ALC
Privacy Notice
Last updated: October 29, 2026
ALC is a live-class tool for grades 6–12 teachers. It is operated by McKenzian Solutions ("we"). This notice explains what we collect, why, who helps us run ALC, and how to ask about your data.
Contact (email only): solutions@mckenzian.com
The short version
- Students do not have accounts. They join a class with a class code and pick their first name from the class list.
- The only student identifier ALC stores is the student's first name from the class list. We never ask students for an email, password, phone number, or Google account.
- Teachers sign in with Google. Access is by invitation only.
- Schools and school boards control their student records. We process them only on the school's behalf, to run ALC.
- We do not sell data, and we do not use it for advertising.
Who controls student information
When a school or school board uses ALC, that school or board controls its student records. McKenzian Solutions acts as a service provider. We handle student information only to provide ALC to that school, and only as the school directs. We handle it in line with Ontario's Municipal Freedom of Information and Protection of Privacy Act (MFIPPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), as they apply.
Questions about a student's records should go to the student's school first. We will help the school answer them.
What we collect
| Who | What we store | Why |
|---|---|---|
| Students | First name from the class list | So the teacher knows who is in class |
| Answers, drawings and whiteboard work during class | So the class activity works and the teacher can review it | |
| Attendance (join and leave times) and participation points | Attendance and participation records for the teacher | |
| Mood check-ins and optional comments on class feedback | So the teacher can see how the class went | |
| Teacher notes and observations about class work | Teaching and assessment | |
| A catch-up PIN (stored scrambled, never in plain text) | So a student can open the catch-up work for a missed class | |
| A chosen character or avatar | Shown in class in place of a photo | |
| Teachers and school staff | Google email address, name, and Google account ID | Sign-in |
| Sign-in times, 2-step email codes, and an access log | Security and account protection | |
| Classes, lessons, and content they create or upload | To run the classes | |
| People who request access | Name, email, role, organization, and the message they write | To review the request and reply |
| Everyone, including students | IP address when joining or signing in, and error reports | Rate limiting and security |
We do not collect student emails, passwords, phone numbers, addresses, birth dates, or photos.
Student privacy
- Students never sign in with Google or any other outside account.
- A teacher's class code works only while that class is live.
- Teachers see only their own classes. One teacher cannot open another teacher's class.
- If a teacher Quits a class instead of ending it, nothing from that session is saved. Its answers, attendance, board work, and notes are deleted right away.
- We do not show advertising to students or build profiles of them.
Who helps us run ALC (subprocessors)
| Provider | What they do | Where |
|---|---|---|
| Fly.io | Hosting and data storage | Toronto, Canada region |
| Teacher sign-in (name and email only) | May be processed in the United States | |
| Resend (or our email provider) | Sends sign-in codes, invitations, and access-request emails | May be processed in the United States |
| Sentry | Error reports so we can fix problems | May be processed in the United States |
| A third-party payment processor | Pro billing for teachers. We never see or store your full card number. | Varies by processor |
Error reports do not include student names on purpose. On teacher pages they may include an internal teacher ID.
How we protect data
- All traffic uses encrypted connections (HTTPS).
- Stored data sits on encrypted disks.
- Staff sign-in uses Google plus a 6-digit email code.
- Access to student records is logged.
IP addresses and access logs: we log IP addresses, including students' IP addresses, to limit repeated join attempts and to protect ALC. We also keep an access log of sign-ins, student joins, and views of student records. Right now, IP address logs and the access log are kept with no automatic deletion.
How long we keep data
We keep student records for as long as the school or board needs them to meet its MFIPPA obligations. When a school or board asks, or when its service with ALC ends, we delete its data. Data a teacher Quits is deleted immediately. IP address logs and the access log currently have no automatic deletion (see above).
Your rights and requests
You can ask to see, correct, or delete personal information, or ask how it is used.
- Students and parents: contact your school. The school controls the records and we will help it respond.
- Teachers and others: email solutions@mckenzian.com.
We reply within 48 hours and aim to complete requests within 30 days. If you are not satisfied, you can contact the Information and Privacy Commissioner of Ontario or the Office of the Privacy Commissioner of Canada.
If something goes wrong
If a breach affects personal information, we will tell the affected school or board without delay so it can meet its notice duties, and we will help it respond.
Changes
If we change this notice, we will update the date above. If the change is significant, we will tell schools before it takes effect.
Privacy contact: solutions@mckenzian.com