Privacy Policy

Effective Date: April 16, 2026 Last Updated: April 16, 2026

1. Introduction

This Privacy Policy describes how Homeschool OS LLC ("Homeschool OS," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you access or use our website at homeschoolos.io, our web application (accessible on desktop and mobile browsers), and any related services (collectively, the "Service").

Homeschool OS is a homeschool operating system designed for U.S.-based homeschool families. Because our Service is used by parents and guardians ("Parents") to manage the education of their children ("Students," which may include children under the age of 13), this Privacy Policy addresses both Parent and Student data, and the special protections that apply to information about children.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, you must discontinue use of the Service immediately. Parents who create Student profiles represent that they are the parent or legal guardian of each Student and consent to our collection and use of Student information as described in this Policy.

2. Information We Collect

2.1 Information Parents Provide Directly

• Account Information: When a Parent creates an account, we collect your email address and password (stored in hashed form). You may optionally provide your name, household name, mailing address, phone number, and state of residence (required for compliance features).
• Household and Family Context: To power our philosophy-aware features, you may provide information about your homeschool approach (e.g., Charlotte Mason, classical, eclectic), family rhythm, scheduling preferences, and educational philosophy. Over time, your family context profile is refined based on your inputs and preferences to improve recommendations.
• Student Profiles: For each Student, Parents provide information including the Student's first name (or nickname), date of birth or grade level, subjects studied, and any accommodations or learning notes the Parent chooses to record.
• Curriculum Materials: Parents may upload curriculum content (PDFs, photos of books or worksheets, tables of contents, URLs, or typed text) so the Service can parse it into structured lesson plans.
• Compliance Information: Depending on your state, you may provide information used for compliance features, such as attendance logs, required subject coverage, standardized test results, evaluator information, or letters of intent. You control what compliance data you enter.
• Payment Information: When you subscribe to a paid plan, payment processing is handled entirely by Stripe, Inc. We do not receive, store, or have access to your full credit card number. We receive only a tokenized reference, your billing name, the last four digits of your card, card expiration date, and billing address from Stripe for record-keeping and customer support purposes.
• Communications: If you contact us via email or other channels, we retain the content of those communications.

2.2 Information About and From Students

Because Students use the Service to execute their school day, we collect limited information directly from Students when they use the Student app, always under the account of a Parent who has created the Student profile and consented to that collection:

• Task Activity: Check-offs of daily tasks, time spent on lessons (if recorded), completion status, and notes a Student adds to a task.
• Evidence of Work: Photos, scans, typed responses, audio recordings, or uploaded files that a Student or Parent captures to document schoolwork. These may include images of handwritten work, completed worksheets, art projects, or similar artifacts.
• Assessments and Scores: Quiz results, test scores, evaluations, and progress data that Parents or Students enter.

We do not require Students to create their own accounts, and Students do not provide us with email addresses, passwords, or payment information. Student access to the Service is mediated by the Parent's account.

2.3 Information Collected Automatically

• Usage Data: We collect information about how you interact with the Service, including pages viewed, features used, curriculum uploads, schedule changes, and click patterns.
• Device and Browser Information: We collect IP address, browser type and version, operating system, device type, screen resolution, and language preference.
• Cookies and Similar Technologies: We use essential cookies for authentication and session management. We may use privacy-respecting analytics cookies to understand Service usage. See Section 8 for details.
• Log Data: Our servers automatically record information including IP address, access times, pages viewed, referring URL, and actions taken within the Service.

2.4 Information from Third-Party Services

• Authentication Providers: If we offer social login options in the future (e.g., Sign in with Google), we would receive your name, email address, and profile picture from the provider, as authorized by you.
• Stripe: We receive transaction confirmations, subscription status, and limited billing details from Stripe.

2.5 Information We Do NOT Collect

• We do not collect Social Security numbers, government-issued identification numbers, biometric identifiers, health information, or financial account numbers (other than through Stripe as described above).
• We do not collect precise geolocation data.
• We do not collect information to build advertising profiles, and we do not use Student information for any purpose other than operating the Service for your family.

3. How We Use Information

3.1 To Provide and Operate the Service

• Authenticate identity and manage Parent accounts
• Parse curriculum materials into structured lesson plans
• Generate and maintain adaptive schedules across one or more Students
• Power the Student app's daily checklist and evidence-capture features
• Assemble portfolios and compliance records based on what you have entered
• Process payments and manage your subscription

3.2 To Improve the Service for Your Family

• Learn your family's philosophy, pacing, and rhythm to improve recommendations (your family context profile)
• Surface proactive alerts about pacing risks, compliance gaps, and attendance issues
• Debug errors, monitor system health, and maintain security

3.3 To Improve the Service Generally

• Analyze aggregate, de-identified usage patterns to improve features, performance, and user experience
• Develop new features based on aggregate trends

We do not use Student information, uploaded curriculum, or evidence of student work to train third-party AI models or for any advertising purpose.

3.4 To Communicate with You

• Send transactional emails (account confirmation, password resets, payment receipts, subscription changes, deadline and compliance alerts)
• Send Service-related announcements (maintenance, security alerts, policy changes)
• With your consent, send product updates, new feature notifications, or newsletters (you may opt out at any time)

3.5 To Ensure Security and Compliance

• Detect and prevent fraud, abuse, and unauthorized access
• Enforce our Terms of Service
• Comply with legal obligations

4. How We Process Data with AI

4.1 Curriculum Ingestion and Scheduling

When you upload curriculum content or use our adaptive scheduler, we send that content to Anthropic's Claude API to extract structure (units, lessons, estimated durations) and to generate or adjust schedules. Only the curriculum content and the scheduling context necessary for the task are sent to Anthropic.

4.2 Intelligence and Recommendations

We use AI to power pacing alerts, philosophy-aware recommendations, and portfolio organization. These features may involve sending structured summaries of your household's activity (such as subject progress and schedule status) to Anthropic. We send only Student first names and ages to AI providers for personalization; we do not send last names, birth dates, email addresses, payment information, or other direct identifiers. Where possible we use internal identifiers that are meaningless outside our system.

4.3 Data Sent to AI Providers

We send to AI providers only the minimum data necessary to perform the requested function. Our use of Anthropic's Claude API is governed by Anthropic's API terms and data usage policies, which, as of the effective date of this Policy, prohibit the use of data submitted through the API to train Anthropic's models. We do not authorize any AI provider to use your data, your Student's data, or your uploaded content for model training or for their own product improvement.

4.4 Evidence of Student Work

Photos, scans, and other evidence captured through the Student app are stored in our infrastructure (Supabase Storage) for the purpose of building your portfolio. We do not send evidence content to AI providers unless you explicitly invoke a feature that requires it (for example, requesting that the Service summarize or categorize a piece of work), and in that case only the specific item you selected is sent.

4.5 No Automated Decision-Making with Legal Effects

Our AI features provide informational recommendations only. No automated decisions are made that produce legal effects or similarly significant effects on you or your Student. All AI-generated content — including schedules, pacing alerts, compliance summaries, and philosophy-aware suggestions — is advisory. You are solely responsible for your family's educational decisions and for verifying the accuracy of any compliance information before submitting it to a government agency.

5. How We Share Information

We do not sell, rent, or trade personal information, Student information, or curriculum content to third parties for their marketing purposes. We share information only in the following limited circumstances:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf, subject to contractual obligations to protect your data:

5.2 Legal Requirements

We may disclose information if required to do so by law or in response to valid legal process, including subpoenas, court orders, or government requests, provided we make commercially reasonable efforts to notify you unless prohibited by law.

5.3 Protection of Rights and Safety

We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person (including a child), violations of our Terms of Service, or as otherwise required by law.

5.4 Business Transfers

If Homeschool OS LLC is involved in a merger, acquisition, bankruptcy, or sale of all or a portion of its assets, personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service of any change in ownership or uses of your personal information, as well as any choices you may have. Any successor entity will be bound by the commitments in this Policy, or we will provide notice and an opportunity to delete your account before any materially different practices take effect.

5.5 With Your Consent

We may share information with third parties when you explicitly direct or consent to such sharing (for example, exporting a compliance portfolio to share with a state-designated evaluator).

5.6 Compliance Exports Are User-Initiated

The Service can assemble portfolios and reports formatted for state homeschool compliance requirements. We do not submit these on your behalf. Any transmission to a school district, state agency, evaluator, or umbrella school is initiated by you, and you are responsible for the content and accuracy of any such submission.

6. Children's Privacy and COPPA

Homeschool OS is designed for use by homeschool families, which means that Students using the Service frequently include children under the age of 13. We take the privacy of children seriously and comply with the Children's Online Privacy Protection Act ("COPPA").

6.1 Parent-Operated Accounts; Parental Consent

Only Parents or legal guardians may create accounts. When a Parent creates a Student profile or provides information about a Student, the Parent is providing verifiable consent on behalf of that Student for the collection and use of the Student's information as described in this Policy. By creating a Student profile, the Parent represents that they are the Student's parent or legal guardian and have the authority to provide this consent.

6.2 What We Collect from Students

The information we collect about or from a Student is limited to what is necessary to operate the Service for that Student's education: the Student's first name or nickname, grade level or age, subjects and lessons assigned by the Parent, task check-offs and progress data, and any evidence of work (text, photos, scans, audio, or files) that the Student or Parent captures.

6.3 What We Do NOT Do with Student Information

• We do not condition a Student's participation in any activity on disclosing more information than is reasonably necessary.
• We do not use Student information for behavioral advertising, profiling unrelated to the educational purpose of the Service, or any purpose other than operating the Service for your family.
• We do not sell Student information.
• We do not disclose Student information to third parties except to the Service Providers listed in Section 5.1, for the operational purposes described in this Policy.
• We do not use Student information, including evidence of student work, to train AI models.
• We do not enable Student-to-Student communication, public profiles, or social features.

6.4 Parental Rights Regarding Student Information

At any time, a Parent may:

• Review the information we have collected about their Student by logging into the account or contacting us;
• Delete a Student profile and all associated data from within the account, or by contacting us;
• Refuse further collection by deleting the Student profile or the account;
• Export a Student's data in a portable format by contacting us.

To exercise any of these rights, contact us at privacy@homeschoolos.io from the email address associated with your account. We will verify your identity before processing any request.

6.5 FERPA

The Family Educational Rights and Privacy Act ("FERPA") generally applies to educational agencies and institutions that receive U.S. Department of Education funding. Most homeschool families and Homeschool OS itself are not FERPA-covered entities. Regardless, we treat Student records with a level of care consistent with FERPA's principles: we limit access to those with a legitimate need, we do not disclose Student records outside the operational purposes described in this Policy, and we give Parents control over and access to their Student's records.

7. Data Retention

• Account Data: We retain Parent account information for as long as your account is active. When you delete your account from within the Service, we permanently delete your personal data and all associated Student data immediately, except for financial records (invoices, receipts, billing history) that we are required by law to retain for up to 7 years.
• Student Data: Student profile data, task history, evidence of work, and portfolio materials are retained for as long as the Parent's account is active. Parents may delete a Student profile and all associated data at any time; deletion performed from within the Service is immediate and irreversible.
• Curriculum Uploads: Uploaded curriculum materials are retained for as long as the associated Student profile exists, unless you delete them sooner.
• Usage Logs: Server logs containing IP addresses and access data are retained for no more than 90 days, after which they are deleted or anonymized.
• Payment Records: Transaction records are retained for 7 years as required by applicable tax and financial regulations.
• AI-Processed Outputs: Structured lesson plans, schedules, and other AI-generated outputs are stored in your account and are deleted within 30 days of account deletion. We do not retain copies of curriculum or family data at AI providers beyond what is processed transiently to generate a response.
• Communications: Support and email communications are retained for up to 3 years for quality and reference purposes.

8. Cookies and Tracking Technologies

8.1 Essential Cookies

We use strictly necessary cookies for authentication (maintaining your logged-in session) and security (including CSRF protection). These cookies cannot be disabled as they are required for the Service to function.

8.2 Analytics

We may use privacy-respecting analytics tools to collect aggregate, anonymized usage data to help us improve the Service. We do not share analytics data with advertising networks.

8.3 No Third-Party Advertising

We do not serve third-party advertisements on the Service and do not use advertising cookies, tracking pixels, or similar technologies for advertising purposes. We do not participate in cross-context behavioral advertising.

8.4 Do Not Track

We honor Do Not Track (DNT) signals from your browser. When we detect a DNT signal, we disable any non-essential analytics tracking.

9. Data Security

We implement commercially reasonable technical and organizational measures to protect personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest
• Hashed password storage (via Supabase Auth)
• Row-level security policies on database tables so one family cannot access another family's data
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security updates and dependency patching
• Separation of payment data (handled by Stripe) from our application database

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information or your Student's information, we will notify you and any applicable regulatory authorities as required by law.

10. Your Rights and Choices

10.1 Account Management

You may access, update, or correct your account information and your Student profiles at any time through your account settings.

10.2 Account and Data Deletion

You may delete your account, a Student profile, or specific content at any time from within the Service (Settings › Family for the entire account, or Settings › Students for an individual Student). Deletion performed in-product is immediate and irreversible. You may also email privacy@homeschoolos.io to request deletion; we will honor such requests promptly after verifying your identity. Some information may be retained as described in Section 7 where required by law.

10.3 Data Export

You may download a complete copy of your and your Students' personal data in a portable format at any time from Settings › Family › "Export my data". The export includes every database record and uploaded evidence file associated with your family as well as your consent ledger. If you prefer, you can also email privacy@homeschoolos.io and we will prepare an export for you after verifying your identity.

10.4 Email Communications

You may opt out of non-essential emails (newsletters, product updates) at any time by clicking the "unsubscribe" link in any such email or updating your preferences in account settings. You cannot opt out of transactional emails necessary for Service operation (for example, payment receipts, security alerts, and compliance-related deadline notifications you have configured).

10.5 Cookie Preferences

You may control non-essential cookies through your browser settings. Disabling essential cookies may impair Service functionality.

11. State-Specific Privacy Rights

11.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Delete your personal information, subject to certain exceptions
• Opt out of the sale or sharing of personal information — we do not sell or share your personal information as defined under the CCPA/CPRA
• Non-discrimination for exercising your privacy rights
• Correct inaccurate personal information
• Limit use of sensitive personal information — we do not collect sensitive personal information as defined under the CPRA

California residents under the age of 18 who are registered users of the Service may request the removal of content they have posted. To exercise any of these rights, contact us at privacy@homeschoolos.io. We will verify your identity before processing any request.

In the preceding 12 months, we have collected the categories of personal information described in Section 2. We have not sold personal information, nor have we shared personal information for cross-context behavioral advertising.

11.2 Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas, Utah, and Other State Laws

Residents of states with comprehensive privacy laws have similar rights to access, delete, correct, and opt out of certain data processing. To exercise any applicable rights, contact privacy@homeschoolos.io.

11.3 Nevada Residents

We do not sell your personal information as defined under Nevada SB 220. If you wish to submit a verified request to opt out of any future sale, contact privacy@homeschoolos.io.

11.4 State Student Privacy Laws

A number of states have enacted student privacy laws (such as California's SOPIPA) that impose obligations on operators of K–12 online services. While Homeschool OS is directed to homeschool families rather than to schools or districts, we align our practices with the principles of these laws: we do not use Student information to target advertising, we do not build advertising profiles of Students, we do not sell Student information, and we use Student information only to operate and improve the Service for your family.

12. International Users

The Service is operated from the United States and is directed to U.S.-based homeschool families. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer. We do not currently target or market the Service to individuals in the European Economic Area, United Kingdom, or other jurisdictions with cross-border data transfer restrictions.

13. Third-Party Links and Content

The Service may contain links to third-party websites, including curriculum publishers, state homeschool compliance resources, and educational content providers. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party site you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes — particularly any change that affects how we collect, use, or share Student information — we will notify you by email (at the address associated with your account) or by posting a prominent notice on the Service at least 30 days prior to the changes taking effect. Where required by law, we will obtain renewed parental consent before applying material changes to our practices regarding Student information. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices — including requests to review, delete, or export your Student's information — contact us at:

Homeschool OS LLC Email: privacy@homeschoolos.io

We will respond to all privacy-related inquiries within 30 days.

---

© 2026 Homeschool OS LLC. All rights reserved.