Privacy notice

Draft for Dr. Ping to review (ideally with legal advice for COPPA and GDPR). Edit pages/privacy.html.

What we collect

• Parents: name, email, country (and optionally city, phone, church, how you heard of us).
• Students: first name, age, grade, a username chosen by the parent, course progress, mastery answers and tutor conversations. We do not ask for a student email, photo, address or phone number.

Why

Only to run the courses: to approve enrollment, let students sign in, save progress, let parents oversee learning, keep students safe, and report anonymous totals (such as students served and cost per student) to grant makers.

Who processes it

• Supabase (database and sign-in), Netlify (website hosting), xAI (the AI model behind the tutors: student messages and the course text are sent to it to produce replies; we send a first name only), Resend (email). [Data regions and retention periods to be confirmed.]

Who can see a student's conversations

The student, the student's parent(s) and Poema Academy staff.

The free sample course

The free sample (Euclid Book I, Units 1–3) needs no account and asks for no personal information. Answers and chats are kept only in your own browser. Messages are sent to our AI provider (xAI) to produce the tutor's reply and are not stored by Poema. To enforce daily limits we keep a count per visitor under a one-way, salted hash of the IP address (never the address itself), plus anonymous daily totals of usage and cost; these counts are tied to no name or account.

Your choices

A parent may request a copy of the family's data, or its deletion, at any time by emailing [contact email]. We keep data only as long as the family is enrolled, plus [retention period].