If the platform is free, what is the business model?

A tool is free to you, but it is not free to run: servers, engineers, and support cost money every month. Most companies offering something to students and families at no charge are running an honest, ordinary plan, giving a tool away today to build a paid product tomorrow. This piece is not about treating "free" as suspicious. It is about telling which funding model you are looking at, since the policy usually shows you.

Where the free version actually pays for itself

The most common model is simple: a free tier for individual teachers, and a paid tier for a school or district that wants more seats, storage, or admin controls. The free users are the sales funnel, a marketing term for the path that turns a casual user into a paying customer. A teacher who likes the free version becomes the reason a district signs a contract. A policy built around this model usually says plainly what the paid tier adds.

A second model runs on advertising, or ad measurement, the data collected to show that an ad reached the right person and worked. A platform that shows ads, or shares data with an ad network to measure them, is monetizing attention rather than a subscription. For a platform serving students this draws the most scrutiny, since children's data carries extra legal protection. The Edmodo matter below shows what that scrutiny looks like in practice.

A third model runs on partnerships: a platform refers users to another company's product, a tutoring service or a test-prep course, for a fee per referral or signup. The referral itself is not evidence of anything improper; plenty of ordinary businesses run this way. What matters for a family is whether the policy discloses these arrangements and what information passes to the partner.

A fourth model sells "insights": a data product built by aggregating what many users do on a platform, then selling that analysis to schools, employers, or researchers. Aggregating usage patterns across thousands of accounts differs from selling one child's individual record, and the difference matters. The question is not whether aggregation happened, but whether a student's own history is a raw ingredient in what gets sold.

A fifth pattern is not really a model yet: a platform runs on investor funding while the company works out how it will eventually make money. That is normal early-stage behavior, not a sign of hidden intent. The quiet risk is what happens later, when a pivot or an acquisition forces the question, and the answer can reprice data collected under the old, undecided policy. The bankruptcy clause explainer covers what a change in ownership can mean for records already on file.

When enforcement has actually landed: Edmodo

Free classroom platforms are not just a hypothetical case. In 2023, the FTC alleged that Edmodo, LLC, a classroom platform with a free tier used by teachers and students, collected children's data without verifiable parental consent, used it for advertising in violation of the Children's Online Privacy Protection Act (COPPA), and unlawfully outsourced COPPA compliance to schools. The matter ended in a stipulated order, a settlement with the force of law once signed by a court, barring Edmodo from using children's data for advertising and from relying on schools for parental consent. The lesson is not that free classroom tools are risky; it is that "free plus a vague data-use policy" is where enforcement has actually landed.

When a paid platform turns free, it is worth another look

Here is one observation, and it is personal rather than a general rule: when an established platform that used to charge a subscription switches to a free tier, that is a good moment to reread its privacy policy. The switch does not signal wrongdoing, but a business model change and a policy change tend to happen together, and they are not always announced in the same breath.

What to ask

Three questions help sort out which model a platform is actually running, whatever it calls itself.

What does the company sell, and to whom? A subscription tier, an advertiser's access to attention, a referral fee, and a data product are different answers, and an honest policy usually names at least one.

Is any part of what is sold derived from student data itself, rather than statistics that cannot be traced to a person? This separates an ordinary business model from one built on children's records.

Does the policy say what happens to this arrangement if the company is acquired or changes its model? Answering that in advance tells you more than staying silent until it matters.

Four pipes leave the back of a free storefront A storefront labeled FREE sits on the left. Four pipes exit its back wall, each running to a labeled box on the right: paid tier, ads or measurement, partnerships, and data products. Each pipe has a valve marked with a question mark and the words policy says, showing that whether each pipe is actually open, and how wide, is a question the privacy policy answers rather than the storefront's free sign. Free has to pay for itself somewhere FREE storefront ? policy says? ? policy says? ? policy says? ? policy says? paid tier ads / measurement partnerships data products the sign says free; the policy says which pipes are open, and how wide

The practical takeaway

A free platform is not automatically a red flag; most run an honest business, giving away access today to sell something else tomorrow. The work for your practice is figuring out which "something else" a platform is selling, and whether any of it comes from a student's own record rather than data that cannot be traced back to a person.

The checklist walks through this question alongside the rest of what a policy should disclose. Two related reads: what changes when a platform is acquired or folds, and what a promise to never sell your data does and does not cover.

Bring this to your next vendor demo: the full checklist.