How we handle your data

Your data is yours

The district or organization that signs up for Playgility or Building Trusted Spaces owns its data. We hold it on your behalf to run the training and the lesson-planning tools, and we will return it or remove it at your request.

We do not sell your data

We do not sell or rent your information to anyone. The data in the portal is used to deliver the program to you, and that is all.

What we collect

The portal holds what it needs to run your program: your name, work email, school or district, and role; the classes or groups you set up (a grade band, group size, and schedule, never student names or student records); your training progress; and anything you choose to write, like reflections and feedback. That's the list.

What "Personal Information" means

When this page or our Terms of Use say "Personal Information," we mean information that identifies you or could reasonably be linked to you: your name, your email address, your school, district, or organization and your role there, your sign-in, your training progress and time in the portal, and anything you write in the portal. Student information is not part of it, because the portal holds none.

Families and other roles

Building Trusted Spaces has trainings for teachers, school counselors, classified professionals, school leaders, student services staff, and families. A family member who joins with a school's family code gives us a name and an email. The school or district admin can see that the account exists, its name and email, and how far along the training is. Nobody enters student names or student records, and the notes a family member writes inside the training stay private to them. The weekly note to families can be turned off from the dashboard at any time.

Cookies

The portal uses only the cookies that make the site work: one that keeps you signed in, and short-lived ones that carry the demo and sign-up flows. Our host, WP Engine, sets a security cookie that filters out bots. We use no advertising cookies and no analytics trackers, and we don't track you across other websites, so there is nothing for a browser's Do Not Track signal to switch off, and no cookie pop-up to click through. Training films play through Vimeo's video player, which may set its own cookies inside the player; Vimeo's own privacy policy covers those.

The Practice Room

When you practice a conversation in the Practice Room, what you type or say is sent, by way of a small relay we run on Cloudflare that holds the service keys, to the AI services that generate the character's reply and voice (Anthropic and ElevenLabs). Practice conversations are drills with fictional characters. Keep real student names out of them, and they never touch student data.

Your reflections stay private

When anyone writes notes or reflections as they work through the training, those words stay with them. Admins and All It Takes staff can see whether lessons are complete and how much time someone has spent in the portal, but they never see what a person writes. Reflections are private by design.

You can export or remove a person's data on request

An admin can download everything the portal holds about a person in a single file, or have that person's personal information removed when asked. When personal data is removed, the person's name, email, and sign-in are cleared while their completion totals stay in the team's counts with no name attached. Private reflections are never part of an admin export.

Access is limited by role

Teachers, staff, and family members see their own training and their own work. Admins see only their own school or district. All It Takes staff sign in with individual accounts, and the changes they make are recorded in an activity log, so actions stay traceable.

If this page changes

When we change how we handle data in a meaningful way, we'll update this page and the date below.

Questions

If you have a question about your data, reach out to your All It Takes contact or email ait@allittakes.org.

Last updated September 15, 2026.