Stile Privacy Policy

Table of Contents

1. Who We Are and Scope of This Privacy Policy
2. Terms Used in This Privacy Policy
3. Our Role with School Customers
4. Information We Collect from and about Students and Educators
5. Other Information We Collect
6. Cookies
7. How We Use the Collected Information
8. With Whom We Share Information
9. Service Providers
10. International Data Transfers (customers located in Australia)
11. Children’s Privacy and Parental Consent
12. Student and Parental Rights
13. Other User Rights
14. Data Retention and Deletion
15. Educator-Facing Artificial Intelligence
16. Security
17. Data Breach Notification
18. Updates to This Privacy Policy
19. Contact Information

1. Who We Are and Scope of This Privacy Policy

Stile provides curriculum, digital platforms, applications, printed materials, and professional learning to Schools and Educators. Our primary Student‑facing platform, Stile Science, is available at stileapp.com, with some content also being available on the connected Stile X mobile app (the “Stile Platform”). Additional resources for Educators and Parents are available at stileeducation.com and stileeducation.com.au (the “Stile Websites”). These resources include physical products for purchase, such as lab supplies and printed workbooks, as well as professional learning services, including events and webinars for Educators.  

This Privacy Policy applies to the Stile Platform as well as the Stile Websites. We call out differences in data-handling practices where applicable. 

We deliver educational services to Schools in the United States, Australia, and other countries, and comply with all applicable laws, including the Family Educational Rights and Privacy Act (FERPA), the Children’s Online Privacy Protection Act (COPPA), and relevant US state Student and children’s privacy laws, as well as the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) in Australia. 

When the Stile Platform or related services are accessed in the United States, they are operated by Stile Education, a business division of Curriculum Associates, LLC (“CA”). 

When the Stile Platform or related services are accessed in Australia or in other countries outside the United States, they are operated by Stile Education Pty Ltd (“Stile Australia”), a subsidiary of CA. 

Where CA and Stile Australia have the same data-handling practices, we refer to them collectively as “we” or “us” for simplicity. 

For contact information for CA and Stile Australia, please see Section 19 of this Privacy Policy. 

2. Terms Used in This Privacy Policy

Personal Information means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular individual (and, where applicable under US law, a household). 

This term includes information that constitutes “personal information” or “personal data” under Australia’s Privacy Act 1988 (Cth) and applicable United States federal and state privacy laws. 

Student means an individual enrolled in kindergarten through Grade 12 (K–12), or an equivalent primary or secondary level of education outside the United States, at a School that uses the Stile Platform. 

Student Data means Personal Information about Students that is processed by us on behalf of a School in connection with the provision of the Stile Platform. Student Data includes information provided to us by a School, a Parent, or a Student (where appropriate), as well as information generated by or provided by a Student through their use of the Stile Platform, such as assessment responses, learning progress, submitted work, and usage metadata.   

Education Records has the meaning given under the US Family Educational Rights and Privacy Act (FERPA), and refers to records that are directly related to a Student and maintained by a School, educational agency, or institution, or by a party acting on behalf of such School, agency, or institution, including in connection with the provision of the Stile Platform.

School or School Customer means a kindergarten through Grade 12 (K–12) school, school district, local educational agency (LEA), diocese, education authority, or other primary or secondary educational institution or agency that contracts with, licenses, or otherwise authorizes the use of the Stile Platform.

Educator means authorized School personnel who access or use the Stile Platform, including teachers, instructional staff, instructional coaches, specialists, and administrators.

Parent means a Student’s parent or legal guardian, and includes another individual or entity authorized under applicable law or School policy to act on behalf of a Student.

De-Identified Data means information that has been processed so that it cannot reasonably be used to identify, relate to, or be linked to an identified or identifiable individual or Student. Stile may use De‑Identified Data for product development, research, analytics, and improving educational outcomes, provided that reasonable technical and organizational safeguards are maintained to prevent reidentification.   

Aggregate Data means information that has been combined or summarized across multiple individuals, Students, or Schools such that it does not identify and is not reasonably capable of being linked to any specific individual, Student, or School.

3. Our Role with Schools

United States: When a School purchases or implements the Stile Platform, CA acts as a “Service Provider” and a “School Official” with an educational interest as defined by FERPA. In this capacity, CA acknowledges that it remains under direct control of the School with respect to the use and maintenance of Student Data and Education Records. We process Student Data for educational purposes expressly authorized in our agreement with the School and in accordance with applicable state and federal laws. We will not share Education Records with third parties unless permitted by our contract. Any third party with whom we share Education Records is bound by the same confidentiality obligations as us and acts as a service provider that processes such records solely on our behalf. The School always remains the owner of the Student Data. 

Australia: For users in Australia and other countries outside the United States, Stile Australia is an APP entity as defined under the Privacy Act 1988 (Cth) and is responsible for the handling of Personal information in accordance with the Australian Privacy Principles (APPs) and other applicable laws.  

4. Information We Collect from and about Students and Educators

Our main goal is always to provide the best possible science education for every Student. We only collect Personal Information from or about Students to provide exceptional educational services. We adhere to data minimization, which means that we only require the data that is strictly necessary to provide the Stile Platform. All other data collection depends on how Schools use the Stile Platform and is optional.

For example, the Stile Platform has features that allow for more collection of Personal Information from Students in their responses in a lesson, but these need to be enabled by the Educator. These interactive and community features allow Students to upload their work as a file, including photo or video files, voice recordings, and type in free-text windows. This user-generated content is moderated by the Educator and can always be deleted. Educators can share the Student user-generated content within their classroom environment for in-class discussion and collaborative brainstorming. Only the Students in the same class can see the other Student’s response. Educators may also make structured anonymized responses available to a global data set. These anonymized responses are used to build large data sets for science experiments.

Stile supports de-identification of data wherever feasible. We make sure that the classroom environment is safe. Educators see, limit, and moderate all Student Data.

5. Other Information We Collect

If you contact us over the phone, email, webform presented on Stile Websites, etc., we keep a record of the communication and details you provide (for example, your name, email address, postal address, other contact details and any other information you provided). We do not knowingly collect information in this manner from Students and do not invite Students to contact us in the Student-facing areas of the Stile Platform.

When we recruit new staff, we collect applicant information (for example, the applicant’s name, contact details, qualifications, and work history). Generally, we collect applicant information directly from the applicants. We may also collect Personal Information from third parties in ways which you would expect. For example, from recruitment agencies or referees you have nominated. Before offering you a position, we may collect additional details required by law, such as your tax file number or social security number, superannuation information, and other information necessary to conduct background checks to determine your suitability for certain positions (for example, working with children). 

We may collect Personal Information about other individuals, such as our contractors, and other individuals who interact with us on a commercial basis. The kinds of Personal Information we collect will depend on the capacity in which you are dealing with us. It may include your name, contact details, and information regarding our interactions and transactions with you. 

If you are participating in an event we are managing or delivering, we may take images or audio-visual recordings which identify you. These will never be sold. We will ask for your permission prior to displaying and using these images or audio-visual recordings. 

6. Cookies 

Stile Platform
We use only the cookies and technical tools that are strictly necessary to operate the Stile Platform and keep you securely signed in. These technologies are limited to things like session management and basic functionality. They are not available to other websites, and they do not track your activity across the internet. 

Session information is cleared when you log out or when your session expires. 

We do not use Google Analytics, advertising cookies, cross‑site tracking cookies, or any other third‑party tools that monitor your browsing activity. We also do not sell Student Data or use Student information for behavioral or targeted advertising. 

Stile Websites
Our marketing websites may use analytics tools (for example, Google Analytics) to help us understand how visitors use the site and to improve our content. These analytics are used only on the marketing websites and are not connected to the Stile Platform. Students are not expected to use the marketing website to access the Stile Platform. Teachers do not need to use the marketing website to log in, although a login link is available there. Analytics tools do not access the Stile Platform or Student accounts. 

7. How We Use the Collected Information

We do not sell Student Data, do not serve targeted or behavioral advertising to Students or on the Stile Platform, and do not use Student Data for non-educational purposes.

We use collected information to: 

• Provide, operate, and support the Stile Platform, including creating and managing accounts, enabling class and assignment workflows, grading, feedback, and providing technical and customer support. 
• Personalize learning experiences for educational purposes, such as tailoring content or functionality for Students, and to develop new educational features. 
• Maintain safety, security, and integrity, including preventing fraud, misuse, and unauthorized access. 
• Communicate with Educators about the Stile Platform updates, feature changes, training resources, and support matters. We never send marketing communications to Student email addresses and do not allow Students to receive marketing messages through the Stile Platform. We may send marketing communications to you if you opted in to receive them. We always give you the ability to unsubscribe from direct marketing by utilizing the “unsubscribe” mechanisms provided in each communication. 
• Comply with legal obligations and to enforce our terms, School agreements, and policies.

We may use aggregated or de‑identified information for analytics, research, product development, and reporting.  

8. With Whom We Share Information

Stile Platform
We share Personal Information from the Stile Platform only as necessary to provide the educational services and as permitted under FERPA, COPPA, other applicable laws and regulations, and our agreements with Schools. We do not sell Student Data.

We share Stile Platform data only:

• With the Student’s School: Educators may access Student information to manage classes, support learning, review progress, and use the Stile Platform for educational purposes. 
• With Parents: Schools determine and manage Parental access to Student records. 
• With service providers acting on our behalf: These providers are contractually required to protect the information, use it only to perform services for us, and may not use Student Data for their own purposes (see Section 9). 
• For legal, safety, or compliance purposes: We may share information to comply with applicable laws or lawful requests, or to protect the safety, rights, or security of Students, Schools, the Services, or the public. 
• As part of corporate transactions: If the company is involved in a merger, acquisition, or similar transaction, Student Data will remain protected under this Privacy Policy, and we will not permit it to be used in a materially different manner without providing notice and obtaining any required School approvals. 
• With affiliates: We may disclose the Personal Information we collect from you to our affiliates or subsidiaries solely for the purpose of providing the Stile Platform to you; however, if we do so, their use and disclosure of your Personal Information will be maintained by such affiliates and subsidiaries in accordance with this policy.

Stile Websites
Our marketing websites collect limited Personal Information from adults (e.g., Educators, Parents, other website visitors) for inquiries, demos, or newsletter sign‑ups. Students are not expected to use the marketing websites. We do not knowingly collect Personal Information from Students on Stile Websites.

We may share information from the Stile Websites:

• With our service providers: These vendors help operate the websites, manage inquiries, or provide analytics. They are contractually required to protect the information and may not use it for their own purposes. 
• With your School (if you request it): For example, when an Educator requests product information, support, or onboarding assistance that requires coordination with their School. 
• For legal, safety, or compliance purposes: To comply with law or lawful process, or to protect rights, safety, or security. 
• As part of corporate transactions: In the event of a merger or acquisition, information from the Stile Websites will remain subject to this Privacy Policy. 
• With affiliates: We may disclose the Personal Information we collect from you to our affiliates or subsidiaries solely for the purpose of providing services to you; however, if we do so, their use and disclosure of your Personal Information will be maintained by such affiliates and subsidiaries in accordance with this Privacy Policy. 

9. Service Providers

We work with carefully vetted service providers to support internal operations and the delivery of the Stile Platform. These providers act solely on our instructions and are contractually prohibited from using Student Data for their own commercial purposes or for any purpose beyond providing the specific services authorized by us.

A current list of Stile Platform's service providers, including the categories of services they provide and the purposes of processing, can be found here.

10. International Data Transfers (customers located in Australia)

Where the APPs apply, if we disclose Personal Information overseas, we will take reasonable steps to ensure the recipient will handle the information in a manner consistent with the APPs, or rely on another permitted basis under the law.

Stile stores production data and backups of Australian customers in Australia. Certain processing (e.g., email delivery, document/video encoding, analytics rendering, AI‑assisted features) may occur transiently outside Australia via our providers but without persistent storage of Student Data by those vendors. 

We will only disclose Personal Information of Australian users to recipients outside Australia where we have taken reasonable steps to ensure that the overseas recipient does not breach the Australian Privacy Principles in relation to your Personal Information—unless we have your consent, or an exception under the Australian Privacy Principles applies. 

Stile Australia may share your Personal Information with CA, but only if permitted or required by law.  

11. Children’s Privacy and Parental Consent 

We are committed to protecting the privacy of all Students. We require verifiable parental or guardian consent for every Student, regardless of age (under 13 or 13+).

The Stile Platform is only available in the School setting. Schools provide consent on behalf of Parents. A School Customer may provide this consent by entering into an agreement with us to use the Stile Platform for educational purposes. We provide notices to School Customers about how we collect, use, and disclose Student Personal Information. We support Schools in providing necessary information about their Student Data practices to Parents.

If we become aware that a Student account was created without the required parental consent, we will delete the account and associated information.

12. Student and Parental Rights

Parents can request a description of the specific types or categories of Personal Information collected through Stile Platform from or about their Student, a deletion of Student’s personal information, or that we stop collecting Personal Information from or about their Student.

To exercise these rights, Parents are asked to contact their School. We act under the direct control of the School as the FERPA “School Official.” We do not act on direct Parental deletion requests unless explicitly directed to do so by the Student’s School, consistent with FERPA and standard best practices in the industry. We aid Schools in their response to Parental requests and forward any requests we receive to the appropriate School. 

Note that if the Personal Information collection is integral to the provision of the Stile Platform, Student may lose access to the Stile Platform.   

13. Other User Rights

United States
Users may have certain rights with respect to their Personal Information under applicable US state privacy laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA), and similar laws in other states. These rights are subject to applicable exceptions and limitations.

Depending on the user’s state of residence, these rights may include the right to:

• Request access to the categories and specific pieces of Personal Information we have collected about the individual
• Request correction of inaccurate Personal Information
• Request deletion of Personal Information, subject to legal, contractual, and service‑related obligations
• Request that we limit the use or disclosure of sensitive Personal Information, where applicable; Opt out of certain disclosures of Personal Information, where required by law 
• Not be discriminated against for exercising applicable privacy rights

CA collects and processes user Personal Information primarily to provide services on behalf of Schools and acts as a service provider or processor with respect to such information. As a result, certain requests may need to be coordinated with the user’s School or employer, and some information may not be deleted or modified where retention is required to provide the service, comply with legal obligations, maintain security, or support contractual requirements.  

Users may submit privacy rights requests by contacting CA using the contact information provided in this Privacy Policy. We may take reasonable steps to verify the identity of the requestor and to confirm the scope of the request. Where appropriate, we may direct the request to the relevant School or process the request in accordance with their instructions.

Authorized agents may submit requests on behalf of a user where permitted by law, subject to verification of authorization. 

Australia
Stile takes reasonable steps to ensure that the Personal Information it holds about users is accurate, up to date, complete, and relevant to its intended use.

Users may request access to the Personal Information that Stile holds about them and may request correction of that information at any time by contacting us using the details set out below. We will provide access unless an exception applies under applicable law.

If we refuse a request for access or correction, we will provide written reasons for the refusal and information about available complaint mechanisms, as required under the Australian Privacy Principles.

14. Data Retention and Deletion

We collect and process Student information solely on behalf of, and under the direction of, the Student’s School in connection with the provision of the Stile Platform. Student information is used only to provide educational services requested or authorized by the School and is not used for commercial purposes. 

Consistent with applicable privacy laws, including the Children’s Online Privacy Protection Act (COPPA) for US users and comparable data minimization principles under the Privacy Act 1988 (Cth), we retain Student information only for as long as reasonably necessary to deliver the Stile Platform and to meet applicable legal, reporting, security, and operational requirements. We do not retain Student information longer than is necessary for these purposes.

The retention periods described below reflect instructional, operational, and security needs of Schools using the Stile Platform. Where a School requires or contractually specifies a shorter retention period, the School‑directed timeline will apply. 

If a contract with a School Customer expires or is terminated, we will, in accordance with the applicable agreement and at the School Customer’s direction, return or delete and securely destroy Student Data within 90 days of contract expiration, unless a shorter period is required or a longer period is permitted by law. 

For purposes of this section:

• A “course term” refers to the academic year of the School corresponding to a single grade or course of instruction. 
• An account is considered Inactive after 12 consecutive months without login activity, unless the School Customer specifies a shorter inactivity threshold. 

15. Educator-Facing Artificial Intelligence

The Stile Platform currently does not include any Student-facing AI features. Where AI is leveraged, it is only in the Educator-facing, logged-in areas of the Stile Platform and is designed to support instructional workflows, content quality, and efficiency. 

CA and Stile Australia prohibit its service providers from using Student Data to train their third-party large language models or other artificial intelligence systems. AI providers may process limited inputs solely to perform the requested Educator‑facing functionality and may not retain or repurpose such data for model development or other unrelated purposes. 

16. Security 

We maintain a comprehensive written information security program that protects Student and Educator information in line with FERPA, COPPA, and US state student‑privacy and children’s privacy requirements. All data is encrypted in transit and at rest using modern, industry‑standard secure‑connection and storage methods, and our cryptographic practices are continuously reviewed to align with current best practice.

Access to Personal Information is strictly limited through strong authentication, least‑privilege permissions, and explicit authorization for support access. All activity is logged, monitored, and regularly audited. Our infrastructure is hosted in secure, segregated cloud environments with zero‑trust access controls, continuous monitoring, tamper‑resistant logging, and dedicated intrusion detection.

Our written security program includes designated security leadership, regular risk assessments, documented safeguards, ongoing testing and monitoring, and required annual updates. Independent assurance, such as penetration testing, red‑team exercises, and vulnerability‑disclosure programs, strengthens our controls. Staff undergo background checks, training, and device‑security requirements, and we maintain 24/7 incident‑response procedures with rapid containment and notification obligations. Before engaging service providers, we verify their security capabilities and require written commitments to protect Personal Information. 

17. Data Breach Notification

If Personal Information is compromised or suspected to be compromised, we will investigate, contain, and notify affected parties and authorities in accordance with applicable law and our incident response process. 

Under the Australian Notifiable Data Breach (NDB) Scheme, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) where serious harm is likely. Stile aims to contain breaches within 24 hours of discovery and provide initial notification within 7 days, subject to law and regulator guidance. 

18. Updates to This Privacy Policy

We may modify this Privacy Policy at any time to reflect changes in our practices or legal requirements. We will post the updated version and revise the "Last Updated" date at the top of this page. For material changes that substantively affect the collection, use, or disclosure of Student Data, we will provide prior notice to the School via email, or a prominent notification within the Stile Platform or the Stile Websites, and, where required by law, obtain any legally required consents. 

19. Contact Information

United States

Curriculum Associates, LLC
153 Rangeway Road North Billerica, MA 01862
Email address: privacy@cainc.com
Phone number: (800) 225-0248

Australia and Other Countries 

Stile Education Pty Ltd (ACN 159 359 681)
Level 10, 136 Exhibition Street
Melbourne VIC 3000, Australia
Email address: privacy@stileeducation.com

You can find out more information about the Australian Privacy Act and the Australian Privacy Principles from the OAIC. The Information Commissioner may be contacted at oaic.gov.au or by email atenquiries@oaic.gov.au.