integrity and privacy

a record that’s true, and stays private.

Every entry is witnessed, named and chained to the one before. Nobody can quietly change it, and children’s data is never made public.

“a proper system where nobody can touch it.”
Mohanji’s one technical requirement

today’s fingerprint

✓ anchored · nothing changed

a fingerprint only, never the data

the record

written once, kept honest

A child’s record should be true, belong to the child, and let a bad day be made right. Four things keep it that way.

  1. 01

    written once

    Entries are never edited. A correction is a new entry that says so, and the family can close it.

  2. 02

    chained

    Each entry carries a fingerprint of the one before it, so a hidden change would break the chain.

  3. 03

    named

    Every entry names the staff member who made it. Tampering is visible, and costs that person the right to make entries.

  4. 04

    anchored every day

    Once a day, a fingerprint of the record, never the data itself, is timestamped by an independent public service anyone can check.

each entry holds the fingerprint of the one before:

  1. #10419c2e → 7f3a
  2. #10427f3a → b81d
  3. #1043b81d → 04ce
  4. #104404ce → e57b

check it yourself

you don’t have to take our word for it

Anyone can check that a school’s record hasn’t been changed, without seeing a single child’s data. School admins can check the whole chain with one click.

  1. 1

    open the school’s page

    Go to the verify page, or use the address the school shares with you.

  2. 2

    see today’s fingerprint

    Each school has a public page with the day’s fingerprint, and no child data.

  3. 3

    match it to the public record

    Check the fingerprint against the public timestamp it was written into. If they match, nothing changed.

verify a school’s record
anyone can check!
goodnessfactor.com/verifypublic page

Riverside Primary

today’s fingerprint7f3a·91c0·e4b2·0d6f
public timestampconfirmed
child data shownnone

✓ they match · nothing was changed

fair to every child

a bad day can always be made right

Restorative practice is built in. Counseling comes first, and the Four-Way Model guides every conversation.

“girls and boys, no change. no caste, country, nothing.”
Mohanji, on equal criteria
  • small deductions, always a way back

    Deductions stay small, and every one can be restored. Restoration returns exactly what was taken.

  • side by side in the record

    A deduction and its restoration sit together. Only the counselor and admin can see the note.

  • a person decides, never a machine

    Only the head of school can record a deduction, after a complaint is given and checked.

  • the same rules for every child

    One set of criteria for everyone. Admins can see who hasn’t been recognized in two weeks.

privacy

private by default, and by design

read the privacy policy →

🔒 who can see a child’s record

  • teachers✓
  • counselors✓
  • school admins✓
  • other families✕
  • the public✕
  • advertisers✕

Only staff have accounts. Children use a Goodness ID, never a login.

  • the school owns it

    We process it on the school’s behalf. It is never sold or used for advertising.

  • kept where the law wants it

    Hosted in the United States, or in the school’s own country when its law requires it.

  • each school kept apart

    Every school’s data is separated from every other school’s, down to the database.

  • no trackers, ever

    No analytics on any page that shows a child. No ads or trackers anywhere on the site.

  • yours to correct or remove

    Schools can correct, export, delete or de-identify a child’s record, answered within thirty days.

  • the strictest standard

    Built to the strictest of the laws it follows, including COPPA, FERPA, GDPR and India’s DPDP Act.

questions people ask

the honest answers

Something not covered here? We’re happy to talk it through.

contact us →
Is this surveillance?

No. Points come only from acts an accountable adult saw and chose to record. There are no cameras, no automatic scoring, and no analytics on any page that shows a child.

Will a bad day follow a child forever?

No. Deductions are small and private, shown in a neutral colour instead of a label, and every one can be restored. When the child makes it right the record says so.

Do children log in?

No. Only staff have accounts. Each child has a Goodness ID, not a login, and no personal information is collected directly from a child.

How is a mistake corrected?

With a new, named entry that says what changed, so the history stays honest and the current state is always clear.

What happens to a teacher who enters false acts?

Mohanji's rule: a teacher who tampers loses the credits and the right to enter. Every entry is attributed, so patterns are visible to the school's review.

Who owns the data?

The school, in whatever country it is. We process it on the school's behalf, host it today in the United States (or where the school's law requires, by agreement), and never sell it or use it for advertising.

Which privacy laws apply?

The program is built for schools anywhere, to the strictest of the children's privacy laws where our schools are: COPPA and FERPA in the United States, the GDPR in Europe and the United Kingdom, and India's Digital Personal Data Protection Act.

your school next?free for the pilot school

pilot with us

bring the goodness factor to your school

A full semester: every class, counseling first, teachers trained in half a day.

We only use this to reply about the pilot. It is never shared or added to a mailing list.