1080 Learner Privacy Notice
Effective date: 6 October 2026 Version: 1
The short version
- 1080 Learner does not ask for a learner's name, email address, birth date or student number.
- Each learner gets a made-up label, such as "Learner 3F9A1". The teacher keeps the list that links labels to real students. We never see that list.
- We keep only what we need to run the activity and write the teacher's report.
- We do not sell data. We show no ads. We do not build profiles for any other purpose. We do not use learner data to train any computer model.
- Your school or teacher is in charge of the learner data. We are the service provider.
- Data is stored in the United States, not in Canada.
- Teachers can export and delete records. A school can ask us to delete everything.
Who we are
Milestone Teachers, 100 Harrison Garden Blvd, Toronto, ON M2N 3T1, Canada. Made by Brandon Robert, an Ontario teacher registered with the Ontario College of Teachers. Privacy contact: Brandon Robert, admin@milestoneteachers.ca.
Who is in charge of the data
- The school or teacher decides to use 1080 Learner with learners and is responsible for telling families (see "What teachers and schools do").
- Milestone Teachers runs the service for the school. We use learner data only to provide it. An alias can still identify a learner to someone who has the teacher's list, so we treat alias data as personal information.
What we collect
About a learner session
| What we store | What it is | Why we need it |
|---|---|---|
| Alias | A generated label such as "Learner 3F9A1", or a made-up classroom code the teacher enters, such as "Maple 1". Never enter names, initials, emails or school IDs. | So the teacher can tell reports apart. The teacher keeps the mapping to real learners. |
| A learner code | A random number that links repeat sessions of the same alias, for the same teacher. | So a teacher can run the activity again for the same learner. |
| Which activity | For example "Mathematics Pathways". | To load the right questions. |
| Visual style | Explorer, Navigator or Studio. | To match how the screen looks to the learner's age group. |
| Answers | Each answer the learner saves. Answers are numbers or short lists of numbers. There is no free typing. | To write the teacher's report. |
| Skipped or blocked tasks | A flag when a learner skips a task, cannot use the controls, or a memory task is interrupted by a break. | So the report does not treat these as wrong answers. |
| Time on a task | How long the task page was visible, up to 30 minutes per saved page. It is not used to score ability. | To help the teacher see where a learner needed more time. |
| Response timing on supported tasks | In new session versions, optional elapsed times from a browser display-ready point to the first selection and to saving it, each capped at 30 minutes. A short reason replaces the times when conditions make them unsuitable, such as a break, a changed selection or use of support. No device identifier, wall-clock event log or keystroke history is collected for this. | To check task delivery before any interpretation of response timing. These observations do not affect scores, question selection, grouping or learner reports. They stay with the session and follow the same export and deletion controls. |
| Support settings | Whether an adult reads the text aloud, whether the view is quiet or exploration, and whether the teacher watched the session. | So the report says under what conditions the answers were given. |
| Grade | The teacher picks the learners' school grade when making a class (required). | To choose the look of the screen and keep the activity suitable for the age group. It does not change scoring. |
| Content band and chosen skills | For pathway activities, the level and up to three skills the teacher picked. | To choose the questions. |
| Practice tries | Practice answers on thinking tasks. | So the report can show whether the learner understood the task. |
| Progress | How far the learner got, and the status: ready, active, paused or complete. | So a session can pause and resume. |
| Dates and times | When the session was made, finished, and when it expires. | To run the link, the report and the deletion date. |
| Link and device keys | Scrambled (hashed) forms of the private invitation and the learner's browser session. The real link is not stored. After first use, the original link can reopen only its matching live browser session. | To keep each session private and let a learner return to saved work. |
| Question-set version | Which version of the questions was used. | So the report is matched to the right questions. |
| Group code | A random number that groups sessions made together. | For class progress and the class download. |
About the teacher's workspace
| What we store | Why we need it |
|---|---|
| An internal account number (not your email address) | So you only see your own workspace. |
| How many sessions your account may still create | To run the seat you bought. |
| Records of session requests (no answers) | So a retry does not create or charge twice. |
| Your class confirmation: which statements you confirmed, a fingerprint of their exact wording, and when | To show that each class was created under the current educator confirmation. |
| Teacher notes on a report (free text the teacher types; the screen asks for no names or identifying details) | So the teacher can record what they observed beside the evidence. Notes appear in the teacher's own report exports. We keep the latest version of each note and up to 5 earlier versions. |
| Optional educator evidence and support decisions | Source/report names, dates, skill labels, short observations, original source results and scales, conditions, educator interpretations and review/support choices entered manually by the teacher. These provide context beside 1080 responses; they do not change assessment scores or confidence. There is no automatic platform import. Do not enter names, rosters, credentials, diagnoses or health records. Only the current saved collection is kept. |
Your teacher account lives on the main Milestone Teachers site. From Google sign-in it holds your name, email address and profile picture link, and your order details come from Stripe. If you connected a Google service in another part of the site, the site also holds an encrypted Google access token for that feature. We use these to deliver your seat and answer your questions.
What we do not collect
- Learner names, email addresses, birth dates, home addresses or phone numbers.
- Student numbers or school rosters.
- Learner passwords or logins. Learners do not sign in; each learner opens a private link.
- Photos, video or audio. 1080 Learner does not use the camera or microphone.
- Location.
- Diagnoses, health information or special education records.
- Free-text answers typed by learners.
- Advertising or tracking identifiers.
Like any website, our hosts see ordinary technical details of a visit, such as an IP address and the time. We do not store these in the learner records. Our hosts keep their own technical logs under their own policies.
What we do with it
We use learner data to:
- Run the activity for the learner.
- Write the report and exports for the teacher.
- Keep the service secure and fix problems.
We also keep day-by-day totals of how many classes are created, reports opened and files exported across all of 1080 Learner. These totals hold no learner, class, teacher or session identifier and no answers. We use them only to understand and improve how the service is used.
What we never do
- We do not sell learner data.
- We show no ads and do not target ads.
- We do not build learner profiles for any purpose other than the teacher's report.
- We do not use learner data to train any computer model, and we do not send learner data to any outside service that would. The learner activity sends answers only to our own site.
- We do not share learner data for marketing.
- We do not use learner data for anything outside the school's educational purpose.
Who can see learner data
- The teacher who made the session sees the session, the report and exports.
- The learner's own device sees only that learner's session, through the private link. A link cannot open a report or a class list.
- Milestone Teachers (Brandon Robert) can technically read the database. We look at records only to give support or fix a fault.
- Our service providers (below) store and process data for us.
Other teachers cannot see your records. A school-wide view for administrators does not exist yet.
Where data is stored, and who helps us run it
Learner data is stored in the United States: United States (Replit hosting in North America; Neon database, US). It is not stored in Canada.
| Provider | What it does | Where |
|---|---|---|
| Replit | Runs the website and the learner activity | North America (United States) |
| Neon (through Replit) | Database that holds the learner records | United States |
| Teacher sign-in only. Learners never sign in with Google. | Google's own services | |
| Stripe | Payment for the seat (teachers only). Stripe never receives learner data. | Stripe's own services |
Replit and Neon use their own network and cloud providers to carry and store this data. Learner data is not sent to any other company.
Nova Scotia. Nova Scotia public bodies must keep personal information in Canada unless a government head decides otherwise. We do not currently offer 1080 Learner to Nova Scotia public schools.
How long we keep it
- Learner responses are deleted 12 months after the class closes, or within 30 days after a school or teacher asks us to delete them, whichever comes first. A class closes when the teacher closes it, or 30 days after it was made. If a seat is refunded or a pilot ends, and the teacher has no other 1080 Learner seat that is still running or in its 30-day export period, the teacher's workspace and its records are deleted 30 days later, if that comes sooner. While another of the teacher's seats continues, the records stay in the workspace and are deleted on the class clock above.
- Teacher notes are deleted with the session they belong to (the same clock as learner responses, or sooner when the teacher deletes the session, the class or the workspace). Only the latest version and up to 5 earlier versions of each note are kept.
- Educator evidence and support decisions use the same session deletion clock. Teachers can also remove individual entries and save the collection; superseded free text is not kept in an application version history. Private evidence exports include clearly labelled drafts; learner report PDF, HTML and text include only entries marked reviewed by the educator. Family, class and portable-profile exports do not include these entries. Downloaded files remain under the educator's control.
- Private links stop working after 7 days, or when the class closes, whichever comes first. A teacher can make a new link while the class is open.
- Session requests and account records stay while your account is active. We delete them when you ask. Unused session credits are deleted with the workspace.
- Deletion receipts keep no learner information. We keep them for 24 months as a one-way fingerprint so we can confirm a deletion happened.
- Backups. Deleted records can remain in our database host's automatic backups until those backups expire under the host's own schedule.
Download and delete
Teachers can:
- Download a learner profile, the full record, or a ZIP of a whole class. You can leave the alias out of the portable profile.
- Delete a session. This removes its answers and report from our database. Files you already downloaded stay on your device.
- Delete a whole class, or the whole workspace, from the workspace. It takes effect immediately and shows a receipt that contains no learner information.
- Ask us to delete everything in the workspace. Email admin@milestoneteachers.ca. We will do it within 30 days, and we will confirm.
- Replace a link if it was lost or shared by mistake.
Families: please ask your child's school first. The school holds the key to who the alias is, so the school can find the record. The school can ask us to delete it. If you contact us, we will pass your request to the school.
Rights
You may ask the school for access to, or correction or deletion of, a learner's information. The school is in charge of those requests, and we help the school. In Ontario, school boards send families a written notice listing the data elements before sharing student information with an app. That is a notice. It is not a request for consent.
Learners under 13 in the US
When a school uses 1080 Learner, the school can authorize it for learners under 13 for school purposes. The school stands in for parents in that case. We then use the data only for the school's educational purpose and for no commercial purpose. Our retention policy is written on this page.
Tutors and parents who use 1080 Learner outside a school, in any country, may use it only with learners aged 13 or older. We do not yet have a way to get verified parental consent for younger learners.
Cookies
We use only the cookies the activity needs to work:
- a learner session cookie (
learner1080_session), so saved work continues on the same device. It lasts up to 7 days, cannot be read by page scripts, and is sent only to our own site. - a teacher sign-in cookie and a security token cookie for teachers.
We use no advertising cookies and no analytics cookies on learner pages, and the learner pages load no outside scripts.
On a shared device, the learner should press "Finish and close my session" at the end.
Security
- Links are random and used once. Only a scrambled form is stored.
- Every teacher read, export and delete is limited to that teacher's own records.
- Pages with learner data are not cached.
- Requests are limited in size, and the site checks where requests come from.
- Pages and answers travel between the learner's device and our site over an encrypted (HTTPS) connection, and the learner session cookie is sent only over that connection.
No system is perfectly safe. Brandon Robert is responsible for security.
If something goes wrong. If we confirm that learner data was exposed, we will tell affected schools within 72 hours, with what happened, which records, and what to do next. From 1 January 2027, Ontario boards must tell the Information and Privacy Commissioner and families when there is a real risk of significant harm. We will give boards what they need to do that.
What teachers and schools do
By creating a class, a teacher confirms that:
- their school or organization authorizes the use, or, for a tutor or parent, that they are responsible for these learners;
- families have been notified in the way the school or board requires;
- no names, initials, student numbers, emails or other identifying details are put into 1080 Learner;
- 1080 Learner is used for classroom or tutoring planning, not for diagnosis, placement, eligibility or IEP decisions;
- for US learners under 13, the school has authorized the use;
- if they are a tutor or parent working outside a school, every learner is 13 or older.
Please also:
- Keep the alias-to-name list in your own school tools.
- Do not enter real student information into any field we did not list.
- Keep downloaded files and links private.
- Tell us right away if a link was shared by mistake.
Accessibility
We aim for WCAG 2.1 AA and have not yet tested it with screen readers and keyboards. Tell us about any problem and we will work on it.
Changes
If we change this notice in a way that affects learner data, we will tell schools by email before the change starts. The date at the top shows the latest version.
Questions or complaints
Brandon Robert, Milestone Teachers admin@milestoneteachers.ca 100 Harrison Garden Blvd, Toronto, ON M2N 3T1, Canada
You can also raise a concern with your school or board, or with a privacy regulator.