept analytics cookies. In other regions, it may be recorded by default, and you can opt out at any time. If you decline or opt out, we remove the related identifiers stored on your device and stop future collection.
  • We do not use Google Analytics to collect names, email addresses, school information, form responses, or student information.

4. Use of Personal Information

1. Teacher Information

Used exactly as described in Section 3 to deliver classroom functionality (e.g., manage teacher accounts, authentication via Google, Microsoft, Clever, or ClassLink, and class roster import via Google Classroom, Clever, or ClassLink). We may also use your information to contact you about feature updates, product support, or optional training resources. You can opt out of these messages at any time.

2. Student Information

Used only as described in Section 3 to deliver classroom functionality (e.g., dashboard display, Google, Clever, or ClassLink Sign-In). We do not use student information for marketing, profiling, or advertising, and we do not disclose it to unauthorized third parties.

3. Device, Performance, and Usage Data

  • Used only as described in Section 3 to help us operate, maintain, and improve the platform.
  • Website analytics data is used to understand how visitors find and use Qweebi, measure completed teacher sign-ups, and improve our website and sign-up experience.
  • We do not use this data for advertising or student profiling.
  • We may share or publish aggregated information about our users — such as statistics about the number of users using our product or the most popular student challenges — on our website, social media channels, and other public platforms. None of these updates disclose any personal information about you.

We never sell personal information, and all uses are limited to providing, securing, and enhancing the Qweebi platform.

5. Information We Share

As described in this policy, we do not share any personal information about you with third parties for their direct marketing purposes.

CCPA — Sales & Financial Incentives: We do not sell or share personal information as those terms are defined under applicable state privacy laws.

6. Information Users Share

The Qweebi online makerspace includes a “show-and-tell” feature that allows students to record project videos. Use of this feature is optional. Teachers may choose to incorporate video recording as part of classroom activities.

Students may:

  • Share their screen
  • Enable or disable their camera and microphone
  • Record a project video
  • Upload the recording to Qweebi’s secure servers

How project videos are shared — project videos recorded within Qweebi are shared only in the following ways:

  1. Submission to the teacher within the platform. Students may submit their project video directly within Qweebi for teacher review as part of classroom activities. These videos are accessible only to the student and their teacher within the platform.
  2. Teacher-controlled sharing via private link. Teachers may generate a private link to a student’s project video from the teacher dashboard for limited educational sharing, such as with parents or school staff.
    • Only teachers have the ability to generate and manage these links.
    • Qweebi does not allow students to create or share links to their videos.
    • Access to the video is limited to individuals who have been provided the link by the teacher.
    • These links are intended for limited, teacher-directed sharing and are not designed for public distribution. Teachers are responsible for determining whether and how these links are shared externally.
  3. Teacher-created Showcase galleries. Teachers may choose to curate selected student project videos into a private Showcase gallery. The Showcase feature is optional and fully controlled by the teacher.
    • A Showcase may include: student project videos selected by the teacher, student display names as configured by the teacher, project titles, and the teacher’s name (if displayed).
    • A Showcase is accessible via a unique link generated and controlled by the teacher. These links are intended for limited educational sharing, such as with parents, school staff, or within school communities.
    • Qweebi does not make Showcase pages publicly searchable or index them within the platform. Teachers are responsible for determining whether and how Showcase links are shared externally.
    • Teachers may publish, unpublish, or delete a Showcase at any time.

Important: Students do not have the ability to generate or share public or private links to their project videos. All student-generated content remains accessible within the educational context defined by the school or teacher. Any external sharing is initiated and controlled solely by the teacher.

Privacy and user responsibility: We encourage teachers and students to review recordings carefully before sharing and to avoid disclosing sensitive personal information such as full names, home addresses, or personal contact details. Qweebi does not actively review videos prior to upload and is not responsible for personally identifiable information voluntarily disclosed by users within recordings.

Removal of student content: To permanently remove any student content, teachers or parents/guardians can email us at [email protected] with the student identifier (username and link to the video) that you want removed. We will remove the video within 7 working days and confirm once completed.

7. Third-Party Service Providers

We use a handful of third-party service providers — companies that provide infrastructure and software services that help us operate the platform:

  • Mixpanel: captures product usage metrics associated with student accounts, for educational and performance improvement purposes.

  • Unity Gaming Services: app crash reports and delivering assets/configuration to the online makerspace.

  • Cloudflare: storing and processing project videos and anonymous web analytics.

  • Amazon Web Services: primary cloud infrastructure for hosting application servers, databases, storage, and backups (primary region: us-east-1, N. Virginia).

  • Sentry: online makerspace crash reporting.

  • PostHog: used to understand interactions on our public website and teacher dashboard, subject to the cookie rules that apply where you are. PostHog is not used for student accounts.

  • Google Analytics: used, subject to the cookie rules that apply where you are, to measure traffic and activity on Qweebi’s public website and teacher sign-up and login pages, and to measure completed teacher sign-ups. Google Analytics uses cookies and a browser identifier to recognize a browser across visits. We do not enable Google’s advertising features.

  • Intercom: providing chat support to teacher users on the teacher dashboard.

  • Google Classroom / Google Workspace: import class rosters and authenticate student and teacher log-ins via Google Sign-In.

  • Microsoft (Microsoft Entra ID / Microsoft 365): authenticate teacher log-ins via Microsoft Sign-In.

  • Clever: authenticate teacher and student logins via Clever SSO and import class rosters when schools choose to connect Clever.

  • ClassLink: authenticate teacher and student logins via ClassLink SSO and import class rosters when schools choose to connect ClassLink.

  • Google APIs Limited Use: When you connect Google Classroom/Google Sign-In, our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • Microsoft API Use: When you connect Microsoft Sign-In, our use of information received from Microsoft APIs is limited to authentication and account creation and complies with applicable Microsoft API Services Terms.

  • Clever API Use: Information received from Clever is used only for authentication and class roster management and is not used for any other purpose.

  • ClassLink API Use: Information received from ClassLink is used only for authentication and class roster management and is not used for any other purpose.

All third parties are bound by contract to process data only as needed to provide their services.

8. Security and Data Retention

Security Safeguards

Vendor-managed controls:

  • Amazon Web Services (AWS): independently audited cloud infrastructure (e.g., SOC 2 Type II, ISO 27001). Primary hosting region: us-east-1 (N. Virginia).
  • Cloudflare: SOC 2 Type II controls for edge services and storage; DDoS mitigation and WAF.
  • Encryption: data is encrypted in transit (TLS 1.2+) and at rest (e.g., AES-256) within our cloud services.
  • Shared responsibility: we follow the AWS shared-responsibility model — AWS secures the cloud; Qweebi secures how we configure and use services within the cloud.

Qweebi’s controls:

  • Configuration management: we enforce TLS for all endpoints, configure web-application firewall (WAF) rules, and rotate encryption keys quarterly.
  • Access review: user permissions are audited monthly; access is granted on a least-privilege basis.
  • Logging & monitoring: production systems log all administrative actions and review logs from time to time for anomalies.

Incident Response and Breach Notification: We maintain procedures for responding to security incidents. If a breach occurs, we will notify relevant authorities, schools, affected individuals, or other parties within the timeframes required by applicable law.

Data Retention: We retain personal data only as long as necessary to fulfill the purposes described in this policy or to comply with legal obligations:

  • Customer Data: account, school, student, project, and uploaded content data is retained while the applicable subscription is active and deleted within 30 days after account deletion, a valid customer request, or the end of the subscription, unless a longer period is required by law.
  • Product Analytics Data: information collected through Mixpanel and PostHog is retained only as long as reasonably necessary to understand product usage, maintain security, and improve Qweebi. Retention periods are based on the settings configured with each provider.
  • Transactional Records: up to 7 years.
  • Temporary Logs: up to 30 days, unless otherwise required.
  • Google Analytics Data: Google Analytics retains detailed website activity data for 2 months and information linked to the same browser for up to 14 months after its most recent activity. Aggregated analytics reports may be retained for longer.

Data Location: Our primary application data is stored in the United States, primarily through Amazon Web Services in us-east-1. Some service providers, including Google Analytics, may process information in other countries where they operate, subject to applicable data-protection safeguards.

9. Cookies & Similar Technologies

We use cookies and similar technologies for the following purposes:

  • Essential Cookies: needed for core website functions, security, and remembering your cookie choice. These cookies are always active.
  • Website Analytics Cookies: we use Google Analytics to understand how visitors find and use Qweebi and to measure completed teacher sign-ups. In regions where prior consent is required, these cookies are off until you accept them. In other regions, they may be active by default, and you can opt out at any time through our cookie banner.
  • Website and Platform Analytics: we use PostHog on our public website and teacher dashboard and Mixpanel within the student platform to understand how Qweebi is used and improve the experience. PostHog is not used for student accounts. Where these tools use optional cookies or identifiers, we apply the consent or opt-out rules that apply where you are.
  • Performance Technologies: help us improve page loading and deliver website and platform content.
  • Advertising Cookies: Qweebi does not use advertising cookies or Google advertising features.

Managing Your Choice: You can accept or reject website analytics cookies through our cookie banner and reopen the banner at any time to change your choice. If you decline or opt out, we remove related analytics identifiers stored on your device and stop future collection. We keep a record of your cookie choice and when it was made. You can also block or delete cookies through your browser settings.

Global Privacy Control: If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of website analytics cookies.

10. Removing Content Posted By Users

1. Removal of Content

  1. To remove content you have uploaded, send a request to [email protected] with your username and the URL link of the uploaded content.
  2. We will remove the content permanently within 7 working days.

2. Deletion of Account

To request deletion of your account, email [email protected] from the email address connected to the account. We may request additional information to verify the request before completing deletion.

11. COPPA & FERPA Compliance

  1. COPPA School Exception: We rely on schools (and their teachers) to act as agents of parents by creating or importing student accounts — including importing full names and account identifiers (such as Google Account IDs, Clever User IDs, or ClassLink User IDs) from platforms like Google Classroom, Clever, or ClassLink — only after obtaining any permissions required by local law. Teachers provide us only the minimal information needed to deliver our educational services. Students cannot self-register. Their accounts are created or imported by their teacher or school. We may automatically collect limited device, performance, and usage information when students use the service. This information is used only to provide, secure, and improve the school-authorized educational service.
  2. FERPA School Official Exception: Under FERPA’s School Official exception, we process student records only at the request of, and under the direct control of, the school or district. We implement procedures to limit redisclosure of those records and to support district requests for record review, amendment, and data-destruction certification. Optional features such as student video submission and teacher-created Showcase galleries are enabled and controlled by the school or teacher acting under this School Official exception.
  3. If we learn that we have unknowingly collected a child’s personal information without legally required parental consent, we will take steps to delete the information as soon as possible. Parents who believe that their child has submitted personal information to us and would like to have it deleted may contact us at [email protected].
  4. We do NOT require student users to submit any personally identifiable information beyond what is provided by the school under these exceptions.

12. Contact Information

For any privacy inquiries or to exercise your rights, please contact us at:

Email: [email protected]

Mail (U.S. users): Qweebi Inc. 2093 Philadelphia Pike #8009 Claymont, DE 19703, USA

Mail (non-U.S. users): Virtual Learning Machines Pte. Ltd. 68 Circular Road #02-01 Singapore 049422