Privacy Policy

Effective October 25, 2026

1. Who we are

LabCauldron is a web and mobile tool for IB science teachers and their students, developed by Anum Kazi. It is built and hosted by Webtronaut Innovations, LLC (webtronaut.com). This policy explains what information the Service collects, why, who can see it and how to delete it. It applies to LabCauldron at labcauldron.com, any LabCauldron mobile app and any other copy of the Service. Words defined in our Terms and Conditions have the same meaning here.

When a teacher uses LabCauldron with their class, the school decides how student information is used, and we process it on the school's behalf to provide the Service.

2. What we collect

Teachers

• Name, email address and password. The password is stored only as a scrambled one-way code (scrypt), never as the password itself.
• The date you agreed to these Terms.
• Your classes: class names, class codes, the lab equipment you tick and your deadlines.
• Notebook entries you write for your students (check-ins and feedback), approvals and stage changes.
• Calibration reports: the code and short title you give each report and the marks you enter. We ask you to use codes, not student names.
• Marks and comments you give submitted reports, the feedback you release to students and the IB scoring sheets you download. If you invite a colleague as second marker, their email address.
• Posts, discussion questions and comments you write in your classes' discussions, any files you attach to them, which items you hide or lock, and any student you mark as having completed a discussion question.
• Moderation cases you create: the assessment title, subject, topic, criteria and rubric; the student's name if you enter one; the student work file you upload (a PDF, image or document of up to 25 MB); both teachers' marks and comments; the AI's suggested marks; moderation notes; and the agreed final grade. If you add a second teacher, their email address. Upload only work your school allows you to share with a colleague, and leave the name blank or turn on anonymise where you can.
• Private notes you exchange with your students, including which note was your one round of draft feedback.
• Rubrics you upload or paste into the task builder, the tasks it helps you write, and ideas you add to a class idea bank.
• Whether you want the morning summary email, and a record of which reminders it has already sent you, so you aren't told the same thing twice.

Students

• First name (with an initial if two students share a name) and a 4-digit PIN, stored only as a scrambled one-way code.
• The class you joined and the date you agreed to these Terms.
• Your research question, syllabus topic, stage and group name.
• Your notebook entries: notes, raw data, pilot results, AI use declarations, draft word counts and the photos you upload, each with the time it was saved.
• Your final report, if you submit it for marking: its title, its text or PDF file, and your AI use declaration, with a copy of your notebook trail at the moment you submit.
• What you post in your class discussion: posts, answers to discussion questions, comments, likes, anything you report and any files you attach (images, PDFs and Word documents of up to 10 MB each, at most 3 per post). If you edit a post within 5 minutes, the original stays visible to your teacher. For a discussion question, LabCauldron counts whether you wrote your own post and replied to two classmates (the "1 + 2" task), so you and your teacher can see your progress.
• Private notes you exchange with your teacher. They are dated, cannot be edited or deleted, and appear in your authorship record.
• The options you choose in the idea engine and any "what interests me" text you type, so suggestions can be reused instead of generated again.

We do not ask students for an email address, date of birth, address, phone number or full name, and we ask everyone not to enter them.

Security information

To stop people guessing passwords and PINs, we keep a short-lived count of failed sign-in and password-reset attempts, linked to the email address or class and name tried, or to the network address used. Our hosting provider keeps standard server logs (IP address, browser type, pages requested and times) to deliver the Service and protect it from abuse.

On your device

The app keeps a sign-in token in your browser's (or the mobile app's) local storage so you stay signed in. It also remembers convenience settings such as the last class code and first name you used, the class you last opened and your topic filters. Signing out removes the sign-in token; clearing the site's data removes the rest. LabCauldron does not use cookies.

3. How we use information

Email. LabCauldron does not send email yet. When it is switched on, it will email teachers only: a welcome note, password-reset links, and an optional short morning summary of anything that needs them, which teachers can turn off. We will never email students or send marketing.

We use information only to run LabCauldron for the class it belongs to: to sign you in, show notebooks and class overviews, raise follow-up flags for the teacher (for example, no entries for a week or a very large jump in a draft's word count), build authorship records and moderation notes, keep the Service secure and fix problems. We do not use student information for advertising, to build profiles for any non-educational purpose, or to train AI models. We never sell it or share it with AI companies for training.

AI marking. When a teacher runs the AI examiner on a submitted report, LabCauldron sends the report's title and text (or its PDF file), with the official marking criteria, to Anthropic's Claude model. It returns suggested marks for each part of each criterion, with quoted evidence. Only teachers can start it; students never chat with the AI. The marks are suggestions: the teachers decide and agree the final marks. Under Anthropic's commercial terms, Anthropic may not train its models on this content. Students should keep their full name out of the report text.

Moderation cases. Once both teachers have marked a moderation case, LabCauldron sends the case's criteria, rubric and the student work file to Claude for suggested marks with reasons. It never sends the student's name. The suggestion is shown beside the two teachers' marks for comparison; the teachers' agreed grade is the final one. The same Anthropic terms apply: no training on this content.

Idea suggestions and the task builder. The idea engine sends Claude only the class's subject, the chosen syllabus topics and investigation type, the lab kit and any "what interests me" text (up to 200 characters); it never sends names, notebook entries or reports. The task builder, which only teachers use, sends the rubric the teacher provides and their task details. No student information is involved in either. Private notes, class discussion and discussion attachments are never sent to the AI.

4. Who can see it

• Students see their own notebook, their class's deadlines and lab kit, and the marks and feedback on their report once their teacher releases them. They cannot see other students' notebooks or reports.
• Classmates see their class's discussion: posts, comments, likes and first names. A shared feedback post shows the agreed marks and the released feedback, never the report itself. A student can un-share it at any time; their teacher can still see it.
• Teachers see only the classes they created and the students and notebooks in them. A colleague invited as second marker sees only the reports assigned to them, each with its notebook trail, never private notes.
• Private notes are seen only by the student and their class teacher.
• Discussion attachments are seen only by the members of that class: the teacher and classmates. Files on a post the teacher has hidden are seen only by the teacher.
• Moderation cases are seen only by the teacher who created the case and the second teacher they add. Students never see them. If the creator turns on anonymise, the second teacher does not see the student's name until the final grade is saved.
• Us. Webtronaut Innovations, LLC can access the database only to provide support, keep the Service secure and running, and comply with the law.
• Service providers who host the Service for us: Vercel, Inc. (website and server), Neon, Inc. (database, through Vercel), Anthropic, PBC (AI-suggested marks, only when a teacher runs the AI examiner or both teachers have marked a moderation case) and Google LLC (Google Workspace, for sending teacher emails, and Google Analytics for visit counts). They process information only to provide their services to us. The pages load fonts from Google Fonts, so Google receives your IP address and browser details when a page loads.
• Legal reasons. We may disclose information if the law requires it, or to protect the safety, rights or property of users or the LabCauldron Parties.

We do not sell personal information and do not share it for cross-context behavioural advertising.

5. Notebook entries are permanent

Once saved, a notebook entry and its time cannot be edited by anyone, including the student, the teacher and us. That is what makes the authorship record trustworthy. Entries are removed only when the student's account, the class or the teacher's account is deleted.

6. Deleting information

• Students can delete their account from the Account page (PIN required). This deletes their notebook, photos, submitted reports, private notes and their posts and comments in the class discussion, with any files attached to them.
• Teachers can remove any student from their class, delete a class (which deletes every student account, notebook, photo, submitted report, discussion post with its attached files, and calibration report in it) or delete their own account, which deletes all of their classes and every moderation case they created, with its file, marks and notes. A teacher can remove any file attached in their class.
• Moderation cases can be deleted by the teacher who created them; the student work file is deleted with the case.
• Deletion takes effect immediately in the live database. Our database provider keeps automatic backups for a short period for disaster recovery, after which deleted information is gone from them too.
• Schools can also ask us to delete their information using the contact details below.

7. How long we keep information

We keep accounts and notebooks until they are deleted as described above. If LabCauldron stops operating, we will give notice where we reasonably can so that teachers can copy their records, and then delete the database. Failed sign-in counts are reset after 15 minutes of inactivity or a successful sign-in.

8. Schools, students and the law

LabCauldron is meant for IB Diploma Programme students, who are usually 16 to 19, using it under their teacher's direction. Teachers confirm that their school allows them to use it. We follow the laws that apply to us, including the US Family Educational Rights and Privacy Act (FERPA), California's Student Online Personal Information Protection Act (SOPIPA) and Consumer Privacy Act (CCPA), and the EU and UK GDPR for schools in those regions. Schools that need a written data processing agreement can ask us for one.

9. Children

The Service is not directed at children under 13, and they may not use it. We do not knowingly collect information from a child under 13; if we learn that we have, we will delete it.

10. Your rights

Depending on where you live, you may have the right to know what personal information we hold about you, to correct it, to delete it, to receive a copy, and to object to or restrict how it is used. Most of this you can do yourself: the app shows everything in your notebook, the authorship record gives you a copy, and you can delete your account at any time. Students should usually ask their teacher first, because the school controls their class.

• California residents may request to know, delete or correct personal information, and to opt out of its sale or sharing. We do not sell or share personal information. We will not discriminate against you for using these rights.
• People in the EU, EEA or UK may also object to processing, request restriction or portability, and complain to their data protection authority.

11. Security

Information travels over encrypted connections (HTTPS) and is stored with our database provider, which encrypts it at rest. Passwords and PINs are stored only as scrambled one-way codes. Each request is checked so that people can reach only their own classes and notebooks, and repeated wrong sign-in attempts are blocked for 15 minutes. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your information, we will notify the affected schools and users as the law requires.

12. Where information is stored

LabCauldron is hosted in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States.

13. Do Not Track and Global Privacy Control

We do not track you across websites, so Do Not Track and Global Privacy Control signals do not change how the Service works. There is nothing to opt out of.

14. Changes to this policy

We will post any changes on this page with a new effective date. If a change affects how we handle personal information in a significant way, we will give notice in the app before it takes effect.

15. Contact

Students: please speak to your teacher first; they manage your class and can reset your PIN or remove your account. Teachers, schools and everyone else can email anamanis.k@gmail.com, or reach Webtronaut Innovations, LLC through webtronaut.com.