Privacy Policy

Last updated: March 25, 2026

1. Introduction

ParentPal("we", "our", or "us") is committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, and safeguard your information when you use our application.

2. Information We Collect

We collect the following types of information:

  • Account Information: Name, email address, and password when you create an account, or name and email from Google when you sign in with Google OAuth.
  • Child Information: Your child's first name and grade level, which you provide to personalize the experience.
  • Homework Images: Photos of worksheets you upload for AI analysis. These are stored securely in our cloud storage.
  • Usage Data: Practice sessions, homework check results, phonics lookups, and progress data generated through your use of the application.
  • Payment Information: If you subscribe to Pro, payment is processed by Stripe. We do not store your credit card details — Stripe handles this securely.

3. How We Use Your Information

  • To provide AI-powered homework checking, practice generation, and phonics help
  • To track your child's learning progress and generate weekly reports
  • To send transactional emails (welcome, weekly digest, account notifications)
  • To process subscription payments via Stripe
  • To improve the quality of our AI analysis and recommendations

4. Data Security

We use industry-standard security measures to protect your data:

  • Row-Level Security (RLS): Each family can only access their own data. Your child's information is never visible to other users.
  • Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest.
  • Authentication: Secure cookie-based authentication with PKCE flow for OAuth.
  • No Third-Party Sharing: We never sell, rent, or share your personal information or your child's data with third parties for marketing purposes.

5. Children's Privacy (COPPA)

ParentPalis designed for parents to use with their children. We do not knowingly collect personal information directly from children under 13. All child profiles are created and managed by the parent account holder. The child's first name and grade level are the only child-specific data we store, and this is provided by the parent.

6. AI Processing

Homework images and text are processed by Anthropic's Claude AI for analysis. Images are transmitted securely over HTTPS to Anthropic's API. Important details:

  • Homework images sent to our AI provider (Anthropic) are automatically deleted within 7 days of processing.
  • Your data is never used to train AI models. Anthropic's API terms explicitly exclude commercial API data from model training.
  • AI-generated results (grading, explanations, teaching tips) are stored in your account for your reference.
  • Images may contain your child's handwriting. We do not extract or store biometric data from handwriting — it is used solely for grading accuracy.

6a. Sub-Processors

We use the following third-party services to operate ParentPal:

  • Supabase (database, authentication, file storage) — EU and US data centers, SOC 2 Type II compliant
  • Anthropic (AI analysis via Claude API) — data deleted after 7 days, not used for training
  • Stripe (payment processing) — PCI DSS Level 1 compliant, we never store card details
  • Resend (transactional email delivery) — for welcome emails, weekly digests, and contact form messages
  • Plausible Analytics (privacy-first website analytics) — no cookies, no personal data collected, GDPR compliant
  • Vercel (hosting and deployment) — SOC 2 Type II compliant

7. Cookies & Analytics

We use essential cookies for authentication (session management). We use Plausible Analytics, a privacy-first analytics service that does not use cookies and does not collect personal data. No cookie consent banner is required.

8. Your Rights

You have the right to:

  • Access and view all data associated with your account
  • Update or correct your personal information via Settings
  • Delete your account and all associated data (including your children's profiles, homework checks, and practice sessions)
  • Export your data upon request

9. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data (profiles, children, homework checks, practice sessions, and uploaded images) will be permanently deleted within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email. The "Last updated" date at the top of this page reflects when the policy was last revised.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at support@parent-pals.com.