Doctor Dyslexia Dude LLC operates Atlas Spelling — a structured spelling decision documentation system that uses Merriam-Webster pronunciation as a fixed reference. The platform records student spelling decision sessions and provides educator-facing infrastructure that allows teachers to observe patterns in those decisions over time. These observations are generated from the student's recorded spelling sessions and are visible only to the authorized educator associated with the classroom account. The platform supports teacher- and tutor-led literacy instruction for students of all ages, including students in school settings, private tutoring, and home learning environments.
Atlas Spelling is designed for:
🔒 How Student Privacy Is Protected
Student session records — the words worked on, spelling decisions made, and reflections written — are stored using server-generated anonymous session IDs. No student name is written to any session record. Teachers may optionally create a roster of labels (nicknames or first names) to control who can enter their classroom; those labels are stored under the teacher's account, not linked to session records. Full legal names and student ID numbers should never be entered anywhere on this platform.
We collect the minimum information necessary for the platform to function. Specifically:
We do not collect — and the system is designed to prevent the storage of — full legal student names, student ID numbers, dates of birth, addresses, phone numbers, photographs, race, income, disability diagnoses, or any other information that would directly identify a student. When a student enters a label at classroom entry, that label is used only to match them against the teacher's roster. It is then converted to a one-way cryptographic fingerprint used solely to recognize returning students; the fingerprint is not reversible and cannot be used to recover the original label. No student label or name is written to any session record.
All session data is stored in a secured cloud database (Supabase) with encrypted connections (TLS/HTTPS), access controls, and row-level security. Only authorized account holders — the Educator, tutor, or parent who created the account — can view the session records associated with their students. Doctor Dyslexia Dude LLC staff may access data only for the purpose of operating and improving the platform.
The platform enforces the following technical security measures on every request: HTTPS with HTTP Strict Transport Security (HSTS), Content Security Policy (CSP), X-Frame-Options, X-Content-Type-Options, rate limiting on all endpoints, session token expiration, and audit logging of authentication and data events. No passwords are stored — authentication uses one-time magic links only. Verification and sign-in links expire after 15 minutes. Student session tokens remain valid for the duration of the school year, allowing students to return to their classroom without re-entering their code each session.
If we become aware of a data breach that affects your information or your students' information, we will notify you and any applicable school or institution within 72 hours of discovery, as required by applicable law.
Session records are accessible only to:
The platform uses AI-powered features that process session data. These features include:
All AI processing that uses the Anthropic API is performed under a data processing agreement. Anthropic does not use student session data to train its models. Data transmitted to the Anthropic API is limited to what is necessary for each feature to function and is not stored by Anthropic beyond the duration of the API request. The Difficulty Escalation Agent, Vocabulary Agent, Agent Orchestrator, and Live Alerts features operate entirely within the platform's own infrastructure and do not transmit data to the Anthropic API.
No third party other than Anthropic has access to session data. In the future, de-identified and aggregated data — meaning data from which all names and identifiers have been permanently removed — may be shared with authorized research or educational partners. Any such sharing will be disclosed in advance through an updated Privacy Policy and will never include any personally identifiable information.
We use the data collected through the platform for the following purposes:
We do not use session data for advertising. We do not sell data. We do not use student data for any commercial purpose.
We retain session data for a maximum of five (5) years from the date it was created. At the end of that period, all session records are permanently deleted. Because the platform does not store student names or identifiers, there is no identity data to purge — only session records keyed by opaque server-generated IDs.
You may request deletion of your data or your student's data at any time before the five-year period ends by contacting us at [email protected]. We will complete deletion within 45 days of a verified request.
Any data used for platform improvement analysis is de-identified before analysis and is never stored or published in a form that could identify any individual student.
The platform may be used with students under the age of 13. We comply with the Children's Online Privacy Protection Act (COPPA). The platform does not collect personal information from students — no full legal name, no student ID, no contact information, no photos, no sensitive personal data. Students under 13 never register their own accounts. All account creation is handled by an adult Educator or parent. Teachers may optionally create a roster using short labels or nicknames; those labels are stored under the teacher's account. Students may enter a short label at classroom entry solely to match their roster seat; that label is not retained in any session record. The platform's architecture is designed to minimize the personal information associated with student activity.
When the platform is used in a school or district setting, the school may designate Doctor Dyslexia Dude LLC as a school official with a legitimate educational interest under the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g, and its implementing regulations at 34 C.F.R. Part 99. When a school makes that designation, Doctor Dyslexia Dude LLC agrees to operate under the following obligations:
The school is responsible for ensuring that required parental notification procedures are followed and that the school's annual FERPA notice to parents covers the use of service providers such as Doctor Dyslexia Dude LLC. By enabling student access to the platform, the school confirms that these obligations have been met.
Under FERPA, parents and eligible students (students 18 or older) have the right to inspect and review the student's education records. To exercise this right for records held through the platform, contact us at [email protected]. We will coordinate with the school as required.
The following data fields constitute student education records under FERPA when the platform is used in a school setting: grade level, all spelling session records (words worked on, pronunciation entries, phoneme-to-grapheme decisions, written reflections), session dates and times, session profile summaries, pattern observations generated by the platform's automated systems, session debrief summaries, vocabulary bank entries, difficulty escalation observations, monthly progress report narratives, and live alert observations.
Session records are identified by server-generated session IDs — opaque tokens that carry no identity information. No student name is written to any session record. Teachers may maintain a roster of short labels under their account for the purpose of controlling classroom access; those roster labels are stored separately and are never written into session records. Schools wishing to associate session records with specific named students must maintain that association in their own systems.
The Educator's email address and account credentials are not student education records — they are operator account data.
When a parent or guardian registers an account and enters their child's information, that act of registration constitutes the parent's or guardian's consent for their child to use the platform and for the limited data described in this Policy to be collected on their child's behalf. FERPA does not apply in private, non-school settings. Privacy protections described in this Policy apply regardless.
By creating an account and using Atlas Spelling, you confirm that:
For students under the age of 13 in school settings, the school's agreement to the Terms of Use and their existing parental consent processes serve as the consent framework under COPPA.
You have the right to access, correct, request deletion of, or export any data associated with your account at any time. Teachers may download their own session data — including phoneme and grapheme decisions, stage timing, and orchestration events — as CSV or JSON from the insights view at any time. Exported data contains only opaque session IDs and never any student identifier. To make a request, contact us at [email protected]. We will respond within 45 days.
Parents and guardians may request access to or deletion of their child's session data. Requests related to student records held within a school account should be directed to the school's designated administrator, consistent with FERPA.
We may update this Privacy Policy as the platform evolves. If we make material changes — particularly any changes to how we collect, use, or share data — we will notify you by email and by posting a notice on the platform before the changes take effect.