For School Administrators.
A clear summary of what we collect, what we don't, and how we keep students safe, for the people approving GPTQuest at your school.
This page is a plain-language summary for school and district administrators evaluating GPTQuest. The full legal terms live in our Privacy Policy and Terms of Service.
What GPTQuest is
GPTQuest is an AI-literacy platform for grades 3-8. Students play short, authored fantasy Quests where they read, write, and learn to communicate with AI. An adult Account Owner (typically a teacher or school administrator) creates and manages all Student and Teacher accounts; students do not sign up themselves. Between Quests, students explore a shared game World as customizable avatars, where they can meet classmates and start Quests; each classroom plays in its own private World Instance, closed to anyone outside the class.
What we collect from students
Only the minimum needed to run the Service:
- A system-generated synthetic email used solely as a unique account identifier (not a real mailbox; we never email students)
- A display name (we encourage Teachers to use pseudonyms, not real names)
- Educational progress and gameplay data (Quest progress, XP, achievements, narrative inputs)
- Device and connection data (browser type, operating system, IP address, request logs) collected automatically from all users for security and operational reliability
What we do NOT do
- We do not sell student data
- We do not show students any advertising
- We do not run behavioral profiling on students
- We do not train AI models on student inputs. We send our AI providers only the content needed to generate a result, with no student names, email addresses, or account identifiers attached. Our text provider (OpenAI), music provider (ElevenLabs), and image provider (Runware) do not use that de-identified content to train or improve their own models; it carries no student identity in any case and cannot be used to identify, contact, or profile a student. Details in Section 8 of our Privacy Policy
- We do not contact students directly
- We do not offer free-text chat between students; in-game chat uses curated emojis, stickers, and preset phrases
Legal framework
- COPPA: We operate under the school authorization exception. Schools consent on behalf of parents for educational use.
- FERPA: Student records are treated as school-controlled education records.
- New York Education Law §2-d: For New York schools and districts, we design the Service to comply with §2-d and 8 NYCRR Part 121, and will sign your district's §2-d rider (including the Parents' Bill of Rights) on request. See Section 11 of our Data Privacy Agreement.
- Other state laws: We aim to support compliance with major state student-privacy laws (CA AB 1584 / SOPIPA, CT, CO, MD). A Data Privacy Agreement (DPA) addressing these is available on request.
Subprocessors
A current list of every third party that processes data on our behalf is in Section 8 of our Privacy Policy.
Security
We maintain a written Information Security Program covering encryption, access control, vendor review, training, and incident response. Details in Section 9 of our Privacy Policy.
Data Privacy Agreements (DPA)
Read our standard Data Privacy Agreement in full. Schools can accept it as-is, sign the SDPC's NDPA, or send us their district's own. To request a countersigned PDF, email connect@gptquest.ai. We typically turn around signed agreements within 5 business days.
Parent rights
Parents may review, request deletion of, or refuse further collection of their child's data. Requests come through the school first, then to us if needed. Full details in Section 11 of our Privacy Policy.
Contact for school administrators
Kixmeta Labs LLC
848 E Main Street, Suite 800 #1002
Ephrata, PA 17522, United States
Email: connect@gptquest.ai
