MetaPet Schools Security Controls Summary
Current controls
Alias-based classroom setup instead of student accounts
Local device storage for routine classroom use
School-only route allowlist
Teacher deletion controls for local school data
Short retention expectation for pilot data
Current non-goals
No public social features
No student login recovery flow
No open chat
No hidden adtech or upsell prompts in the school runtime
Review tasks before pilot
Confirm the actual hosting environment
Confirm the school route allowlist in the deployment
Confirm local deletion controls
Confirm exported evidence stays teacher-controlled