Cardvoo for schools and districts

Start with a free 60-day pilot for up to 10 teachers. We'll sign a data privacy agreement, answer your security questions, and quote you for the rest.

Try it with a class

A free pilot for up to 10 teachers: 60 days, a fixed end date. It does not renew and does not turn into a purchase on its own. No purchase order needed to start. We sign a data privacy agreement first.

Quotes for schools

Quotes are valid for 30 days. Pay by invoice (net 30, USD); a W-9 is available on request. Pricing depends on seats and the length of the term.

Trust center

• Student privacy. The school is in charge of its students' data and Cardvoo acts as a service provider. A teacher's click in the product does not bind a school. Classes are for students 13 and up, in the United States. Class activity is kept apart from profiles, Leagues and recommendations, and nothing from a class is sold. Where a school or district signs our agreement, it designates Cardvoo a school official under FERPA.
• Live for a whole class. A teacher can run a Live game for one class, or start every room of a big class from one session console. Live has no chat. Students join with a code. Graded Live scores accuracy, not speed.
• What teachers see about tutors. Class Ask shows a teacher counts of questions and the topics students asked about, never the questions or answers. For a custom tutor a teacher sees usage totals (how many students used it, turns, how many reached the daily limit) and flagged messages: the category, the time and the student's class name, with the message text only after the teacher clicks to show it. A teacher never sees other chats.
• Parents. Cardvoo doesn't send class information, grades or progress to parents. The only emails a parent gets are the consent email for an account under 13 and its follow-up.
• Data privacy agreement. The Cardvoo data processing agreement, or we sign your district's own form. Available on request.
• Security overview. What Cardvoo does today to protect accounts and class data, and what it does not have. Available on request.
• Incident response plan. A written plan. We tell affected schools within 72 hours after we discover a breach of student data. Available on request.
• Accessibility. Our accessibility statement, with what was and was not tested. Available on request.
• Vendors. Every vendor, what it is used for and the data it receives.
• Deleting data. We delete or anonymize a school's student data within 30 days of a written request, or of the end of the agreement unless the school asks us to keep it. Copies in our backups leave within 35 days after that. A roster and grades CSV is available on request.
• AI and student writing. AI runs on the student's device by default. When a teacher turns on AI grading or AI feedback, the student's written answer goes, without the student's name or email, to OpenRouter, an AI router that sends it to a model host that it chooses. We choose the model. Our default text model is made by DeepSeek, a company based in China; some tasks use models made by OpenAI, Qwen and Google. We cannot name the host in advance. Every request asks for hosts that say they do not store or train on it, which we cannot verify. Before the answer is sent we remove email addresses, phone numbers and the student's class name where we can detect them, and a teacher confirms that the assignment does not ask students for personal information. We cannot detect every personal detail, so others a student types can remain. The data privacy agreement and the public list of subprocessors say the same.

Documents we have. The Cardvoo Data Privacy Agreement. A signature on your district's own data privacy agreement form (for example the NDPA) if you ask. A security overview. A written incident response plan: we tell affected schools within 72 hours after we discover a breach of student data. An accessibility statement that says what was and was not tested. A public list of subprocessors. All except the list are available on request.

Documents we do not have. A SOC 2 report. An ISO 27001 certification. An independent penetration test. The Student Privacy Pledge. An insurance certificate. If we get one of these, this page will say so with its date, and not before.

Cardvoo does not have a SOC 2 report, an ISO 27001 certification, an independent penetration test or a HECVAT, and has not signed the Student Privacy Pledge. Ask us a security question and we will answer it in writing.

Cardvoo is run by Bleart Emini, a sole proprietor, doing business as Cardvoo, 200 Greenville St Ste C, Newnan, GA 30263. Response to an incident is by one person today, and we say so before you sign.

What happens next

• We aim to reply within two school days.
• We sign a data privacy agreement.
• You get a quote for your size.

Write to us and tell us your school or district, how many teachers, and whether you want a pilot or a quote. [email protected]. We aim to reply within two school days.

Features · Pricing · Explore public decks · Student discount · Study guides · Study articles · Help · Sign up · Log in · Privacy Policy · Terms of Service

Cardvoo runs in your browser and needs JavaScript turned on.