The trust bar, met honestly
In July 2026, Anthropic launched Claude for Teachers with a K-12 Data Processing Addendum and an American Federation of Teachers “Gold Standard” endorsement — setting a new, higher bar for AI privacy in schools: training off by default, verifiable consent, deletion on request, and transparency. (That endorsement is of Claude for Teachers, not of Cocovox.)
Here is that bar, and exactly where Cocovox meets it, exceeds it, or has a protection built but not yet switched on. We would rather tell you what is running today than round up.
The labels below are our own honest self-assessment against that bar — we have not been independently audited against it yet, and we will say so plainly the day that changes.
Cocovox
Cocovox sends conversations to Anthropic’s Claude API. Under Anthropic’s API terms and our data-processing agreement, those inputs and outputs are not used to train models. (Under its API terms, Anthropic retains API data for a short abuse-monitoring window — up to 30 days — then deletes it.)
Cocovox
A parent completes a card check: we authorize $0.01 (never charge it), void it immediately, and match the cardholder’s name — an FTC-recognized method of verifiable parental consent. Email- or SMS-only confirmation is recorded as “notice-only” and does not unlock a child’s account.
Cocovox
Until a parent grants consent, a pending-consent minor is blocked from every part of the app — they can check consent status and sign out, and nothing else. It is a locked door, not a polite request.
Cocovox
Voice practice is transcribed live — we keep the transcript and practice scores, not the recording. Any voice clip a learner explicitly saves is automatically deleted within 30 days, and voice audio is never used to train AI.
Cocovox
Deleting an account starts a 30-day grace window — so a family can change their mind — and then the child’s data is hard-deleted, not archived. Backup copies are purged within 90 days. Parents can export everything first.
Cocovox
A 2-year automatic roll-off of chat and note history — with 30 days’ advance notice and an export path — is built and tested. It ships switched off by default; turning it on is a deliberate deployment decision, so today it is available, not yet running.
Cocovox
Access to student educational records is written to a dedicated, append-only FERPA audit log on a persistent volume that survives restarts. Our retention target for this trail is at least one academic year.
Cocovox
We never sell user data, and Cocovox runs no ads. There is no ad SDK to sell to.
Cocovox
Families can see the data that shapes their child’s AI experience — IEP goals, difficulty adjustments, session history — in plain language, and every AI-drafted message carries a badge. Our How our AI works page is the full tour.
The patient tutor every kid deserves.