Privacy Policy
Effective Date: February 9, 2026
Schooly ("we," "us," "our") is committed to protecting your privacy and the privacy of your children. This policy explains what data we collect, how we use it, and your rights.
1. Information We Collect
| Data Type | What We Collect | Why |
|---|---|---|
| Account Info | Name, email address, password (encrypted) | Authentication and communication |
| Student Profiles | Name, grade level, interests, learning preferences | Personalized curriculum generation |
| Learning Data | Assignment scores, vocab mastery, study session history, progress metrics | Track progress and adapt learning |
| Generated Content | AI-generated curricula, lessons, assignments | Deliver the learning experience |
| Billing Data | Processed by Stripe — we do not store credit card numbers | Subscription management |
| Usage Data | Device type, browser, timestamps of activity | Performance monitoring and debugging |
2. How We Use Your Data
- Provide Services: generate personalized curricula, lessons, assignments, and study tools.
- Track Progress: record scores, mastery levels, and study habits to show learning trends.
- Improve the Platform: analyze aggregate, anonymized usage patterns to improve features.
- Communication: send account-related emails (verification, password reset, subscription updates).
We never sell your personal data or your children's data to third parties.
3. Third-Party Services
We use the following third-party services to operate Schooly:
- Google Firebase — authentication, database, hosting, and cloud functions.
- Stripe — payment processing. Stripe's privacy policy applies to billing data.
- AI Providers (Google, OpenAI, Anthropic) — curriculum and content generation. We send subject matter and learning context to AI providers; we do not send student names, emails, or personally identifiable information.
4. Children's Privacy (COPPA Compliance)
Schooly takes children's privacy seriously:
- Student accounts for children under 13 are created exclusively by a parent or guardian.
- We collect only the minimum information necessary to provide educational services.
- Student data is stored within the parent's family account and is accessible only by the parent and the student.
- We do not display advertising to children.
- We do not share children's personal information with third parties except as necessary to operate the platform (see Section 3).
- Parents may review, edit, or delete all of their child's data at any time.
5. Data Security
- Sensitive data is encrypted using AES-256-GCM with per-family key derivation.
- All data is transmitted over HTTPS/TLS.
- We implement rate limiting, input validation, and prompt injection detection to protect against attacks.
- Access to production systems is restricted to authorized personnel only.
6. Data Retention & Deletion
- We retain your data for as long as your account is active.
- You may delete your account at any time from the Settings page. Account deletion removes all your data within 30 days.
- Rate-limiting and audit log data is automatically purged after 90 days.
7. Your Rights
You have the right to:
- Access your data — view your profile, learning data, and generated content within the platform.
- Correct your data — update your profile from the Settings page.
- Delete your data — delete your account entirely from the Settings page.
- Withdraw consent — stop using the platform at any time.
8. Cookies & Local Storage
Schooly uses browser local storage to save your theme preference and session state. We do not use third-party tracking cookies or advertising cookies.
9. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or in-app notice. The "Effective Date" at the top reflects the latest revision.
10. Contact Us
If you have questions about this privacy policy or wish to exercise your data rights, contact us at privacy@schooly.ink.