What VPPO collects from a student—and what it does not.

VPPO is operated by Prestwick House, Inc., P.O. Box 658, Clayton, Delaware 19938. Privacy questions and school requests may be sent to contact@vppo.app or made by telephone at 800-932-4593.

A teacher supplies a student display name and class enrollment. VPPO creates a personal four-digit classroom credential. When the student uses VPPO, the service records assigned activities, vocabulary-study progress, answers, scores, attempt status and timing, and teacher feedback. Security records may include a protected digest of the originating network address, device or browser description, sign-in outcome, and activity time.

A student account does not require an email address, store account, home address, telephone number, precise location, payment information, advertising identifier, photograph, or date of birth. VPPO does not enable public profiles, student-to-student messaging, or public posting.

The information is used only to authenticate the student to the assigned class, deliver teacher-selected curriculum, save progress, grade work, report results to authorized school users, provide support, prevent misuse, and operate and secure the service. VPPO does not sell student information, use it for targeted advertising, or use it to create a commercial profile unrelated to the school’s educational use.

A school may authorize VPPO to collect student information only for the school-directed educational purpose described here. Before adding a student under 13, the school or district must authorize VPPO’s collection on the parent’s behalf or confirm another lawful consent path. The authorization must come from the school—not from a child presenting themselves as a teacher. Schools should provide this notice to families through their normal technology-review process.

VPPO uses Railway to host the application, database, and private curriculum audio; BigCommerce to validate adult Prestwick House identity and purchases; and Resend to deliver adult transactional and support email. Student responses, correct answers, and PINs are not included in transactional email. Providers may use information only to perform their contracted operational function.

On a verified school request, Prestwick House will describe the student information held, provide a means to review or correct it, stop further collection, and delete it when it is no longer required for the educational purpose, subject to limited security, transaction, backup, and legal-retention obligations. A parent or guardian should normally begin with the student’s school so the school can authenticate and direct the request. Prestwick House will assist the school promptly.

VPPO uses encrypted transport, restricted production access, organization and role checks, private storage, activity records, and abuse controls. No system can promise absolute security. The school should promptly revoke unused credentials and notify VPPO of a concern. See the Security page for current controls and validation status.