SDI StudioSDI Studio Privacy Policy
Effective date: 18 October 2026 Last updated: 19 October 2026
This policy explains what information Bright Foundry collects when you use SDI Studio and its website, how we use it, who we share it with, and the choices you have. We have tried to write it so that a busy teacher can read it in a few minutes.
Who we are
SDI Studio is made by Jeremy Anderson, doing business as Bright Foundry Design ("Bright Foundry", "we", "us"), a sole proprietorship registered in Ohio.
Contact: [email protected]
The short version
- Student information is not sent to us. SDI Studio runs on your computer and sends the text you type about a student directly to our AI model provider, Anthropic, to draft goals. It does not pass through our servers and we keep no copy.
- We collect only what we need to run your account and licence.
- We do not sell personal information, show ads, use third-party marketing, track you across other websites or apps, or build advertising profiles.
- We do not use your information to train AI models.
- You can ask us to see, correct or delete your information at any time.
Who SDI Studio is for
SDI Studio is intended for adult education professionals, such as special education teachers, related service providers and administrators. It is not directed to children, and children are not permitted to create accounts. We do not knowingly collect personal information from children.
Student information
SDI Studio is designed so that information about students is never sent to Bright Foundry.
- When you draft a goal, the text you enter (for example, a description of a student's present levels) is sent from your computer directly to Anthropic over an encrypted connection, and the draft is returned to your computer. It does not pass through a Bright Foundry server.
- Anthropic processes that text as our service provider, because SDI Studio makes those requests using Bright Foundry's account with Anthropic. Under Anthropic's current terms for its API, content sent through the API is not used to train its models without permission, and Anthropic deletes it within 30 days, except where Anthropic's safety systems flag content (kept up to 2 years) or the law requires it to be kept. See Anthropic's API and data retention documentation and privacy center.
- Drafts and goals are stored on your own computer, not on our servers, in your user profile's local application data folder, encrypted with a key that your computer's own secure storage keeps for your computer login. If your computer login is reset or rebuilt, or your files are restored onto a new computer or login, your saved goals can't be opened there unless you use a recovery code you created. Another account on the same computer has its own separate folder and doesn't see your goals. To move to another computer, export your goals and import them there; an export is an ordinary, unencrypted file that you keep, so store it somewhere safe. We never hold a copy of your goals or the key, so we can't recover them for you.
- To count free goals, the app sends us a random identifier for each goal you draft. The identifier contains nothing about the goal or the student.
Two features send text to us on purpose: the help chat inside the app, and feedback or problem reports. Please do not include student information in either. If student information reaches us anyway, we will delete it when we become aware of it.
Your school or district may have its own rules about using software with student information. Please follow them. Schools and districts that need a data privacy agreement can contact us.
Information we collect
Account information. When you create an account: your name, email address, and password. We store the password only in scrambled (salted and hashed) form, so we cannot read it. We also record when you signed up and last signed in, and the network (IP) address you signed up from, which we use only to detect abuse.
Licence information. The terms and status of your licence; an identifier for the copy of SDI Studio installed on your computer and when it was first used; and, on a free account, how many of your free goals you have used.
Sign-in sessions. When you sign in, we store a scrambled (hashed) form of your session token and the type of device software making the request, so we can keep you signed in and let you sign out.
Information you choose to send us. Messages in the in-app help chat; feedback or problem reports; and, if you reach the end of your free goals, a request to keep using SDI Studio. We keep short topic labels summarising help-chat questions (for example, "how district benchmark settings work") to learn what teachers ask about most.
Early-access list. If you join it: your first name, email address, state, role, and, if you choose to answer, what device you use for school work and whether you can install software on it.
District enquiries. If you contact us through the For Districts page: your name, work email, district or organisation, role, and your message if you write one.
For both website forms we also record which page the form was sent from and when. We do not store your network (IP) address with them. To stop any one sender flooding the forms, we store a scrambled (hashed) code made from it instead. A new code is made each day, so codes from different days can't be matched to each other, and each code is kept with its form for as long as the form itself.
Technical logs. Our hosting providers keep standard technical logs, such as IP addresses and the times of requests, for security and reliability. Cloudflare also receives the page address, the referring page and your browser type with each page visit it counts for us (see Cookies, advertising and tracking).
What we do not collect. Student names, present levels, goals, drafts, or any other information about students, except where you send it to us in the help chat or a report despite the request above.
How we use information
- To provide SDI Studio: create and run your account, issue and check your licence, and count free goals.
- To support you: answer help-chat questions and fix problems you report.
- To improve SDI Studio, using feedback, reports and help-chat topic labels.
- To contact you about your account, and, if you joined the early-access list, to tell you when SDI Studio opens to you.
- To decide which states and devices to support next, using the state and device answers on the early-access list.
- To reply to district enquiries.
- To keep SDI Studio secure and prevent abuse.
- To meet legal obligations.
We do not use your information to show ads, to build advertising profiles, for third-party marketing, or to train AI models.
Cookies, advertising and tracking
- This website uses no cookies. We count page visits with Cloudflare Web Analytics, which stores nothing on your device (no cookies or similar storage) and is not used to identify or follow individual visitors. It tells us how many visits each page gets, which link or site sent visitors to us, general details such as country, browser and device type, and how quickly pages load.
- We do not show advertising, in the app or on the website.
- We do not track you across other websites or apps.
- We do not create advertising profiles.
Who we share information with
We do not sell personal information, and we do not share it for advertising or third-party marketing.
We use these service providers to run SDI Studio. Each receives only what it needs to perform its service for us:
| Provider | What it does for us |
|---|---|
| Anthropic | Processes the text you send to draft goals, and help-chat questions |
| Railway | Hosts our licence and support servers |
| Supabase | Hosts our database, including the early-access list and district enquiries |
| Cloudflare | Hosts this website, receives its two forms and passes them to our database, counts page visits (Web Analytics, no cookies), and manages our domains |
| Slack | Delivers internal alerts to us about accounts and licences |
| GitHub | Hosts the installer files you download |
We may also disclose information if the law requires it, to protect the rights and safety of users or others, or as part of a sale or transfer of the business, in which case this policy would continue to apply to the information transferred.
How long we keep information
- Account and licence information: while your account is open, and for 12 months after it closes, then deleted.
- Early-access list: until you ask to be removed, and in any case no longer than 24 months.
- District enquiries: up to 24 months after our last reply.
- Feedback and problem reports: up to 24 months.
- Help-chat messages: we are confirming how long our support system keeps these. Until we publish a period here, you can ask us to delete yours at any time at [email protected].
- Technical logs and page-visit counts: for the periods our hosting providers keep them.
- Student information received by mistake: deleted when we become aware of it.
Security
We protect information with encrypted connections (HTTPS), scrambled (hashed) storage of passwords and session tokens, and access limited to the people who run SDI Studio. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.
Your choices and rights
You can ask us at any time to:
- see the information we hold about you,
- correct it,
- delete it and close your account,
- or remove you from the early-access list.
Email [email protected]. We will respond within 30 days. We will not treat you differently for making a request.
Changes to this policy
If we make a material change, we will tell you by email or in the app before the change takes effect, and update the date at the top.