QuantCore Learning Hub · DPA Attachment C
Parental Bill of Rights for Data Privacy & Security
Last Updated: June 19, 2026
This Parents’ Bill of Rights is provided by QuantCore.AI in connection with the QuantCore Learning Hub and is consistent with New York Education Law § 2-d and its implementing regulations (8 NYCRR Part 121). It explains the rights of parents and eligible students regarding student data, and — in the Supplemental Information below — answers in plain language how QuantCore.AI handles that data. It is written to accompany the Data Privacy Agreement between QuantCore.AI and your school or district.
A. Your Rights
Each school or district that contracts with a third-party vendor for services involving student data must ensure that the following protections are in place. QuantCore.AI affirms each of them:
- A student’s personally identifiable information (PII) cannot be sold or released for any commercial or marketing purpose. QuantCore.AI does not sell student data and does not use it for advertising.
- Parents have the right to inspect and review the complete contents of their child’s education record stored or maintained by QuantCore.AI, by making a request through the school.
- State and federal laws protect the confidentiality of student PII, and safeguards associated with industry standards and best practices — including encryption, firewalls, and password/access protection — are in place when data is stored or transferred.
- A complete list of all student data elements collected by New York State is available for public review at the New York State Education Department (NYSED) website, or by writing to the Office of Information and Reporting Services, NYSED, Room 865 EBA, 89 Washington Avenue, Albany, NY 12234.
- Parents have the right to have complaints about possible breaches or unauthorized release of student data addressed. Complaints may be directed to your school or district, or in writing to the Chief Privacy Officer, New York State Education Department, 89 Washington Avenue, Albany, NY 12234, or by email to privacy@nysed.gov.
- Parents have the right to be notified, in accordance with applicable laws and regulations, if a breach or unauthorized release of their child’s PII occurs.
B. Supplemental Information for the QuantCore Learning Hub
The following supplemental information is provided for the agreement between QuantCore.AI and your school or district, as required by Education Law § 2-d. It is written in plain language for parents and eligible students.
1. What student data will QuantCore collect?
Account details needed to create and secure a student account (name, school email, grade level, and school name), and learning activity within the Learning Hub (lessons completed, quiz and exam scores, simulated trading results, progress, and the market questions a student asks the AEGIS assistant along with its responses). We collect only what is needed to teach financial literacy.
2. What are the exclusive purposes for which the data will be used?
Student data is used solely to deliver the educational service the school has authorized: providing lessons, tracking and reporting progress to teachers, securing accounts, and operating the platform. It is never used for advertising, marketing, or any commercial purpose, and it is never sold.
3. Will the data be shared with anyone else, and how are those parties bound?
We use a small set of vetted service providers (sub-processors) to host the platform, send email, process payments, and provide related services. Each is contractually bound to the same confidentiality, security, and use restrictions that apply to us, and may use the data only to perform services for us. Our current sub-processor list is published at qntcore.ai/subprocessors.
4. Does QuantCore use artificial intelligence, and is student data sent to it?
Yes — the AEGIS assistant uses an external AI language model to help students understand markets. It sends only public market data and the market question a student types to the AI. It does not send student names, email addresses, student IDs, grades, school identifiers, or any education record to the AI. No student personally identifiable information leaves our systems to reach the AI, and the AI provider does not use our data to train its models. Full details are on our Compliance page.
5. How long is the agreement, and what happens to the data when it ends?
The data is retained for the duration of the agreement between QuantCore.AI and your school or district. When the agreement expires or is terminated, student data is returned to the school or securely destroyed within 60 days, and we provide written confirmation of destruction on request.
6. How can a parent or eligible student challenge the accuracy of the data?
Education records remain under the school’s control. A parent or eligible student who believes data is inaccurate should contact the school, which can correct its records and direct QuantCore.AI to make any necessary updates. Parents may also email info@qntcore.ai with the subject “Data Correction.”
7. Where will the data be stored, and how is it protected?
All data is stored in the United States on independently certified cloud infrastructure (our database provider holds SOC 2 Type II certification). Protections include encryption, strict and least-privilege access controls, authentication, monitoring and logging, and regular review of our security practices, organized around the NIST Cybersecurity Framework.
8. How is the data encrypted?
Student data is encrypted both while it is moving over the internet (in transit, using TLS 1.2 or higher) and while it is stored (at rest, using AES-256). Backups are also encrypted.
9. What happens if there is a data breach?
We maintain an incident-response process. If an unauthorized release of student data occurs, we notify the affected school without unreasonable delay so the school can meet its notification obligations to parents, and we cooperate with the school and regulators, applying the strictest applicable timeline.
10. Will student data be used to make automated decisions about my child?
No. The AEGIS assistant is an educational explainer that provides market analysis for learning. It does not grade students, make disciplinary or eligibility decisions, or make any consequential automated decision about a child.
11. Who can I contact with questions or concerns?
For school-managed accounts, first contact your school, which will route the request to us under our Data Privacy Agreement. You may also contact QuantCore.AI directly at info@qntcore.ai with the subject “Parental Request,” or contact your school district, the NYSED Chief Privacy Officer (privacy@nysed.gov), or the Federal Trade Commission (ftc.gov).
C. Related Documents
- Security & Compliance overview — including the full AEGIS AI data-flow disclosure.
- Sub-processors list — every third party that may process data, and what each receives.
- Privacy Policy.
- Compliance packet (PDF) — the full security & data-privacy compliance document for download.