WeWillWrite holds four things about a student: first and last name, class, a device ID the app assigns, and their writing. Students join with a PIN code and their name. The school controls all of it.
Privacy by design
WeWillWrite holds four things about a student: first and last name, class, a device ID the app assigns, and their writing. Students join with a PIN code and their name. The school controls all of it.
Privacy by design
The short version
-
WeWillWrite is a live, teacher-led writing activity.
Students write on their own devices in short rounds, then the class discusses the writing together on a shared screen.
WeWillWrite stores four things about a student: first and last name, class, a device ID the app assigns, and their writing.
Students join with a PIN code and their name. No accounts, email addresses, or passwords.
Student names are visible to the teacher and never to classmates. Data is stored in the United States.
Students never prompt or chat with AI and get no AI feedback, scores, or grades.
After a session, Teacher Insights uses AI to show the teacher what worked, without grading or ranking students. Student writing goes to the AI provider without names and is never used to train AI.
Student data is never sold or used for advertising.
WeWillWrite has signed state data privacy agreements in 28+ states, including California, Florida, Illinois, New York, and Texas.
Details: [Trust Center URL]
-
Our class uses WeWillWrite, a writing activity the teacher runs live in class. Your child writes on a device for about three to four minutes at a time, then the class talks about the writing together. WeWillWrite keeps four things about your child: first and last name, class, a device ID the app assigns, and their writing, so the teacher can follow their progress. Your child joins with a PIN code and their name. There’s no account, email, or password. Classmates read each other’s writing without names. Your child never uses AI in WeWillWrite. After a session, AI helps the teacher see what worked. For this, your child’s writing is sent to an AI provider without their name or school, and it’s never used to train AI. Student data is never sold or used for advertising. To see, correct, or delete your child’s data, contact the school.
-
Our district has approved WeWillWrite, a live writing activity teachers run in class, and [has signed / is reviewing] a data privacy agreement with the company. WeWillWrite keeps four things about each student: first and last name, class, a device ID the app assigns, and their writing, stored in the United States. Student names are visible to the teacher and never to classmates. Students join with a PIN code and their name, with no account. After a session, AI helps the teacher review the writing, which is sent to an AI provider without names and never used to train AI. Student data is never sold or used for advertising, and parents can ask the school to see, correct, or delete their child’s data.
Copy-ready text for a principal, IT lead, family, or district website.
Student data
What we collect about each student, and how long we keep it, is set out in our privacy policy.
Who sees a student’s name
The teacher. Classmates read and vote on each other’s writing without knowing who wrote it.
Student data is never:
Sold, rented, or used for advertising.
Used to build profiles for advertising.
Used to train any AI model.
We share it with the service providers that run WeWillWrite for us (listed on our service provider list), as directed by the school or district, and in a few other limited cases set out in our privacy policy.
We review each service provider’s security and privacy practices before we use them, and every one is bound by contract to use student data only to provide their service to us.
Our commitments on student data
Our AI policy
Students never prompt AI, chat with it, or get feedback, scores, or grades from it.
Teacher Insights
Texts are analyzed to highlight literary devices. The teacher sees this and can choose to share and discuss on the main screen. Students don’t see it individually, and nothing is graded or ranked. AI can misread a text, so the highlights are suggestions.
What the AI provider receives
To create Teacher Insights, we send student writing to our AI provider. Students’ personal information, such as their names, school and IP address, is not included in the prompt. Our providers are listed on our service provider list .
Training
Neither we nor our AI providers use teacher or student personal information to train AI models.
The laws and agreements we work under
FERPA
We operate as a “school official” under FERPA, using student data only to provide and improve WeWillWrite for your school, as directed by the school.
COPPA
For students under 13, schools can authorize collection on parents’ behalf, but only for school purposes, never commercial ones.
New York Ed Law 2-d
We’ve signed the New York State Education Department’s model DPA, including the Parents’ Bill of Rights supplement. Districts in the WSWHE BOCES region can also use our signed SDPC agreement.
California SOPIPA and
Illinois SOPPA
State laws limiting what online school services can do with student data. We comply with both, and our agreements in both states put that in writing.
Canada
We comply with Canadian federal and provincial privacy laws.
Data privacy agreements
If your state already has an agreement with us, a district administrator can join it, usually by submitting a one-page form called Exhibit E through the SDPC Resource Registry or by email to privacy@wewillwrite.com. Select your state below for the details.
If your state has its own model agreement, send it to us and we’ll review it.
If your district uses its own agreement, send it and we’ll review it. Otherwise, you can sign our Standard DPA and email it to privacy@wewillwrite.com.
Once your agreement is signed, your district directs how we handle student data, as the agreement sets out.
Find your state’s DPA
Security
Our security program follows the NIST Cybersecurity Framework 2.0.
Where data lives
Our servers and databases run on Microsoft Azure in the United States. Azure is independently audited under SOC 2 Type II, and we’ll share Microsoft’s report on request.
Encryption
TLS 1.2 or higher in transit. AES-256 at rest.
Access
Staff can reach only what their role needs. Everyone on our team signs a confidentiality agreement and gets regular privacy and security training. Our database isn’t reachable from the public internet. Teachers can turn on two-factor authentication.
If something goes wrong
If we confirm a breach involving student data, we tell the school or district within the timeline in your DPA. We keep a documented incident response plan.
Questions teachers and districts ask
-
No. Students join a session with a PIN code from their teacher and type their name.
-
Names let a teacher follow a student’s progress, tell two students with the same first name apart, and step in if something inappropriate is submitted.
-
Yes, to our AI provider for Teacher Insights, without the student’s name, school, or IP address. It’s never used to train AI models.
-
Your district decides, and in some states, such as New York, the law requires one. See Data privacy agreements above for how to get one in place.
-
Parents can ask to see, correct, or delete their child’s data. They ask the school first, and the school asks us. We respond within the time your agreement and state law set.
-
Students write on their own devices for about three to four minutes per round. The teacher decides how many rounds to run, and the session ends with the class discussing the writing together on a shared screen. Working under a district screen-time or AI policy? See how WeWillWrite fits New York City’s guidance.
-
Yes. For material changes, we’ll let you know by email or a clear notice in WeWillWrite before the change takes effect.
Privacy and security resources
Have questions about privacy?
Let us know at privacy@wewillwrite.com.