School IT & Safeguarding Technical Specification

Product: ShowTell by Amber • Target: K–12 & Early Childhood Education

COPPA, FERPA & GDPR-K Compliant • Zero Cloud Data Collection

1. Executive Summary & Security Philosophy

ShowTell by Amber is an offline, tactile visual whiteboard and audio recording iOS application engineered specifically for classroom station learning. The application does not require student user accounts, passwords, email addresses, or continuous internet connectivity. All image processing, drawing, audio narration recording, and video synthesis occur strictly on the local device.

2. Data Privacy & Regulatory Compliance Matrix

Regulation / Standard	Compliance Status	Technical Architectural Justification
COPPA (Children’s Online Privacy Protection Act)	Compliant	Zero personal identifiers (PII), persistent device identifiers, or biometric profiles are harvested, stored, or transmitted.
FERPA (Family Educational Rights and Privacy Act)	Compliant	Student work is stored exclusively in the local iPad sandbox. No third-party servers ever receive student records.
UK / EU GDPR-K	Compliant	Zero third-party trackers, analytics SDKs, or behavioral profiling tools are embedded in the application binary.
Apple Privacy Manifest (Spring 2024+)	Verified	Application bundles an explicit `PrivacyInfo.xcprivacy` declaring zero tracking domains and standard `CA92.1` UserDefaults sandbox usage.

3. Network Requirements & Firewall Rules

ShowTell requires zero inbound or outbound network access during standard instructional runtime:

Operating Mode: 100% Offline Capable. iPads in airplane mode or segmented on non-internet VLANs function with full feature parity.
In-App Purchase / License Validation: Managed entirely through Apple's native App Store / Apple School Manager daemon (storekitd). No custom school proxy whitelist exceptions are required.
External Telemetry / Ads: None. No calls to Firebase, Google Analytics, Mixpanel, Facebook SDK, or ad networks.

4. Device Permissions & Sandbox Storage

Hardware Permission	Usage Purpose	Security Boundaries
Microphone (AVAudioSession)	Allows students to record audio narration while drawing on the digital canvas.	Audio is recorded to local AAC/M4A temp files inside the app sandbox. Never streamed externally.
Camera (AVCaptureSession)	Allows students to photograph classroom worksheets, science specimens, or physical art.	Frames are captured locally and placed on the drawing layer. No facial recognition or biometric analysis.
Photo Library Add	Enables saving exported MP4 videos and PNG diagrams directly to Camera Roll.	Requires teacher-configured parental gate before saving to device camera roll.

5. Parental & Teacher Gate Architecture

Built-in Guardrails: Any interaction that prompts an external action—such as opening a system sharing sheet (AirDrop), accessing grown-ups configuration, or viewing in-app purchase options—is immediately intercepted by a randomized two-digit multiplication challenge (e.g., “What is 7 × 8?”). This prevents accidental student tampering during independent workstation time.

6. Apple School Manager & MDM Deployment

Bundle Identifier: com.sethideclercq.ShowTellByAmber
Supported Operating Systems: iPadOS 16.0+, iOS 16.0+ (Universal binary)
Volume Purchase Program (VPP): 50% discount automatically applied in Apple School Manager for volume purchases of 20+ licenses.
Supported MDM Engines: Jamf School / Jamf Pro, Mosyle Manager, Microsoft Intune, Cisco Meraki, Apple Configurator 2.
Shared iPad Deployment: Fully supported. No user login session states or credential tokens required.