Professional learning · Teachers, Librarians · 60 minutes
What Do My Apps Know?
Teachers read a mock app privacy policy the way a 12-year-old would, then audit the real tools in their own classroom and decide what to keep, change, or replace.
Every app, extension, and AI tool we put in front of students collects something: names, voices, writing, clicks, sometimes location. Teachers are often the first, and last, person to decide whether a tool is used, yet few of us have read the policies. In this session, participants first experience a mock privacy policy for a fictional AI story app from a student's point of view, then use a 12-item audit to review two real tools they use, and leave with a plan to teach students the same habit of asking "What does this app know about me?"
In this packet
- Handout A: StoryBuddy AI Privacy Policy (mock) (reading)
- Handout B: Tool Privacy Audit (checklist)
- Handout C: My Classroom Tool Inventory (organizer)
TCEA ELE indicators
- T2.2 I know how to guide students in safe and responsible internet use.
- S2.1 I know how to protect my personal information online.
- AI2.1 I know how to apply ethical principles when using or developing AI for education.
- AI2.3 I am aware of the importance of transparency and accountability in AI systems.
Full facilitator guide: mglearn.github.io/eles/activities/what-do-my-apps-know.html
Handout A for What Do My Apps Know?
StoryBuddy AI Privacy Policy (mock)
This is a fictional policy for a fictional app. Read it once as a student, then again as a teacher with two highlighters: what it collects, and where it goes.
1Welcome to StoryBuddy AI! StoryBuddy helps young writers create amazing stories with the help of our friendly AI writing buddy, Sparky. By creating an account or using StoryBuddy, you agree to this Privacy Policy. Last updated: this month. We may update this policy at any time; continuing to use StoryBuddy means you accept the changes.
2Who can use StoryBuddy. StoryBuddy is designed for writers of all ages. Users under 13 should use StoryBuddy with the permission of a parent or school. If you are a school, you confirm that you have obtained any consent required to let students use StoryBuddy.
3Information we collect. When you create an account, we collect your name, email address, school name, grade, and birthday. When you use StoryBuddy, we collect the stories you write, the prompts you give Sparky, any voice recordings made with our Read-Aloud feature, and pictures you upload. We also automatically collect device information, general location based on IP address, and how you use the app (such as which buttons you click and how long you stay).
4How we use your information. We use your information to provide and improve our services, including to develop and train the artificial intelligence models that power Sparky and other products. We may use stories, prompts, and recordings in anonymized or aggregated form for these purposes.
5Sharing. We do not sell your personal information. We may share information with our trusted partners who help us operate, analyze, and market StoryBuddy, and with other companies in our corporate family. If StoryBuddy is sold or merged, your information may be transferred to the new owner.
6Advertising. StoryBuddy is free because of our partners. Users may see age-appropriate promotional content for StoryBuddy Plus and partner products. Teachers with a Classroom Pro account see no advertising.
7How long we keep information. We keep your information for as long as necessary to provide our services and for our legitimate business purposes. Stories you delete may remain in our backups.
8Your choices. You can update your profile at any time. To request that we delete your account or stop using your stories to improve our AI, contact our privacy team by email. Requests are processed within a reasonable time.
9Security. We use industry-standard measures to protect your information. No system is 100% secure.
10Sharing your stories. Stories set to "Public" appear in the StoryBuddy Gallery with the author's first name, grade, and school. New stories are Public by default so writers can inspire each other!
Handout B for What Do My Apps Know?
Tool Privacy Audit
One sheet per tool. Tool name: ____________________. Mark "Don't know" honestly; those become your questions for the district.
| Yes | No | Don't know | |
|---|---|---|---|
| The tool is on my district's approved list, or covered by a district data privacy agreement. | |||
| I know exactly what student information the tool collects (names, work, voice, photos, location, activity). | |||
| Students can use it without entering more personal information than the task needs. | |||
| The policy says clearly who the data is shared with, not just "partners." | |||
| Student work and prompts are NOT used to train AI models, or there is an easy setting to turn that off. | |||
| There is no advertising to students. | |||
| The policy says how long data is kept and how it is deleted. | |||
| Student work is private by default; nothing is public unless I choose. | |||
| For students under 13, I know how parental or school consent is handled. | |||
| I can explain in plain language to a parent what this tool knows about their child. | |||
| My students know what not to type or upload into this tool. | |||
| If I stopped using this tool tomorrow, I know how to get students' data deleted. |
Notes
Handout C for What Do My Apps Know?
My Classroom Tool Inventory
Log every tool you audit. Actions: keep · change settings · replace · ask the tech department.
| Tool | What students enter or create in it | On district approved list? | Red flags or unknowns | My action + date |
|---|---|---|---|---|
| StoryBuddy AI (practice example) | Stories, prompts, voice recordings, photos, birthday | Unknown | Trains AI on student work by default; undefined partners; public by default; unclear retention | Don't use until the tech department reviews it |