Short version: the app collects nothing about the student, has no accounts, no ads and no analytics, and the work stays on the device.
Nothing. The app has no accounts, no sign in, no ads, no analytics, no tracking and no crash reporting. We do not receive the student's name, their handwriting, their work, their device identifiers or anything else. There is no server that belongs to this app, so there is nowhere for data to go.
On the device, and only on the device. Pages, handwriting strokes and settings are saved in the app's own private storage. Nothing is backed up to a cloud service by the app.
The work leaves the device only when the student or a parent chooses to share it, by exporting a PDF and sending it through the device's own share sheet. At that point the work goes wherever they send it, for example to email or to a classroom app, and that service's own privacy policy applies to it.
Once, and only if asked. The app reads handwriting using Google's ML Kit Digital Ink Recognition, which runs entirely on the device but has to download its recognition model the first time. That download happens only when someone taps the download button in Settings, and it requests the model from Google.
After that the app never uses the internet again. Handwriting is never sent anywhere for recognition. The reading happens on the tablet, offline. If the model is never downloaded, the app still works as graph paper and the exported PDF still shows the student's handwriting.
Google's handling of that one model download is covered by Google's privacy policy.
This app is intended for students, including children under 13. It is designed so there is nothing to protect: it collects no personal information, shows no ads, has no social or messaging features, no in-app purchases and no links out to the web from inside the app. Because nothing is collected, there is nothing to request, correct or delete, and no consent is needed for data collection that does not happen.
The app does not ask for the camera, the microphone, contacts, location, storage outside its own folder, or any other permission.
The app includes a Test Mode intended for use as digital scratch paper. Test Mode refuses to start unless the handwriting model is already on the device and the tablet's internet is turned off, so a testing session never involves the network. Ending Test Mode permanently erases the work, which matches the rule that scratch work is collected and destroyed after each session.
Test Mode is planned for a later phase and is not in the pilot build yet.
If this policy changes, the date at the top changes with it. If a future version of the app ever collected anything, that would be stated here plainly and before the fact.
Questions about privacy can go to raymond@artcmr.com.