Last updated May 2025
About CodeAI AI Products
CodeAI® is a US-based charitable nonprofit dedicated to expanding access to computer science in schools and increasing participation by young women and students from other underrepresented groups. Our vision is that every student in every school has the opportunity to learn computer science.
CodeAI’s AI Chat lab is an innovative, AI-powered chatbot used to enhance the learning experience in the new Exploring Generative AI course. Students will learn how to use and build with this chatbot in the second unit of this course, Customizing Language Models. AI Chat lab was designed with a focus on privacy, content appropriateness, and responsible use, ensuring that students interact with AI in a controlled and educational environment. This targeted approach is designed to help protect students from inappropriate content, but also encourages responsible communication practices, where their interactions are monitored to maintain a safe and productive learning space.
Your privacy is important to us. We want to be transparent about the personal data we collect, why we collect it, and what we do with it when using our AI Products. Moreover, we want you to know your rights regarding your personal data. We recommend that you read this Privacy Policy carefully before accessing or using the Services. If you have any questions about this Privacy Policy, you can email us at artificialintelligence@code.org.
This Privacy Policy explains how we collect, use, and protect the information we collect when you use our AI resources such as our Generative AI Curriculum that includes the CodeAI AI Chat Lab tool for students, or AI Tutor for educators on the CodeAI website. Any information, including personal data, collected through CodeAI AI Products will be processed and stored in the United States. In the event this Privacy Policy is translated into another language resulting in any potential conflict or ambiguity, the official version of the Privacy Policy shall remain the English version.
Information We Collect
We generally collect information in two ways: (1) information you voluntarily provide to us, and (2) information we automatically collect via AI Products– such as analytics data.
Our personal information collection practices are different for student-facing and teacher-facing products. These differences are grounded in legal and ethical requirements and balanced with our pedagogical goals. We strive to align with the principles of data minimization and to avoid collecting personal information to only the minimum amount necessary to provide the service. CodeAI provides notice to users when interacting with the AI chat products to not provide personal information. Every student message and AI response is reviewed through a safety system that filters out inappropriate content before it is sent to the model or appears for the student.
Cookies and Analytics:
The CodeAI website that hosts our AI Products uses cookies and similar technologies (such as web beacons or pixel tags) to collect anonymous information about your browsing activities on this site for internal analytics purposes. The information we collect through cookies includes your IP address, browser type, device type, and other anonymous usage data.
How We Use Your Information
We generally use the information we collect to (1) communicate with you and provide requested information, (2) personalize, understand, improve, develop, and protect your website experience, (3) prevent, detect, protect against and respond to website security threats or incidents; and (4) perform internal operations.
Information Sharing and Disclosure
We do not rent or sell personal data or any other information we collect. The information we collect from you will only be used by CodeAI for the purposes outlined in this policy or disclosed and consented to at the time of collection. We may share information in the limited circumstances described below.
Third-Party Service Providers:
We may engage trusted third-party service providers to support our operations, including assisting us in operating AI Products. These service providers may have access to your information solely for the purpose of performing their tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Legal Requirements:
We may share or disclose your information if required to do so by law, or if we have a good-faith belief that such action is necessary to comply with local, state, federal, international, or other applicable laws or respond to a court order, judicial or other government order, subpoena, warrant, or administrative request. In some cases, we may make such disclosures without first providing you notice.
Security or Protection:
We may share information when we believe, in good faith, it is appropriate or necessary to protect the security or integrity of the website; protect against fraudulent, abusive, or unlawful activities; investigate and defend against third-party claims or allegations; assist government enforcement agencies; or protect our rights, property, or personal safety, along with the personal safety of others.
Business Transfer:
We may share or transfer information in the context of a change of business, including a merger, acquisition, sale or other change of control. However, in any such case the information will be used, shared, and safeguarded by the acquiring organization under the same conditions described in this Privacy Policy.
De-identified or aggregate information:
We may share or disclose de-identified or aggregate data that does not reasonably identify any individual. All user data is confirmed to be anonymized before sharing with third parties through the use of third-party services such as Amazon’s Comprehend tool. Research partners must also sign data share agreements that adhere to our strict compliance obligations.
Data Security
We take reasonable physical, administrative, and technical measures to protect the information you provide to us from unauthorized access, disclosure, alteration, or destruction. However, no security measures can fully ensure the security of the personal data or other information we collect and store. We cannot guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, administrative, or technical safeguards.
Your Choices – How to Access, Correct, Update, or Delete Your Information
If you wish to access, correct, update, amend, or delete personal data you’ve provided to CodeAI while using our AI Products, you can email us at artificialintelligence@code.org. We will promptly review all such requests in accordance with applicable laws after verifying your identity. In the event you believe your request has been improperly denied or insufficiently processed, you may appeal that decision by submitting your request and the reasons you believe your request was improperly denied or insufficiently processed in an email to artificialintelligence@code.org. Within forty-five (45) days after receipt of an appeal, we will inform you of any additional action taken or not taken in response to the appeal, along with a written explanation of the reasons in support of the response.
We do not engage in any targeting advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning a User. Therefore, we do not process requests to “opt-out” of such processing.
Data Retention
CodeAI retains student data only as long as necessary for support of our AI Products and AI curriculum. We retain teacher data only as long as it supports their professional development on the platform. For student users, chat history is deleted from production databases after 90 days. In addition, user chat history is also removed from teacher section views of classroom chat history after 90 days. For teachers, projects are deleted and de-identified after 5 years of inactivity. However, teacher account chat history is currently not deleted.
User Controls
Teachers control access on AI Chat Products for their sections. Student outputs and interactions using AI Products are shared with their teachers by default as part of their classroom section to support formative learning and intervention. Students are instructed through out the curriculum on how to leverage AI in appropriate ways while understanding that generative AI tools can be incorrect.
Reporting
While CodeAI does its best to limit inappropriate responses, AI chatbots can occasionally generate unexpected outputs. This is explicitly addressed in the first lesson of the curriculum where students use an AI chat lab. If this happens, we encourage teachers to turn it into a learning opportunity by discussing AI hallucinations or the sources of the data. We are always striving to improve, so users may share any concerns or suggestions with us at artificialintelligence@code.org or provide feedback directly via the teacher classroom view.
Providing feedback:
Teachers can provide feedback on inappropriate or appropriate chats directly when viewing student work. Students can report all feedback or bugs to our support email or specifically to artificialintelligence@code.org. We value your input as we continuously work to enhance the tool.
Links to Other Sites and Services
CodeAI AI Products may link to, and may be linked from, websites operated by other entities or individuals. These websites are governed by the privacy policy of those entities and individuals, and not this Privacy Policy. We encourage you to review these third-party privacy policies for details about how they may collect, store, and use your information if you choose to engage with them.
International Users
The CodeAI website is operated and managed on servers located within the United States. If you choose to visit the website or otherwise engage with the AI Chat Products from regions of the world with laws governing data collection and use that differ from U.S. law, you acknowledge and agree that you are transferring information, including personal data, outside of those regions to the United States and that by providing your personal data, you are providing your consent to that transfer.
Children’s Privacy
For more information about our privacy practices involving children under 13 years of age, please read our Children’s Privacy Notice in our CodeAI privacy policy. When a Child creates a CodeAI account using a personal login, we request a username, age (not birthdate), password, and email address (although we retain only a one-way hash of Student email addresses). In some jurisdictions, we may seek the consent of a parent or legal guardian before establishing the account for a Child.
A School may create a CodeAI account for a Child
When CodeAI is used by a School in an educational setting in classrooms with Children, we strongly recommend that Teachers not ask their students to create CodeAI accounts with personal logins. Instead, we recommend that Teachers use one of the account creation methods noted below.
Teachers who have classrooms with Children can create CodeAI accounts without personal logins by using either a rostering service like Google Classroom or Clever, or by creating CodeAI logins with picture passwords or secret word passwords that Teachers set for each student in a Teacher section (in which case the School may avoid providing any Personal Information). When Schools create CodeAI accounts in these manners, we rely on the Teacher/School to obtain required consent, if any.
As previously noted, in some jurisdictions if a Teacher chooses to have Child students create accounts with personal logins, we may require parental consent for the account creation - which can result in delays and hinder classroom participation. Similarly, if a Child later seeks to add a personal login to access their CodeAI account independently of their Teacher or School (e.g., they wish to maintain their account and projects for use outside of school or after the school year ends), we may require parental consent in some jurisdictions to create the personal login - however, the Child will continue to be able to use their existing School login credentials pending the parental consent for the personal login.
How Parents can provide consent (where required)
Although parental consent is not generally required, in those jurisdictions where we require such consent in connection with a Child account, the parent may provide consent by responding affirmatively to an email sent by CodeAI to the Parent’s email address provided by the Child during registration. We will send a reminder email after a few days if no response is received, but if we do not receive consent within the time prescribed, the Child’s account will be closed and all account information (including the parent’s email information) will be deleted from our systems. If parental consent is received, the Parent’s email address will be automatically linked to their child’s account to stay updated on their Child’s progress and projects - and the Parent email address can also be used for password recovery and to request support (including account deletion at any time) for the Child’s account. Parents will need to ensure they know their child’s email address and username for support requests.
Changes to the Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the CodeAI website and AI Products after the modifications will constitute your acknowledgment and acceptance of the updated Privacy Policy. However, we will not change how we use personal data we have already collected from you without providing you notice and obtaining your consent.
Contact Us
If you have any questions, concerns, or requests regarding this Artificial Intelligence Privacy Policy, please contact us at artificialintelligence@code.org.