Privacy notice

Who we are

The service is operated by [Operating company, to be named when the entity is formed]. When this notice says "we", it means that company.

The tutor runs in your house

The tutor application listens, teaches and answers on the computer you install it on. Your child's voice is held in memory only while it is being turned into text. It is never written to disk, never recorded, and never sent to us or to anyone else. The words your child says are used on that computer to run the lesson and are not uploaded.

What can leave that computer, and only after you give permission, is described under "About your child" below.

What we collect about you

Your account: your name, your email address and a password, which our sign-in software stores only in hashed form.

Your family: the family name you choose, your state, and the homeschool status you select (for example, whether you take part in an education savings account program or file an affidavit).

Your tutor computers: the name you give each one, its platform, and a credential we keep only as a hash. A pairing code you create expires in minutes and is also stored hashed.

Payments: identifiers from our payment processor for your customer record, your subscription, and the card verification described below. We never see your card number.

Records you add: affidavits, attendance, portfolio items, test results, evaluator reports, transcripts and receipts you choose to keep in your dashboard.

Permission records: your name and email as they were at the time, the method used, when permission was given or withdrawn, and the proof identifier from the payment processor.

About your child

Nothing about a child reaches our servers until you have given verifiable permission. After that, and only these:

A first name or nickname, a birth year (never a full date of birth), a grade band, and language settings.

Lesson summaries written by the tutor: the subject, the language, when the lesson happened and how long it lasted, a short description of the work, and whether the lesson paused for a required break or a safety referral.

Skill progress, review schedules and evaluation results.

If the safety layer pauses a lesson, your dashboard receives an alert that carries only the category of concern and the time. It never carries the child's words.

What we never collect

No audio and no transcripts of what your child said. No voiceprints or any other biometric identifier. No photographs. No location. No advertising identifiers.

The tutor application contains no analytics and no crash reporting. We do not sell personal information. We do not use children's data to train AI models, including in de-identified form.

Children's privacy and your permission

The tutor is made for children, and the federal children's privacy rule requires your verifiable permission before anything about your child reaches our servers. We ask for it after you create your account and before you add a child, by confirming a payment card in your name through our payment processor. The charge and any refund are explained on that screen before you decide.

You can withdraw permission at any time from your dashboard. Syncing stops immediately. Records that show permission existed for a period are kept as evidence, as the rule requires, and are used for nothing else.

Your rights over your child's data

Review: you can download everything we hold about a child from your dashboard.

Delete: you can delete a child's records. Deletion removes them from our servers, tells the tutor computer to remove its copy, and gives you a receipt that records what was deleted, when, and that the computer confirmed.

Withdraw: you can withdraw permission without deleting anything; data already on the tutor computer stays in your house.

These tools remain available even after you withdraw permission.

Who else handles data

Our payment processor, Stripe, handles card details we never see.

Cloud hosting and database providers in the United States run our servers and store the data described above.

An error-monitoring service receives technical error events from our servers. Those events carry no name, no email address and no family identifier.

A synchronization service carries the permitted data between your dashboard and your tutor computer.

We do not share personal information with advertising networks. We disclose information when the law requires it.

How data is protected

Data on the tutor computer is encrypted at rest, with the key kept in your operating system's keychain rather than beside the data. Every family's data is separated in our database by row-level access rules enforced by the database itself, not only by our application code. Tutor computers authenticate with short-lived signed tokens, and unpairing a computer revokes its access within minutes. Connections use TLS.

How long we keep data

Each kind of data has a written retention period, published on the data retention page. The same list of rules drives the automatic deletion job, so the page and the code cannot drift apart.

The waitlist

If you join the waitlist we keep your email address, your state and the language you were reading in. We send one message when we open in your state and nothing else, we do not pass your address to anyone, and we delete it a year after you signed up or as soon as you ask.

Changes to this notice

We will post changes on this page. Where a change would materially affect how children's data is handled, we will ask for your permission again where the law requires it.