Generation 3 Academy · The Vessels
What we store about your child, who can see it, how long we keep it, and what we ask of the students who use it. Written to be read by a parent, not by a lawyer.
This agreement is between Generation 3 Academy and the family of each student who uses The Vessels, our Islamic Studies platform for grades 6–12.
Accounts are issued through a school. A student cannot sign up without an access code given to their family by the academy, each code opens a single student account and cannot be used again, and a parent account can only be linked to a child with that child’s agreement.
We collect as little as the platform can work with. Most of what a service like this normally asks for, we do not ask for at all.
Because we hold no email address for a student, we can never contact your child directly, and a forgotten password has to be reset by their teacher in person.
A student and a parent can register together, or a parent can join later using the family code shown on their child’s page.
A family code on its own never opens a child’s record. It creates a request, and the student has to say yes. Until they do, the person who used the code sees nothing but the child’s first name.
This is deliberate. Usernames can be guessed; if naming one were enough to become a child’s parent, a stranger could read their progress.
At each checkpoint, students discuss the lesson with an AI teacher rather than answering multiple choice. The AI asks questions and gives hints; it never gives answers, never invents a verse or hadith, and never issues a religious ruling.
These conversations are recorded, and the teacher can read them. This is how the school checks that a student reasoned the answer out themselves rather than talking the AI into passing them.
Students are told this plainly on their own page, in words they will understand. We think a child who knows they are being read writes more honestly — the openness is part of the point, not a formality.
They are deleted after 90 days, automatically, every night. Nothing is kept indefinitely.
Please talk to your child about this. Children sometimes write personal things into a box that feels private — a worry, a family situation. Ask them to treat the AI teacher as they would a teacher sitting beside them, because that is what it is.
Parents see whether each checkpoint was passed and the points earned, but not the text of what their child wrote. If you would like to read your own child’s conversations, ask the school and they will arrange it.
Students earn Inner Flame by completing daily quests. These come in two kinds.
Private acts of worship — a duʿā on waking, praying attentively, personal dhikr — are between your child and Allah. We take their word for it and ask nobody to check. Nobody could.
Things you can see at home — making a bed, helping with dishes, speaking gently to a sibling, putting the phone away at dinner — appear in your parent portal for you to confirm.
Your child receives the flame the moment they claim the deed, so they are never left waiting on you. When you confirm it, it is theirs for good.
If you answer that it did not happen, they lose the flame they were given and 30 more. A false claim is meant to cost more than the deed was worth. Please use it only when you are sure — it is a lesson in truthfulness, not a punishment for a misunderstanding.
| Student | Parent | Teacher | Head teacher | |
|---|---|---|---|---|
| Their own progress | Yes | Their children | Their class | Everyone |
| Another child’s progress | No | No | Not other classes | Yes |
| Tutor conversations | Their own | Result only | Their class | Everyone |
| Grades and remarks | Their own | Their children | Sets them | Sets them |
| Deed confirmations | Their own | Confirms them | Their class | Everyone |
Every time a teacher opens a child’s conversations, that is recorded — who looked, at whose, and when. An adult reading a child’s private writing should leave a trace.
| What | Kept for |
|---|---|
| Tutor conversations | 90 days, then deleted automatically |
| Sign-in attempts and IP | About one day |
| Activity history | One year — counts only, not writing |
| Account and progress | Until the account is removed |
You can ask the school to delete your child’s account at any time. When they do, everything goes with it: progress, deeds, grades and conversations. It cannot be undone.
Running the platform means a few other companies handle data on our behalf. We use no analytics, no advertising networks and no social media trackers.
| Company | What they do |
|---|---|
| Cloudflare | Hosts the site and the database. All student data is stored here. |
| Provides the AI teacher. Sees the lesson text and what a student writes at a checkpoint. | |
| Groq | A backup AI provider, used when Google is unavailable. Same content. |
| everyayah.com | Supplies the Qur’an recitation audio. |
| Google Fonts | Supplies the typefaces. Receives an IP address when a page loads. |
To be confirmed before this agreement is issued: which of these hold a data processing agreement covering student data, and whether the school requires the AI providers to be contractually barred from training on what is sent to them.
An account may be suspended for sharing passwords, for signing in as another student, or for deliberately misusing the AI teacher.
The paragraphs below describe our understanding, not settled legal advice. They must be checked by a lawyer or the school’s data-protection adviser before this agreement goes to any family.
Our first school is in Boston, Massachusetts, so COPPA and FERPA lead. Because accounts are issued through a school for a genuine educational purpose, the school can consent on parents’ behalf, which is the ordinary route for classroom software in the United States.
We hold no email address, no surname, no date of birth and no location for a student, which keeps what we do hold to close to the minimum such a platform can run on.
Still to be settled: who at the school is named as responsible for data requests, what happens to accounts at the end of a school year, and whether a separate consent form is needed alongside this agreement.
If we change what we store or who can see it, we will tell the school before the change and ask them to pass it on to families.
Questions, or a request to see or delete your child’s data: info@gen3academy.org, or speak to your child’s teacher.