Salamanca High School AI Robot Assistant Raises Key Privacy Questions

Salamanca High School AI Robot Assistant Raises Key Privacy Questions

A humanoid robot named Sally is scheduled to greet students at Salamanca High School in Western New York this fall, making the Salamanca City Central School District one of the first in the country to place a humanoid robot in a K-12 classroom. The purchase is done. The public record on data governance, evaluation design, and community input is not.

The district approved a $57,590 contract with Toronto-based Realbotix covering both the physical robot and a student-facing AI avatar accessible on laptops, discounted from a listed starting price of $95,000, The 74 reported last week. Salamanca serves roughly 1,300 students, 79% of whom are economically disadvantaged and 32% of whom identify as American Indian or Alaska Native. It is the only incorporated U.S. city located entirely within a Native American reservation. Federal guidance issued last year explicitly encouraged schools to use grant funds for AI-based tutoring and instructional tools, but also emphasized that engaging parents and affected stakeholders should guide deployment decisions, per the U.S. Department of Education.

The unresolved questions in Salamanca are the same ones every district will face as student-facing AI tools move faster than the governance frameworks meant to evaluate them.

What the Salamanca High School AI robot assistant can do

Sally will be stationary and seated, but capable of upper-body movement and facial expressions. The version purchased for Salamanca will not include facial recognition or recording capabilities, which distinguish it from other Realbotix models, The 74 reported.

The district plans to introduce Sally in its high school AI and robotics courses, which use curriculum developed by Apple co-founder Steve Wozniak to prepare students for technology careers, with plans to expand to other high school classes if the pilot goes well.

The system works like this: a student identifies themselves with a unique code when interacting with Sally in class. The robot retrieves that student's prior conversation history and picks up where the last session ended. Outside school hours, students can access an avatar version of Sally on their laptops to get homework feedback, request explanations of topics that interest them, and receive real-time translation in more than 100 languages. The avatar is also loaded with the district's curriculum and can prompt a teacher who loses their place during a lesson.

Sally is also programmed to redirect any conversation that strays off-topic back to education. The system is not passive about student safety: when a student mentions suicide, self-harm, or other flagged terms, it automatically alerts school administrators.

That last feature matters more than it might first appear.

Why the crisis-alert function raises the privacy stakes

A system that scans student inputs for flagged content raises specific questions about what gets stored, who can access it, and for how long. Those questions are not answered in the publicly available record.

District Superintendent Mark Beehler has stated that the system operates on a closed network with no internet connection, that Realbotix will not have access to personally identifiable student information, and that the system is trained to respond with "I don't know" rather than generate fabricated answers, a safeguard against the AI accuracy problem known as hallucination, The 74 reported. These are meaningful commitments. They come, however, from the district and the vendor. No independent privacy or security audit of this specific deployment has been described publicly.

NYC Public Schools' guidance notes that AI-generated responses can sound confident while being factually wrong, which is why the system requires human review of all AI outputs as a standing rule, per NYC Public Schools. That standard is specific to NYCPS and does not govern Salamanca, but it represents what a documented accountability requirement looks like in practice. For parents evaluating this kind of deployment anywhere, the gap between a verbal assurance and a contractually binding, externally verified data governance term is the central question.

Three gaps in the public record before the pilot starts

The concerns surrounding Salamanca's deployment fall into three distinct categories: evaluation design, data governance, and community process.

No publicly defined success criteria. Beehler has said the district will measure the program's effectiveness primarily through qualitative feedback from students and teachers, The 74 reported. No academic benchmarks, behavioral metrics, or third-party evaluation structure have been publicly described. Without pre-established, measurable outcome criteria in place before the pilot launches, it becomes harder to compare results against any baseline or distinguish genuine learning gains from general enthusiasm about a novel technology.

Data governance terms not publicly detailed. The full contract between Salamanca and Realbotix has not been publicly detailed. Key questions remain unanswered in available reporting: what student conversation data is retained, for how long, who can access crisis-alert logs, and whether the vendor is contractually prohibited from training its AI models on student data. By comparison, NYC Public Schools' formal review process requires vendors to fully disclose AI capabilities, prohibit use of student data for AI model training, and meet transparency standards before any tool reaches students. That process was built with input from roughly 1,000 stakeholders across 25 rounds of feedback, per NYC Public Schools. No comparable review structure has been described for the Salamanca purchase.

Community consultation process unclear. Available reporting does not establish what formal input parents, teachers, tribal community members, or students provided before the board approved the contract. At least one Salamanca parent, Sierra Abrams, said she learned about the technology through a district Facebook post, The 74 reported. The U.S. Department of Education's guidance framework calls stakeholder engagement, particularly with parents, a core principle of responsible AI adoption, not an optional follow-up step, per the Department of Education. That standard carries particular weight in a district located on the Seneca Nation reservation, where community values and institutional trust are not incidental to the decision.

One additional piece of relevant context: Realbotix was previously known as Tokens.com, a cryptocurrency and metaverse company, and in April 2024 acquired Simulcra, the Las Vegas parent company behind RealDoll, a manufacturer of hyperrealistic sex dolls and sex robots. The company says it is pursuing a transaction intended to separate those business lines at the ownership level, with completion expected by September 2026, The 74 reported. Parents and board members evaluating the purchase may reasonably want to know what due-diligence documents the district reviewed before approving it.

A national disagreement that makes Salamanca's choices harder

Salamanca's decision sits inside a genuine national policy conflict. A presidential executive order established a task force to help integrate AI into curricula and teacher training, and the Department of Education confirmed last year that grant funds may support AI-based instructional materials and tutoring, per the Department of Education. The American Federation of Teachers, representing 1.8 million members, has pushed in the opposite direction, calling for broad restrictions on student-facing AI tools and requiring direct teacher supervision when secondary students use AI systems, Education Week reported. Salamanca's avatar, available to high school students outside school hours, would not match the AFT's recommendation that secondary students use AI only under teacher supervision.

Ryan Schaaf, an associate professor of educational technology at Notre Dame of Maryland University, offered a more measured take: excluding AI entirely puts students at a disadvantage when they enter a workforce already shaped by it, but whether tools like this one succeed depends on teachers actively monitoring student interactions, not simply turning the system on, The 74 reported. State Sen. George Borrello, who represents the region, has argued the program could level the playing field for students who cannot afford private tutoring and build practical exposure to technologies already reshaping the workforce.

Those are legitimate arguments. They are also best evaluated against a framework with defined outcomes, transparent data terms, and documented community input, none of which have been described publicly for this pilot.

Questions families and educators can ask before any similar rollout

The Salamanca case surfaces a set of questions that apply to any district considering a student-facing AI tool. Each has a specific, verifiable answer.

On data governance:

• What student data does the system collect, and how long is it retained?
• Are student conversations logged? Who can access those records and under what conditions?
• Is the vendor contractually prohibited from using student data to train its AI models?
• Has an independent privacy and security audit been completed for this specific deployment?
• How does this system comply with FERPA, COPPA, and, for New York schools, Education Law Section 2-d?

On crisis-alert handling:

• When the system flags a student message for sensitive content, who receives the notification?
• What is the documented review and escalation protocol?
• Are flagged conversations retained, and if so, where and by whom?

On pilot design:

• What specific, measurable outcomes will the district use to evaluate whether the pilot succeeded, and are those criteria set before the pilot begins?
• Who conducts that evaluation, district staff, the vendor, or an independent third party?
• What supervision structure governs student access outside school hours?

On community input:

• What formal process did parents, teachers, and community stakeholders participate in before the board vote?
• How will findings be shared with those same communities during and after the pilot?

Where Salamanca families can start

How this pilot gets judged will depend significantly on implementation details the district has not yet publicly described, including data handling procedures, crisis-alert review protocols, and how success will be measured and by whom.

If you are a Salamanca parent or community member, the district's school board office is the right starting point. Request the full Realbotix contract, ask specifically what data governance terms cover conversation logging and crisis-alert recordkeeping, and ask what stakeholder input process preceded the board vote. New York State Education Law Section 2-d gives families specific rights over how student data is used and shared. District officials responsible for student data privacy can explain what protections apply to this system and whether any compliance review was conducted before the purchase was approved.