Privacy and Security
As former educators, school leaders, and employees of leading ed-tech companies, we take data privacy and security extremely seriously.
We do not collect ANY student data, are FERPA and COPPA compliant, and follow industry best practices to secure our service so that teachers, schools, and districts can have confidence in Diffit as the safe AI tool they can trust. In addition, we use real sources and show citations for ALL informational texts we provide - so you can know exactly where any AI-generated text comes from.
We will always be transparent about what we collect and how we protect your information. Please don’t hesitate to contact us with any questions.
What information does Diffit collect and why?
Diffit does not collect ANY student data.
We only collect teacher names, email addresses, and IP addresses for the sole purpose of providing the Diffit service.
We will never sell your data or use it to advertise third-party products.
You can review our Privacy Policy and our Terms of Service for more information.
How does Diffit protect your information?
We are a signatory of the National Data Privacy Agreement and the Student Data Privacy Consortium’s statewide privacy agreements.
All data is encrypted in transit and at rest.
We undergo annual penetration and security testing by an independent third party.
We restrict user data access to a limited number of employees with a specific need.
All employees complete a background check, participate in annual privacy and security training, and sign a nondisclosure agreement.
Data is stored in 24/7 access-controlled data centers operated by industry-leading partners.
Data is stored redundantly and backed up so we can quickly restore access and availability.
We monitor our systems for security breaches and attempts at inappropriate access.
We have a best-in-class Privacy Quality score from the Education Framework:
