Privacy Policy

1. Personal Data We Collect

We collect two distinct categories of data:

Account and Administrator Data

This is data about the subscribing user (the parent or guardian who holds the account).

• Username and display name
• Email address
• Physical address, city, state, and zip code
• Country of residence
• IP address and device information (browser type, operating system)
• Payment card type and last 4 digits (processed by Stripe; we do not store full card numbers)
• Subscription and billing history
• Usage and analytics data (collected via Plausible Analytics — see Section 5)

Student and Educational Data

This is data entered by the account holder about students in their care.

• Student names
• Academic records (curriculum, courses, assignments, grades, progress, schedules)
• Any other educational content voluntarily entered by the account holder

2. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

Providing and Improving the Service

• Creating and managing your account
• Processing subscription payments and billing
• Providing features you request and displaying your data within the application
• Providing customer support
• Testing, research, and product development
• Security monitoring and fraud prevention

Communications

• Sending transactional emails (password reset, billing confirmations, account notices) — always sent
• Sending product updates and announcements — sent only if you have not opted out (see Section 10)

Legal and Business Purposes

• Complying with applicable law and legal obligations
• Enforcing our Terms of Service
• Protecting rights, property, and safety
• Business transfers (see Section 4)

3. AI Feature Improvement

We may use de-identified, anonymized data — including account, usage, and educational content data — to train and improve internal AI models that power features within the Service. All data is stripped of personally identifying information before use and cannot be traced back to any individual.

Student names, email addresses, physical addresses, and other direct identifiers are never used for AI training purposes.

This training is performed entirely with our own internal tooling. We do not send your data to any third-party AI provider for training purposes.

You may opt out of this use of your data at any time in your Account Settings under Privacy Preferences.

4. How We Share Your Personal Data

We do not sell your personal data. We share personal data only in the following circumstances:

Service Providers (Sub-processors)

These companies help us operate the Service and process data only on our behalf, under contractual data protection obligations:

Legal Obligations

We may disclose personal data if required by law, court order, or to protect the rights, safety, or property of us, our users, or others.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity. We will provide notice before your data becomes subject to a different privacy policy.

Aggregated and De-identified Data

We may create aggregated or de-identified data that cannot reasonably be used to identify you, and may use or share that data for lawful business purposes. Student personal data (names and identifiers) is excluded from any such aggregation.

5. Cookies and Tracking

We use a minimal set of cookies and tracking technologies:

Essential Cookies

We use session cookies to keep you logged in and maintain your authenticated session. These cookies are strictly necessary for the Service to function and cannot be disabled without preventing you from using the Service.

Analytics

We use Plausible Analytics to understand how visitors use our website. Plausible is cookieless — it does not set any cookies, does not collect personal data, and does not track individuals across sessions or sites. It is compliant with GDPR, CCPA, and PECR without requiring a cookie consent banner.

We do not use advertising cookies, tracking pixels, or any other non-essential tracking technology.

6. Data Security and Retention

We implement appropriate administrative, technical, and physical security measures to protect your personal data from unauthorized access, use, or disclosure. All data is encrypted in transit (HTTPS/TLS). Sensitive credentials such as passwords and authentication tokens are encrypted at rest.

We retain account data for as long as your account is open and for a period thereafter as required by law or for legitimate business purposes (such as resolving disputes or maintaining billing records).

When you delete your account, access ends immediately and there is no recovery window. By default — if you have left Help improve Homeschool Manager enabled and have not opted into permanent deletion — educational content from your closed school may be retained in de-identified form to improve AI features (see Section 3); it is not user-recoverable. If you have enabled Permanently delete all data on cancellation, or if you have opted out of AI feature improvement, your data will be permanently and immediately deleted upon account closure.

7. Children and Student Data

Account Holders Must Be Adults

The Service is designed for parents and guardians managing their children's homeschool education. Account holders must be 18 years of age or older. We do not knowingly allow children under 13 to create accounts or provide personal data directly to us. If we learn that a child under 13 has created an account, we will delete it promptly. If you believe a child under 13 has done so, please contact us at the address in Section 12.

Student Data Entered by Parents

Parents and guardians may enter student names and educational records into the Service on behalf of their children. This data is entered by the adult account holder — we do not solicit or collect information directly from students. The parent or guardian is the data controller for student records; we act solely as a data processor for that information.

FERPA

To the extent that educational records stored in the Service are subject to the Family Educational Rights and Privacy Act (FERPA), the parent or guardian retains all rights over those records. We access and process such records only as directed by the account holder to provide the Service.

8. State Law Privacy Rights

California Residents

Under the California Consumer Privacy Act (CCPA) and California Civil Code § 1798.83, California residents have the right to: (1) know what personal data we collect and how it is used; (2) request deletion of their personal data; (3) opt out of the sale of personal data (we do not sell personal data); and (4) non-discrimination for exercising these rights. To submit a request, contact us at the address in Section 12.

Nevada Residents

Nevada residents may opt out of the sale of personal data to third parties. We do not sell personal data. To submit an opt-out request, contact us with the subject line "Nevada Do Not Sell Request."

Florida Residents

Under the Florida Digital Bill of Rights, Florida residents may have rights to access, correct, delete, and port their personal data, and to opt out of targeted advertising and profiling. We do not engage in targeted advertising or profiling based on personal data. To exercise any data rights, contact us at the address in Section 12.

9. European Union Data Subject Rights

If you are located in the European Union, United Kingdom, or European Economic Area, you may have rights under the GDPR with respect to your personal data, including the right to access, rectify, erase, restrict, or port your data, and to object to certain processing.

The Service is hosted and operated in the United States. By using the Service, you acknowledge that your personal data will be transferred to and processed in the United States. We rely on your consent and contractual necessity as the legal bases for such processing and transfer.

To exercise EU data subject rights, contact us at the address in Section 12. For institutional customers with GDPR obligations, please refer to our Data Processing Agreement.

10. Your Privacy Choices

You can manage the following preferences directly in your Account Settings under Privacy Preferences:

• AI feature improvement: Opt out of having anonymized usage data used to train our internal AI models
• Marketing emails: Opt out of product announcements and non-transactional communications
• Permanent deletion on cancellation: Opt in to have all your data permanently and immediately deleted when you close your account (instead of retaining de-identified educational content for AI improvement). Opting out of AI feature improvement also results in full permanent deletion on cancel.

You may also request access to, correction of, or deletion of your personal data by contacting us at the address in Section 12.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or by sending you an email. Continued use of the Service after changes are posted constitutes acceptance of the updated policy. The effective date at the top of this page reflects when the policy was last revised.

12. Contact Information

If you have questions or concerns about this Privacy Policy or your personal data, please contact us: