Khanmigo and Student Data Privacy: What Teachers Should Know
Khanmigo is free for verified US K-12 teachers through a 2024 Microsoft partnership, and Khan Academy states in its own privacy materials that it does not sell student data and restricts its AI model providers from training on student conversations. That written commitment is a real signal, but it is not a government certification, and it only protects a specific classroom once the underlying agreement is actually in place.
Quick Answer: Confirm your Khanmigo account came through your district's verified rollout rather than a personal signup, keep prompts general instead of naming a specific struggling student, know who at your school reviews flagged chat alerts, and send a short parent notice before students start using it. The legal FERPA/COPPA question is a separate topic, covered in full in the pillar guide linked below.
Sal Khan has publicly stated that data collected through Khanmigo will not be sold and is used internally only to improve the system, a commitment that shows up across Khan Academy's own help-center documentation. That is a meaningfully different starting point than many classroom AI tools, since Khan Academy operates as a nonprofit rather than a company monetizing student attention or ad targeting.
None of that removes the daily judgment calls a teacher still has to make. This article is the practical companion to the legal question, not a restatement of it: what to actually type, what to check before rollout, and how to talk to parents about a tool most of them have never heard explained plainly.
What Khan Academy Actually Says About Khanmigo and Student Data
Khan Academy's own Data Protection Agreements assert FERPA, COPPA, and PPRA compliance for districts that sign one, and its help-center materials describe chat logs as visible to a connected adult, not fully private between the student and the AI. Reading that structure closely changes what "privacy" means in the context of a tutoring chat.
The Nonprofit Framing, and Where It Matters
Khan Academy's status as a nonprofit shapes its own stated incentive structure: there is no advertising business model sitting behind Khanmigo the way there might be for a free consumer app. That does not eliminate data-handling questions, but it does remove one common source of them, since a nonprofit has less obvious reason to monetize a chat transcript.
Sal Khan's stated no-sale commitment (Khan Academy, various public statements and help-center documentation) is a real, citable claim from the organization itself. It is still a self-description rather than an outside audit, which matters for the same reason it matters with every AI vendor: a district's signed Data Protection Agreement is what actually makes the promise enforceable, not the help-center page alone.
The Microsoft Partnership and Where a Conversation Actually Goes
Khan Academy's free-for-teachers Khanmigo access runs through a partnership with Microsoft announced in 2024, and the underlying AI model is hosted through Microsoft's Azure OpenAI Service rather than a consumer-facing chatbot interface. Microsoft's own published data-privacy documentation for Azure OpenAI states that customer prompts and completions are not used to improve Microsoft's or a third party's models without explicit permission (Microsoft, Azure OpenAI data-privacy documentation).
That hosting detail is not just technical trivia. It is the actual mechanism behind Khan Academy's own no-training claim, and it is worth asking your district's technology office to confirm in writing rather than assuming it from a marketing page:
- Which specific model or model family powers Khanmigo for your district's rollout.
- Whether the no-training commitment is written into your district's own signed agreement, not just Khan Academy's general public statements.
- Where flagged or moderated conversations are stored, and for how long.
- Whether the same terms apply identically to the free teacher tier and any paid parent/learner plan.
Setting Up Khanmigo the Right Way
A verified teacher account tied to your school email, not a personal signup with a private email address, is what actually puts a classroom's Khanmigo use under your district's data agreement. The distinction sounds bureaucratic, but it is the same "direct control" requirement that shows up across FERPA's school-official exception more broadly.
Free Verified Teacher Access vs a District Rollout
Khan Academy currently offers Khanmigo free to verified US K-12 teachers as part of the Microsoft partnership, which is a meaningfully different arrangement than a full district rollout coordinated through IT and legal. A single teacher's free account can start a class using Khanmigo quickly, sometimes faster than a formal district review can keep pace with.
That speed is exactly why it is worth pausing before rostering an entire class. A teacher-level free account is real and legitimate, but it is worth confirming with your school's technology office whether a broader, district-level agreement already exists, or should exist, before scaling beyond a single pilot group.
Parent and Learner Plans Change the Picture Slightly
Khan Academy also offers a separate paid Khanmigo plan aimed at families and independent learners, priced at roughly $4 per month or $44 per year. That plan sits outside a school's account structure entirely, since a parent purchasing it directly is not covered by the same district agreement a classroom rollout depends on.
If a student mentions using a personal, parent-purchased Khanmigo account at home, that is worth noting as a separate context from classroom use. The privacy terms a district negotiated for its own rollout do not automatically extend to a family's independent subscription.
What Data Khanmigo Actually Collects During a Session
A typical tutoring session can generate several distinct categories of information, and knowing them individually makes it easier to reason about what is actually sensitive:
- Roster and account data: name, grade level, and class assignment, typically synced through your school's existing student information system.
- Chat transcript content: everything a student types to Khanmigo and everything Khanmigo responds with, across a session.
- Usage and progress metadata: which lessons or subjects a student engaged with, session length, and completion patterns.
- Flagged-content records: any message the moderation system identifies as concerning, retained for a teacher's or parent's review.
Chat Logs and the "Connected Adult" Visibility Model
Khanmigo's design assumes a teacher or parent can see a student's chat history, which is a deliberate safety choice rather than an oversight. Khan Academy's own help-center materials describe this visibility as core to how the product handles concerning content, including messages related to self-harm or bullying.
That means a student's conversation with Khanmigo is closer in spirit to a monitored classroom activity than a private diary. Teaching students that distinction explicitly, once, at the start of a unit, avoids the awkward moment where a student assumes a chat is fully private and later finds out otherwise.
Why the Underlying Model Provider Still Matters
A teacher does not need to personally audit Microsoft's or OpenAI's infrastructure, but knowing that layer exists changes one practical thing: a no-training promise is only as strong as whether it explicitly covers the model provider, not just Khan Academy's own product layer. This is the same subprocessor question that comes up with nearly every classroom AI tool, and it is worth asking your district's technology office to confirm rather than assuming from a help-center page.
A few specific questions are worth routing to whoever manages your district's edtech contracts:
- Does the written agreement name the model provider explicitly, rather than describing the AI layer only in general terms?
- Is the no-training commitment identical for the free teacher tier and the paid parent/learner plan, or does it differ by product tier?
- What happens to a flagged conversation once it leaves the moderation queue, including how long it is retained and who can request its deletion?
- Does your state layer on additional requirements beyond FERPA and COPPA, the way California's SOPIPA or Illinois's SOPPA do for other AI tools?
None of these questions require a teacher to become a contracts expert. They exist so a five-minute conversation with your school's technology lead replaces a guess with a documented answer, the same standard this guide applies to every other classroom AI tool.
What to Type Into Khanmigo, and What to Leave Out
A workable classroom rule: describe a struggling concept generally rather than describing a specific student's personal situation, even when Khanmigo's tutoring mode is set up to feel conversational. The table below breaks that rule into specific situations a teacher is likely to actually hit.
| Situation | Prefer | Avoid |
|---|---|---|
| Setting up a tutoring session for a specific student | First name only, or a generic "a 5th grade student working on fractions" framing | Full name paired with disability status, IEP details, or behavioral history |
| A student asking for writing help on a personal-narrative assignment | A general prompt about the writing skill itself ("help me structure three paragraphs") | Typing out a specific real family situation in full detail |
| Using Khanmigo's teaching-assistant mode to draft feedback | Skill-level language ("this response needs a clearer topic sentence") | Comparing one named student's work to another named student's work |
| Logging a concern about a student's progress | A note kept in your own gradebook or SIS | Typing a formal behavioral or medical concern directly into a chat prompt |
Teach Students the Boundary Too
Students benefit from a version of the same rule, phrased simply: turn a personal situation into a general example before typing it in. A student asking Khanmigo for help with a personal essay can describe "a character going through a hard family situation" instead of naming the real event in detail, a habit worth modeling once explicitly rather than assuming students infer it on their own.
Talking to Parents About Khanmigo
A short, plain-language notice before rollout accomplishes more for trust than any privacy page a parent is unlikely to read on their own. Common Sense Media's 2025 family research found that a large majority of parents reported their child's school had not communicated with them about generative AI use at all (Common Sense Media, 2025), a gap that applies just as much to an AI tutor as to any other classroom AI tool.
A useful notice covers four specific things:
- What the tool is and why your class is using it: name Khanmigo specifically, and describe the kind of tutoring or practice it supports.
- What data it collects: chat content, progress data, and any flagged-content records, named plainly rather than left vague.
- Who can see a flagged conversation: name the actual role, whether that's you as the classroom teacher, a counselor, or an administrator.
- How consent is being handled: state that the district or school is consenting on the family's behalf for a specific educational purpose, rather than assuming parents already understand that pathway.
A short version might read: "Our class is starting to use Khanmigo, Khan Academy's free AI tutor, for extra math practice this month. It records chat text so I can review how students are progressing and so any concerning message gets flagged for review. Our school has approved this use for this educational purpose; reach out any time if you have questions about what's collected."
When a Parent Asks Something You Cannot Answer
Some questions genuinely belong with your school's technology office rather than with you. If a parent asks specifically about how long chat logs are retained, whether Khanmigo's model provider trains on district data, or how to formally request deletion, the honest response is to say so and route the question, rather than guessing at an answer you are not certain of.
A Practical Rollout Plan
Turning the guidance above into an actual sequence keeps a first classroom rollout from becoming overwhelming.
| Phase | Action | Who's involved |
|---|---|---|
| Before week 1 | Confirm your account is a verified teacher account tied to district email; check whether a broader district agreement exists | Teacher + IT |
| Week 1 | Send the parent notice; try a handful of sample prompts yourself before students see the tool | Teacher |
| Weeks 2-3 | Run a small pilot, one subject or one class period, and check flagged-alert notifications daily | Teacher |
| End of pilot | Review any flagged alerts and gather quick, informal student feedback | Teacher + counselor if alerts occurred |
| Before scaling up | Confirm which staff roles can see flagged conversations before rostering additional classes | Teacher + admin |
Say you teach a 6th grade math class and want to try Khanmigo for guided practice on fractions before using it across your whole course load. Piloting it with one class period for two weeks, checking flagged alerts daily, and only then expanding gives a realistic read on how your specific students actually use it before more students are involved.
Pro Tips for Staying Ahead of Privacy Issues
- Revisit account settings once a term, not only at initial rollout, since Khan Academy's own free-teacher-access terms and district agreements can be updated without a classroom-level announcement reaching you directly.
- Keep your own simple log of flagged alerts and how you responded, useful for your own reference and potentially relevant if a parent or administrator later asks about a specific incident.
- Name your school's actual privacy contact, not just "IT," so there is a specific person to route a genuinely new question to.
- Treat a Khanmigo-generated response the same way you would any other student work product for storage and sharing purposes; do not post a full transcript publicly without the review you would give any other classroom material.
Teachers weighing an open-ended AI tutor against a more structured content-generation approach have another option worth knowing about. EduGenius lets a teacher build quizzes, worksheets, and review materials directly from a class profile the teacher configures, without requiring any student to type into a live chat interface at all. That is not a substitute for the interactive tutoring Khanmigo is built for, but for assignments where a real-time AI conversation is not actually the point, it sidesteps several of the questions above entirely.
The same day-to-day habits apply well beyond one specific AI tutor. Diffit and Student Data Privacy: What Teachers Should Know walks through an equivalent guide for a differentiation-focused tool, and if your school is also weighing Khanmigo against a broader classroom AI assistant, SchoolAI vs Khanmigo: Which Is Better for Teachers? breaks down the feature-level differences directly.
What to Avoid
- Rostering a full class through a personal, non-verified signup. It skips whatever district-level review already exists, or should exist, before a tool touches identifiable student data at scale.
- Typing more identifying detail into a prompt than the tutoring session actually needs. If a first name accomplishes the same instructional goal as a full name plus behavioral history, use the smaller amount.
- Assuming a parent notice is optional because the school has technically consented already. Legally sufficient and actually informative are different bars, and the second one is what closes the communication gap the research keeps identifying.
- Letting a flagged-content alert sit unread. The entire safety design depends on a human actually seeing and acting on it, not on the alert existing in a dashboard nobody checks.
If your school is separately weighing other AI tools against similar questions, Is Microsoft Copilot COPPA Compliant? and Is GPTZero COPPA Compliant? cover the same category of question for two very different tools, and Is Google Classroom Safe for Students? covers the platform many districts run Khanmigo alongside.
Key Takeaways
- Khanmigo is free for verified US K-12 teachers through a 2024 Microsoft partnership, hosted via Azure OpenAI Service rather than a consumer chatbot interface.
- Khan Academy states it does not sell student data and restricts its AI model providers from training on student conversations, a real but self-attested claim, not a government certification.
- Chat logs are designed to be visible to a connected adult, not fully private between a student and the AI, which is a deliberate safety feature worth explaining to students directly.
- A verified, district-linked teacher account, not a personal signup, is what puts classroom use under an actual data agreement.
- A short parent notice before rollout closes a real communication gap: most families report schools have not explained generative AI use to them at all (Common Sense Media, 2025).
- A phased rollout, small pilot before full-class use, with daily flagged-alert checks, catches problems before they scale.
- The legal FERPA/COPPA question sits separately from this practical guide; the full breakdown lives in the pillar guide linked below.
Frequently Asked Questions
Is Khanmigo free for teachers?
Yes. Khan Academy offers Khanmigo free to verified US K-12 teachers through a partnership with Microsoft that launched in 2024. A separate paid plan, roughly $4 per month or $44 per year, exists for parents and independent learners outside a school's account structure.
Does Khan Academy sell student data collected through Khanmigo?
Khan Academy states it does not sell student data and that data collected is used internally to improve the product, a commitment reflected across its own help-center documentation and public statements. That is a self-attested claim rather than a third-party audit, so a district's signed agreement is what makes it enforceable.
Can a parent or teacher see a student's Khanmigo chat history?
Yes, by design. Khan Academy's help-center materials describe chat logs as visible to a connected adult, part of how the moderation system handles concerning content like references to self-harm or bullying. Students should be told this directly rather than assuming a tutoring chat is private.
What should I avoid typing into a Khanmigo session?
Avoid pairing a student's full name with disability status, IEP details, or a specific real family situation described in detail. A first name alone, or a generalized version of a sensitive scenario, usually accomplishes the same instructional goal with meaningfully less exposure.
Does Khanmigo's no-training promise cover the underlying AI model too?
Khan Academy's own statements describe a no-training commitment at the product level, and its Microsoft partnership routes the model through Azure OpenAI Service, which Microsoft states does not use customer prompts to train models without explicit permission. Confirm with your district whether that commitment is written into your specific signed agreement rather than relying on the general public statement alone.
Is a district-wide Khanmigo rollout different from one teacher's free account?
Yes. A single verified teacher account is real and legitimate on its own, but a district-wide rollout typically involves a separate, formal agreement between the district and Khan Academy that spells out data handling terms in writing. If you are only using a personal free account, it is worth checking with your school's technology office about whether a broader agreement already exists before expanding beyond a small pilot.