Last Updated: May 9, 2026
Mosaic Instructional Planning LLC ("Mosaic IP," "we," "us," or "our") operates Tangram, an AI-powered lesson personalization engine for K–12 teachers. This Privacy Policy describes how we collect, use, and protect information when you use our website, application, and services (the "Service").
When you create an account, we collect your name, email address, school or district affiliation (optional), grade level(s) taught, and subject area(s). If you sign in using a third-party service such as Google, we receive your name and email address from that provider.
When you purchase a subscription, payment is processed by Stripe, Inc. ("Stripe"). Tangram does not directly collect, store, or process your credit card number or financial account information. Stripe handles all payment data in accordance with PCI-DSS standards. We receive from Stripe your subscription status, billing history, and a tokenized payment reference.
When you use the Platform, we collect the information you provide to build lessons, including selected standards, pedagogical frameworks, class-level student context (such as "8 ELLs in Period 3" or "4 students with IEPs"), lesson modifications, and other instructional inputs. The Platform is designed so that Teachers provide class-level context rather than individually identifiable student information. We strongly discourage the input of individual student names, identification numbers, or other personally identifiable student records.
We automatically collect information about your use of the Services, including IP address, browser type, operating system, device information, pages visited, features used, lesson creation and sharing activity, timestamps, and referring URLs.
We use cookies and similar technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookies through your browser settings, but disabling certain cookies may limit your ability to use the Platform.
When you contact us at team@gettangram.com, we retain the content of your communications for support and record-keeping purposes.
We use the information we collect to:
We share information with the following categories of service providers:
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
When you generate a student-facing share link for a Lesson, the content of that Lesson is viewable by anyone with the link without requiring a Tangram account. The student-facing view automatically filters out teacher-facing content (such as Teacher Notes, Answer Keys, instructional rationale, and personalization metadata) before display. Student-facing share links include Tangram branding but do not display your name, email, or account information to viewers.
When you invite collaborators to a Lesson, those collaborators must have a Tangram account. Collaborators will see the full editable content of the shared Lesson, including teacher-facing materials, and may see your display name within the collaboration interface.
You are solely responsible for ensuring that Lessons you share do not contain sensitive, confidential, or personally identifiable student information, regardless of the share type.
Tangram is designed so that Teachers input class-level context rather than individual student records. We do not require or request individually identifiable student information such as student names, student ID numbers, Social Security numbers, or other information that would constitute "education records" under the Family Educational Rights and Privacy Act (FERPA).
To the extent that any information submitted to the Platform constitutes education records under FERPA, Tangram will treat such information in accordance with FERPA requirements and will act as a "school official" with a "legitimate educational interest" as defined by FERPA. We will not disclose education records except as permitted by FERPA or as directed by the applicable Educational Institution.
The Platform is designed for use by adult educators and administrators. The Platform is not directed at children under 13, and we do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
We retain your account information and lesson data for as long as your account is active or as needed to provide the Services. If you request account deletion, we will delete your personal information and lesson data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms).
De-identified and aggregated data may be retained indefinitely for product improvement and educational research purposes.
We implement reasonable technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure authentication, and access controls limiting who can access your data within our organization. Our hosting infrastructure is provided by Railway, which maintains SOC 2 Type II certification for its platform.
However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials and for restricting access to your devices.
You may access and update your account information at any time through your account settings or by contacting team@gettangram.com.
You may request deletion of your account and associated personal data by contacting team@gettangram.com. We will process your request within 30 days.
You may opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting team@gettangram.com. Transactional emails (billing receipts, security alerts, account notifications) will continue regardless of your marketing preferences.
You may control cookies through your browser settings. Disabling certain cookies may limit the functionality of the Platform.
If you are a resident of California, Virginia, Colorado, Connecticut, or other states with comprehensive privacy laws, you may have additional rights regarding your personal information, including the right to know what information we collect, the right to delete your information, and the right to opt out of certain data sharing. Contact us at team@gettangram.com to exercise any applicable rights.
Tangram integrates with Google APIs to enable account sign-in, lesson export to Google Docs and Google Slides, and Google Calendar integration. This section describes specifically how we access, use, store, and share data obtained through Google API Services, in compliance with the Google API Services User Data Policy.
Tangram requests the following Google OAuth scopes:
Google account data (name and email) is used solely to authenticate your Tangram account and personalize your experience. Lesson content exported via the drive.file scope is written directly to Google Drive at your direction and is not stored separately by Tangram beyond what already exists in your Tangram account. Calendar events created via the calendar.events scope are generated at your request and contain only the lesson planning information you choose to add.
Data obtained through Google API Services is not shared with any third party except as necessary to operate the Service (e.g., our hosting provider, Railway). We do not share Google user data with advertisers, data brokers, or any party for marketing purposes. We do not allow any employee or contractor to read Google user data unless required to provide the Service or for security purposes, and only where the user has given explicit permission.
Your Google account information (name and email) is stored in our Railway-hosted PostgreSQL database, protected by encryption in transit (TLS) and access controls. OAuth tokens required to interact with Google Drive and Google Calendar are stored securely and used only to fulfill the specific actions you initiate within the Platform.
Google account data is retained for as long as your Tangram account is active. OAuth tokens are refreshed as needed and revoked upon account deletion or when you disconnect your Google account. To revoke Tangram's access to your Google account at any time, visit myaccount.google.com/permissions. To request full account deletion, contact team@gettangram.com and we will process your request within 30 days.
Tangram does not use any data obtained through Google API Services to train AI or machine learning models. Google user data is used exclusively to provide and improve the features you have explicitly enabled within the Platform.
We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users and posted on our website at least thirty (30) days before taking effect.
Your continued use of the Service after the effective date of an updated Privacy Policy constitutes your acceptance of the changes.
If you have questions about this Privacy Policy, your data, or your rights, contact us at:
Email: team@gettangram.com
Mosaic Instructional Planning LLC