Data-use notice · version v1-draft draft — pending the owner's review (and counsel if desired)
What this service stores, why, and how to delete it
Written in plain language so a parent can read it in two minutes. It describes what the software actually does; it is not a claim of legal compliance.
Who this service is for
Parents and legal guardians who are homeschooling or supplementing a middle-school learner. The adult owns the account. Learners never create accounts, never enter an email, and are identified only by a nickname the parent chooses.
What we collect
From the parent: email address, a password hash (never the password), an optional name, and the consent you give at sign-up (time and notice version).
About the learner: the nickname, an optional grade band and goal, and the answers given in checks and lessons (the item, the response, whether it was correct, whether a hint was used). That is the data the reports are built from.
From purchases: Stripe handles the payment on its own hosted page and tells us only the outcome (paid / refunded), the amount, and an identifier. Card numbers never touch this site.
Nothing else: no advertising trackers, no analytics cookies from third parties, no public profiles, no leaderboards, no social features. One session cookie keeps you signed in.
What we do not ask for
A diagnosis, a school name, a date of birth, or a student email address. We do not knowingly collect personal information from a child under 13 — the only child-related data is the nickname and the answers entered under the parent's account.
How we use it
To score the readiness check, build the report and the learning plan, schedule rechecks, send the emails you would expect (welcome, password reset, access confirmation, a reminder when a review is due, a notice before access ends), and to understand which questions and lessons work (aggregate statistics the owner uses to improve the content).
Who can see it
You (the account owner), and the content owner/teacher when reviewing a reasoning answer you submitted for review or when handling a support request. Other families cannot see your records: every request is checked on the server against the family that owns the learner.
How long we keep it
While your account exists. Hosted access has a term (shown before purchase); after it ends, reports stay readable and printable so nothing is lost, and new checks stop. Sample (demo) families are deleted automatically after three days of inactivity. Sent emails are kept for 90 days for support.
How to delete it
Account → Delete my account removes the account, every learner and every answer immediately and permanently. Anonymised payment records (amount, date, no name) are kept because accounting requires them. You can also download everything first (Account → Download my data).
Before any real family is enrolled
The owner will review this notice against current COPPA, FERPA (which applies to schools, not to this service, but is checked) and state obligations with authoritative sources, decide on a retention period for inactive accounts, and confirm the support contact works. A checkbox is not compliance; this page is the behaviour the software actually implements.
Support contact: bpalmer@abilenewebsitedesign.com