Privacy Policy
Last updated: September 2026
This Privacy Policy explains how Floral Gray ("we", "us") collects, uses, and protects information through our learning management platform apps, including Prototype LMS (each an "App"), available on Android, Windows, and the web.
Each App is deployed for a specific educational institution or business ("the Institution") that has licensed our platform. The Institution controls who is enrolled and what content is made available; we operate the technical infrastructure on the Institution's behalf.
Information We Collect
- Account information — name, email address or username, and role (student, faculty, or administrator), provided by you or your Institution when your account is created.
- Device information — device type, device model, a device identifier, and app version, used to enforce your Institution's device-limit and security policies.
- Location information — an approximate location (derived from IP address) at login, used only where your Institution has enabled a location-based access policy (for example, flagging logins from unexpected countries).
- Usage and learning activity — course and lesson progress, video watch time and playback position, completed lessons, and certificates issued.
- Messages — content of messages you send through the App's built-in chat with faculty, students, or administrators.
- Content you upload — for faculty and administrator accounts, course materials, videos, documents, and thumbnails uploaded to the platform.
- Push notification tokens — used to deliver notifications about course updates, messages, and announcements.
- Login activity — timestamps, device type, and IP address of sign-ins, used for account security and to enforce device limits.
How We Use Information
- To operate the App: authenticate accounts, deliver course content, track progress, and enable messaging.
- To enforce security settings your Institution has configured, such as per-device login limits and location-based access policies.
- To send notifications about course activity, messages, and announcements.
- To maintain and improve the reliability and security of the platform.
We do not sell personal information to third parties, and we do not use it for advertising.
Data Storage and Sharing
Each Institution's data is stored in its own isolated backend — data is not pooled across different Institutions' deployments.
Data Security
Data is encrypted in transit using HTTPS/TLS. Passwords are stored using industry-standard one-way hashing and are never stored or transmitted in plain text. Authentication tokens are stored securely on-device using the operating system's secure storage facilities.
Data Retention and Deletion
Account information is retained for as long as your account remains active with your Institution. To request deletion of your account or personal information, contact your Institution's administrator, or email us directly at [email protected] and we will coordinate with your Institution.
Children's Privacy
Our Apps are provided to students through their educational Institution, which is responsible for obtaining any legally required parental or guardian consent for students under the applicable age of digital consent in their jurisdiction. We do not knowingly collect personal information directly from children outside of this Institution-managed enrollment process, and we do not use student data for advertising.
Your Rights
Depending on your location, you may have rights to access, correct, or delete your personal information. Requests should be directed to your Institution in the first instance, as they control enrollment and account data; you may also contact us directly at [email protected].
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Contact Us
Questions about this Privacy Policy can be sent to [email protected].