Privacy Policy

Model It!
A Product of Discovery Collective, Inc.
Effective Date: April 20, 2026 | Last Updated: April 20, 2026

Discovery Collective, Inc. (“Discovery Collective,” “we,” “us,” or “our”) values the privacy of the teachers, schools, students, parents, and guardians who use Model It! (the “Services”). This Privacy Policy explains what personal information we collect, how we use and share it, and the rights and choices available to you, regardless of where you live.

This Privacy Policy applies to information we collect through modelitk12.com, our applications, and our other services, and is incorporated into our Terms and Conditions. By using the Services, you acknowledge that you have read and understood this Privacy Policy. Capitalized terms not defined here have the meanings given in our Terms and Conditions.

International Users. Discovery Collective is based in the United States, and the Services are designed and operated from the United States. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States. U.S. data protection laws may differ from the laws of your country of residence. See Section 12 (Cross-Border Transfers) and the region-specific sections (Sections 13 through 16) for more information about the rights and safeguards that apply to you.

Our Commitment to Student Privacy. Discovery Collective is committed to protecting the privacy of primary and secondary education students worldwide. In the United States, we comply with the Children’s Online Privacy Protection Act (“COPPA”), the Family Educational Rights and Privacy Act (“FERPA”), and applicable state student privacy laws. In other jurisdictions, we comply with applicable child and student data protection requirements. We do not sell student personal information, we do not use student personal information for targeted advertising, and we do not use student personal information to train general-purpose artificial intelligence or machine learning models.

1. Quick Summary

For users who want a high-level overview, here is what we do and do not do:

• We collect account information from teachers and schools, and limited information needed to provide educational functionality to students, such as usernames, class assignments, and activity within the Services.
• We use that information to operate the Services, provide features, support our users, secure the platform, and improve our product.
• We do not sell personal information, and we do not share student information for advertising purposes.
• We do not use student personal information to train artificial intelligence or machine learning models for purposes unrelated to the Services.
• We work with trusted service providers (such as our authentication provider and payment processor) under contracts that require them to protect your information.
• Schools and districts control the student information they direct us to process, and we follow their reasonable instructions.
• We store data in the United States. If you access the Services from another country, your information will be transferred to the United States.

2. Who This Policy Covers

This Privacy Policy describes how we handle information about:

• Account Holders: Teachers, school administrators, authorized school or district representatives, and, where applicable, parents or legal guardians who register for and maintain accounts on the Services.
• Students: Primary and secondary education students who access the Services through accounts created, managed, or supervised by Account Holders, Schools, or districts.
• Visitors: Individuals who visit modelitk12.com without logging in.
• Business Contacts: Individuals who contact us, sign up for our mailing list, or communicate with us in connection with a potential or existing school or district relationship.
  Where Discovery Collective processes Student personal information on behalf of a School, the School is generally responsible for obtaining any parental or guardian consent required by local law. In those cases, we act as a service provider to the School.

3. Information We Collect

3.1 Information You Provide Directly

Account Information. When an Account Holder registers for the Services, authentication is handled by our third-party identity provider, Clerk. Through this registration process, we receive information such as full name, email address, and authentication credentials. Account Holders may also provide their role (teacher, administrator, parent, guardian), school or district affiliation, and grade level(s) taught or relevant to the account.
Payment Information. When an Account Holder purchases a paid Subscription, payment information (such as credit card or billing details) is collected and processed by our third-party payment processor. We do not store full payment card numbers on our own systems; we receive only limited transaction information (such as the last four digits of a card and transaction confirmation data).
Student Roster Information. When a teacher or School sets up student access, the teacher or School provides limited roster information to enable classroom functionality. This typically includes a student’s first name or initials, a username or identifier, class or section assignment, and grade level. We ask Schools and teachers to avoid providing more student information than is necessary for the educational purpose.
Communications. When you contact us for support, submit feedback, or communicate with us by email or through the Services, we receive the contents of those communications and any contact information you choose to provide.
User Content. We receive User Content that you choose to create, upload, or share through the Services, such as teacher-built lessons, models, assignments, and (in the future) community posts.

3.2 Information Collected Automatically

Usage Data. When you use the Services, we automatically collect information about your activity, such as pages viewed, features used, models opened, lessons completed, time spent on activities, and similar interaction data. For students, this usage data is collected for educational purposes such as providing feedback, tracking progress, and improving instruction.
Device and Log Information. Our servers automatically record certain information when you access the Services, including IP address, approximate location derived from IP address, browser type and version, operating system, device identifiers, referring and exit pages, and the date and time of requests.
Cookies and Similar Technologies. We and our service providers use cookies, local storage, and similar technologies to operate and improve the Services, remember your preferences, keep you signed in, and analyze how the Services are used. See Section 8 (Cookies and Similar Technologies) for more information, including how users in certain jurisdictions can exercise cookie consent preferences.

3.3 Information from Third Parties

We may receive information about you from third parties, including:

• Our authentication provider, Clerk, which handles the identity and login portion of account registration;
• Our payment processor, which confirms payment transactions;
• Schools and districts that purchase access and provide information about teachers, classrooms, or student rosters;
• Single sign-on providers, if a School chooses to enable sign-on via Google, Microsoft, or similar identity services; and
• Analytics providers, which provide us with aggregated information about how the Services are used.

3.4 What We Do Not Collect

We do not knowingly collect:

• Student information beyond what a teacher or School provides for educational functionality;
• Government identifiers such as social security numbers, national identity numbers, or driver’s license numbers;
• Precise geolocation data;
• Biometric data; or
• Information about students’ religious beliefs, political views, or other sensitive categories, except as expressly provided by a School for an educational purpose.

4. How We Use Information

We use information we collect to:

• Provide, operate, maintain, and secure the Services;
• Create, authenticate, and manage accounts;
• Deliver educational functionality, including models, lessons, simulations, assignments, progress tracking, and (where applicable) AI-assisted lesson creation for teachers;
• Process payments and manage subscriptions;
• Communicate with Account Holders about their accounts, billing, Services updates, and support requests;
• Respond to inquiries and provide customer support;
• Analyze use of the Services to understand product performance, debug issues, and improve features and content;
• Detect, prevent, and respond to fraud, security incidents, abuse, and violations of our Terms and Conditions;
• Comply with legal obligations, enforce our agreements, and protect the rights, property, or safety of Discovery Collective, our users, and the public; and
• With the consent of the School or Account Holder where required, send information about new features, educational resources, or related offerings.
  We use Student personal information only for authorized educational purposes described in this Privacy Policy and for the limited internal operations of providing and improving the Services, consistent with COPPA (in the United States) and applicable data protection laws in other jurisdictions.

5. Legal Bases for Processing (EEA, UK, and Similar Jurisdictions)

If you are located in the European Economic Area, the United Kingdom, or a jurisdiction with similar data protection laws, we process personal information only when we have a valid legal basis to do so. The legal bases we rely on include:

• Performance of a contract: To provide the Services to Account Holders and to respond to requests in connection with a Subscription.
• Legitimate interests: To operate, secure, and improve the Services; to prevent fraud and abuse; to communicate with Account Holders about operational matters; and for our internal business administration.
• Legal obligation: To comply with laws that apply to us, including tax, accounting, and child protection laws.
• Consent: Where we rely on consent (for example, for certain cookies, marketing communications, or processing involving children below the age of digital consent where required), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Public interest or official authority: Where a School or public authority relies on such a basis to authorize our processing on its behalf.

6. How We Use AI and Machine Learning

Discovery Collective may use artificial intelligence and machine learning technologies within the Services, including to help teachers build model-based lessons. Our approach to AI and student data is as follows:

• We do not use Student personal information to train general-purpose AI models or foundation models, and we do not share Student personal information with third-party AI providers for their own training purposes;
• Where AI features process data solely to generate a response for the user (for example, helping a teacher draft a lesson), the data is used to provide the requested feature and is not used to train models for unrelated purposes;
• We may use de-identified and aggregated data to develop, test, and improve AI features and the Services; and
• We contractually require third-party AI providers that support our features to refrain from using data submitted through the Services to train their own models, except to the extent strictly necessary to deliver the feature.

7. How We Share Information

We share personal information only in the limited circumstances described below.

7.1 With Schools and Account Holders

Information generated by Student use of the Services, including activity data and progress information, is shared with the Student’s teacher, School, or district as part of the educational functionality of the Services. Teachers and administrators may also see User Content created by Students in their classes.

7.2 With Service Providers

We share information with vendors and service providers that perform services on our behalf, such as:

• Authentication: Clerk, which handles account registration and sign-in.
• Payment processing: Our third-party payment processor, which handles billing for paid Subscriptions.
• Cloud hosting and infrastructure: Providers that host our servers, store data, and deliver the Services over the internet (primarily located in the United States).
• Analytics: Providers that help us understand how the Services are used and diagnose technical issues.
• Customer support and communications: Tools we use to respond to inquiries and send operational messages to Account Holders.
  These service providers are contractually required to use personal information only to provide services to us and to protect the information consistent with this Privacy Policy and applicable law.

7.3 With Other Users

If you choose to share User Content within the Services (for example, through future community features, teacher-to-teacher sharing, or contests), that User Content may be visible to other users as indicated by the feature. Teachers should avoid including personal information about Students in any content shared beyond their own classroom.

7.4 For Legal and Safety Reasons

We may disclose information when we believe in good faith that disclosure is necessary to:

• Comply with a law, regulation, court order, subpoena, or other legal process in any jurisdiction applicable to us;
• Respond to lawful requests from government or law enforcement authorities;
• Enforce our Terms and Conditions or other agreements, including to investigate potential violations;
• Detect, prevent, or respond to fraud, security incidents, or technical issues; or
• Protect the rights, property, or safety of Discovery Collective, our users, or others.

7.5 In Connection with a Business Transaction

If Discovery Collective is involved in a merger, acquisition, reorganization, financing, asset sale, or other business transaction, personal information may be transferred as part of that transaction. Any successor entity will be bound by this Privacy Policy or a successor policy that provides at least equivalent protection with respect to Student personal information. Where required by applicable student privacy or data protection law, we will provide notice to affected Schools or users before any such transfer of personal information.

7.6 With Your Direction or Consent

We may share information for other purposes with your direction or consent, or at the direction or with the consent of a School acting on behalf of its Students.

7.7 What We Do Not Do

We do not sell personal information, and we do not rent or disclose personal information to third parties for their direct marketing purposes. We do not use Student personal information to engage in targeted advertising, to create advertising profiles, or to build personal profiles of Students other than in furtherance of authorized educational purposes. We do not disclose Student personal information to third parties for the third party’s own commercial purposes.

8. Cookies and Similar Technologies

Cookies are small text files stored on your device when you visit a website. We and our service providers use cookies and similar technologies for purposes such as:

• Strictly necessary: Required to operate the Services, including authentication, security, and load balancing.
• Preferences: Remembering your settings and preferences.
• Analytics: Helping us understand how the Services are used so we can improve them.
  You can control cookies through your browser settings, including by blocking or deleting cookies. Blocking cookies may limit your ability to use some features of the Services. We do not use cookies for third-party advertising purposes on the Services, and we do not allow third-party advertising networks to track Students through our Services.

If you are located in a jurisdiction that requires consent for non-essential cookies (such as the European Economic Area or United Kingdom), we will request your consent before placing non-essential cookies on your device, and you may withdraw consent at any time through the applicable cookie settings.
We currently do not respond to “Do Not Track” browser signals, as there is no consistent industry standard for doing so.

9. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services and for the purposes described in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention practices include:

• Account Information: Retained for the duration of the Account Holder’s active Subscription and for a reasonable period thereafter to address account recovery, billing, and legal requirements.
• Student Information: Retained as directed by the School or district and consistent with the governing agreement. Upon School direction or termination of a School’s Subscription, we will delete or return Student personal information within a reasonable period, except to the extent we are required to retain it by law.
• Usage Logs and Aggregated Data: May be retained in aggregated or de-identified form for longer periods to support analytics, security, and product improvement.
  Schools, districts, and users may request deletion of personal information at any time, subject to applicable law and any governing data privacy agreement.

10. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, and alteration. Our security measures include encryption of data in transit, access controls, authentication through our trusted identity provider, regular review of security practices, and engagement of service providers with their own recognized security programs.
No security measures are perfect, and we cannot guarantee the absolute security of personal information. If we become aware of a security incident affecting personal information, we will notify affected users, Schools, and regulators as required by applicable law, including within any time frames required by applicable data protection law (such as the 72-hour notification requirement under the European and UK General Data Protection Regulations).

11. Your Rights and Choices

11.1 Account Holders

Account Holders may access and update certain account information by logging in to the Services. You may also contact us at info@discoverycollective.com to:

• Request a copy of personal information we hold about you;
• Request correction of inaccurate personal information;
• Request deletion of your account and associated personal information, subject to legal retention requirements; and
• Opt out of non-essential marketing communications (operational messages about your account and Subscription will continue).

11.2 Students

Student accounts are managed by the teacher, School, or district. Students, parents, and guardians should direct rights requests to the applicable School or district in the first instance. We will support Schools in responding to such requests as required by applicable law and the governing agreement.

11.3 Regional Rights

Depending on your country or state of residence, you may have additional rights under regional privacy laws, as described in Sections 13 through 16 below.

12. Cross-Border Data Transfers

Discovery Collective is based in the United States, and our servers and primary service providers are located in the United States. When you use the Services from outside the United States, your personal information will be transferred to, stored in, and processed in the United States. U.S. data protection laws may differ from those of your country of residence and, in some cases, may provide less protection than those laws.
For transfers of personal information from the European Economic Area, the United Kingdom, Switzerland, or other jurisdictions with similar data transfer restrictions, we rely on appropriate safeguards as required by applicable law. Where such safeguards apply, we will, upon request and where feasible, enter into Standard Contractual Clauses or equivalent transfer mechanisms with Schools and districts or with affected users. To request more information about the safeguards we apply to cross-border data transfers, contact us at info@discoverycollective.com.

13. United States: California Privacy Rights

This Section applies to California residents and supplements the other parts of this Privacy Policy as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), and applicable California student privacy laws.

13.1 Categories of Personal Information

In the preceding 12 months, we have collected the following categories of personal information, as defined by the CCPA:

• Identifiers (such as name, email address, user ID, IP address);
• Customer records information (such as payment and billing information, collected and stored by our payment processor);
• Commercial information (such as Subscription and transaction records);
• Internet or network activity (such as usage data, device information, and log data);
• Professional or employment information (such as role, grade level taught, and school affiliation for teachers); and
• Education information (such as student usage data within the Services).
  We collect this information from the sources and use it for the purposes described in Sections 3 and 4. We share personal information with the categories of recipients described in Section 7.

13.2 No Sale or Sharing of Personal Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA. We have not sold or shared personal information in the preceding 12 months, and we have not sold or shared the personal information of consumers under 16 years of age.

13.3 California Consumer Rights

Subject to certain exceptions, California residents have the right to:

• Know what personal information we collect, use, disclose, and (if applicable) sell or share;
• Access a copy of specific pieces of personal information we hold about them;
• Request deletion of personal information;
• Request correction of inaccurate personal information;
• Limit the use of sensitive personal information (we do not use sensitive personal information beyond the limited purposes permitted by the CCPA); and
• Not receive discriminatory treatment for exercising these rights.
  To exercise these rights, contact us at info@discoverycollective.com. We will verify your request using information you provide and our existing records. You may designate an authorized agent to make requests on your behalf; we may require the agent to provide proof of authorization.

14. United States: Other State Privacy Rights

Residents of certain other states, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Indiana, Tennessee, and others with comprehensive consumer privacy laws, may have rights similar to those described in Section 13, including the right to access, correct, delete, and obtain a portable copy of personal information, and the right to opt out of the sale of personal information, targeted advertising, and certain profiling activities.
Because we do not sell personal information, engage in targeted advertising, or engage in profiling that produces legal or similarly significant effects, no opt-out is required for those activities. To exercise any other state privacy rights, contact us at info@discoverycollective.com. If we deny a request, you may appeal by replying to our response or contacting us again with the word “Appeal” in the subject line.

15. European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, and your personal information is processed by us in a manner that brings it within the scope of the EU General Data Protection Regulation, the UK General Data Protection Regulation, or the Swiss Federal Act on Data Protection, this Section applies to you.

15.1 Data Controller

For purposes of the GDPR, UK GDPR, and similar laws, Discovery Collective generally acts as a “data controller” for personal information about Account Holders and as a “data processor” for Student personal information that a School directs us to process. In the latter case, the School is the data controller.

15.2 Legal Bases

We process personal information on the legal bases described in Section 5.

15.3 Your Rights

Subject to applicable law and the conditions set out in the GDPR and UK GDPR, you have the right to:

• Request access to personal information we hold about you;
• Request correction of inaccurate or incomplete personal information;
• Request erasure of personal information;
• Request restriction of processing of personal information;
• Object to processing of personal information, including processing based on legitimate interests;
• Request portability of personal information you have provided to us;
• Withdraw consent where processing is based on consent; and
• Lodge a complaint with a supervisory authority in the EEA, UK, or Switzerland, such as your local data protection authority.
  To exercise any of these rights, contact us at info@discoverycollective.com. We will respond within the timeframes required by applicable law.

15.4 Children in the EEA and UK

The age at which a child may consent to the processing of personal information in connection with information society services varies by country in the EEA (typically between 13 and 16) and is 13 in the UK. Because the Services are intended for school-directed or guardian-directed use, Discovery Collective generally relies on the consent or authorization of the School, parent, or legal guardian rather than the Student directly.

15.5 International Transfers

As described in Section 12, personal information is transferred to the United States. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses, the UK International Data Transfer Agreement, or equivalent mechanisms) to protect personal information transferred outside the EEA, UK, or Switzerland.

15.6 Automated Decision-Making

We do not use personal information for automated decision-making that produces legal or similarly significant effects on individuals.

16. Other Jurisdictions

16.1 Canada

If you are located in Canada, we handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and substantially similar provincial laws (such as Quebec’s Law 25, Alberta’s Personal Information Protection Act, and British Columbia’s Personal Information Protection Act). You may contact us at info@discoverycollective.com to exercise rights available to you under applicable Canadian privacy law, including rights of access and correction. You may also contact the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner with any complaints.

16.2 Australia

If you are located in Australia, we handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You may contact us at info@discoverycollective.com to exercise rights available to you under applicable Australian privacy law, and you may lodge a complaint with the Office of the Australian Information Commissioner.

16.3 Other Countries

If you are located in another country, you may have rights under your local privacy or data protection law. Contact us at info@discoverycollective.com to make a request, and we will respond in accordance with applicable law.

17. Children’s Privacy

The Services are intended for use in primary and secondary educational settings and are not designed for children to use independently outside a School or family context. We collect personal information from Students only through accounts created and managed by Account Holders and only for authorized educational purposes.
Consistent with COPPA in the United States and similar child data protection laws elsewhere, we do not knowingly collect personal information directly from children below the applicable age of consent outside a School or family context. Where we collect Student personal information under COPPA’s school authorization exception or an equivalent authorization framework in another jurisdiction, we rely on the School to provide the consent that would otherwise be required from a parent or guardian.
If you believe that a child has provided personal information to us without appropriate authorization, please contact us at info@discoverycollective.com and we will take steps to delete that information.

18. Third-Party Services and Links

The Services may contain links to third-party websites or integrations with third-party services (such as single sign-on providers). This Privacy Policy does not apply to third-party websites or services. We encourage you to review the privacy practices of any third-party services you access.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify Account Holders by email, by posting a notice on the Services, or by other appropriate means, and we will update the “Last Updated” date above. Where required by applicable law, including with respect to Student personal information, we will obtain consent before making material changes that affect the processing of previously collected information.

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
Discovery Collective, Inc.
Attention: Privacy
5309 S 62nd St., Lincoln, NE 68516
Email: info@discoverycollective.com
Website: modelitk12.com
Schools and districts with questions about data privacy agreements, data processing addenda, or region-specific privacy requirements may contact us at the same address.

We take our responsibility to protect student privacy seriously — wherever in the world our users are. If you are a parent, teacher, school, or district with concerns about how we handle personal information, please reach out; we welcome the conversation.