Privacy Policy

Version: 1.1.0

Effective Date: July 30, 2026

Last Updated: July 30, 2026

Supersedes: Version 1.0.0, effective March 24, 2026

Hands-Off Homeschool ("we," "us," "our"), operated by Hands Off Digital LLC, respects your privacy and the privacy of your children. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding that information.

This policy applies to our platform at app.handsoff.school and our website at handsoffhomeschool.com.

Our privacy values

  • We are parents first and everything else second. We will never sell your data, share your data, or do anything we wouldn't do with our own kids' data. We hopefully don't even have to look at your data. Nothing is as important to us as keeping everyone's eyes and hands off our kids and we apply the same values to your kids. We don't have ads, and we don't sell ad space to anyone and never will. To the extent that you can have safe spaces online, this is intended to be a safe space.

1. Information We Collect

Information You Provide

Parent/account holder information:

  • Name and email address (for account creation and communication)
  • Password (managed by our authentication provider, Clerk — we never see or store your password directly)
  • State of residence (for curriculum alignment and timezone)
  • Payment information (processed by Stripe — we never see or store your full card number)

Student information (provided by the parent):

  • Student name, age, and grade level
  • Interests and learning style
  • Reading level
  • Any notes the parent adds about the student

Content you create:

  • Student writing submissions and assessment responses
  • Parent notes and curriculum preferences
  • Course selections and schedule configurations

Information Generated by the Service

  • AI-generated lesson content, quizzes, and assessments
  • Assessment scores and completion data
  • Student context summaries (AI-generated from lesson performance to improve future lessons)
  • Tutor chat logs (conversations between the student and the AI tutor during lessons)

Technical Information

  • Browser type and device information (for rendering lessons correctly)
  • Log data (timestamps of actions within the app, for debugging and service reliability)
  • Records of your acceptance of our Terms of Service and Privacy Policy — including the date, the version accepted, and the IP address used. We keep these so that both of us can tell which version of our agreement applies to you.

We do not use cookies for advertising or tracking. Our authentication system uses essential cookies for session management only.

2. How We Use Your Information

We use the information we collect solely to provide and improve the educational service:

  • Lesson generation: Student profile data (name, age, grade, interests, learning style) is sent to AI models to generate personalized lessons. This is the core function of the service.
  • Assessment and feedback: Student writing submissions are processed by AI to generate feedback and scores.
  • Student context: Recent performance data is summarized to improve the relevance and quality of future lessons.
  • Communication: Your email address is used to send teacher guides, weekly digests, account notifications, and support correspondence.
  • Service operation: Technical data is used for debugging, error monitoring, and keeping the service running.

We do not:

  • Sell your data or your child's data to anyone.
  • Use student data for advertising or marketing to students.
  • Share student data with third parties for their own commercial purposes.
  • Use student data to build advertising profiles.
  • Use your data or your child's data to train machine-learning models.
  • Allow third-party advertising on our platform.

Relationship to our Terms of Service. Our Terms of Service include a limited licence permitting us to host and process the content you submit so that the Service can function — for example, so an uploaded photograph of handwritten work can reach our grading pipeline. That licence exists only to operate the Service. Where this Privacy Policy and that licence could be read to conflict, this Privacy Policy controls as to how we handle your data.

3. Third-Party Services That Process Your Data

To provide the Service, we share limited data with the following providers:

ProviderWhat They ProcessWhy
Anthropic (Claude)Student profile summary, lesson contentAI lesson generation and assessment
Google (Gemini)Student profile summary, lesson contentAI lesson generation, image generation
xAI (Grok)Student profile summary, lesson contentAI lesson generation (when selected as provider)
ClerkParent email, password, session dataAuthentication and account management
SupabaseAll application dataDatabase hosting (PostgreSQL)
VercelApplication code, server logsApplication hosting
StripePayment informationSubscription billing
ResendParent email address, email contentTransactional email delivery
InngestJob metadata (student IDs, timestamps)Background job scheduling

Each of these providers has their own privacy policies. We select providers that maintain appropriate data security practices. When sending data to AI providers for lesson generation, we send only the minimum information needed (student name, age, grade, interests, and learning context — never home address, email, or financial information).

4. Children's Privacy (COPPA Compliance)

Our Service generates educational content for children, and we take children's privacy seriously.

How our architecture protects children:

  • Children do not create accounts. Parents create and manage all accounts.
  • Children do not enter personal information. Parents provide student profile data.
  • The only information a child directly produces through the Service is their lesson interactions (writing submissions, quiz answers, tutor chat messages). This information is generated in the context of educational activities controlled by the parent.
  • We do not collect contact information from children.
  • We do not enable children to make their information publicly available.
  • We do not use children's data for any purpose other than delivering the educational service their parent authorized.

Parental consent: By creating an account and adding a student, you, the parent or legal guardian, consent to our collection and use of your child's information as described in this policy — solely for the purpose of providing personalized educational content.

Your rights as a parent:

  • You can review all information we hold about your child through the parent dashboard at any time.
  • You can modify your child's profile information at any time.
  • You can request deletion of your child's data by contacting us at support@handsoffschool.com.
  • You can request that we stop collecting further information from or about your child by deleting their student profile.

5. Data Security

We implement reasonable technical and organizational measures to protect your data:

  • All data is encrypted in transit (HTTPS/TLS).
  • Our database is hosted on Supabase with encryption at rest.
  • Authentication is managed by Clerk with industry-standard security practices.
  • Access to production systems is restricted to authorized personnel.
  • We do not store passwords — authentication is handled by Clerk's secure infrastructure.

No system is perfectly secure. If we become aware of a data breach that affects your information, we will notify you promptly as required by applicable law.

6. Data Retention

  • Active accounts: We retain your data for as long as your account is active.
  • Deleted accounts: When you delete your account, we permanently delete your family data, student profiles, and generated lessons within 30 days.
  • AI provider data: Data sent to AI providers for lesson generation is processed according to their respective data retention policies. We do not control retention by third-party AI providers, but we select providers whose policies do not use customer data for training by default.
  • Backups: Database backups may retain data for up to 7 days after deletion.
  • Agreement records: We retain records of your acceptance of our Terms and this Policy for as long as needed to establish which version of our agreement applies, including after account deletion where required to resolve or defend a claim.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you and your child.
  • Correct inaccurate information.
  • Delete your data (see Section 6).
  • Export your data in a portable format.
  • Withdraw consent for data processing by deleting your account.

To exercise any of these rights, contact us at support@handsoffschool.com. We will respond within 30 days.

8. State-Specific Disclosures

California (CCPA/CPRA): We do not sell personal information. We do not share personal information for cross-context behavioral advertising. California residents may request access to, deletion of, or information about their personal data by contacting us.

Other states with privacy laws: If your state has enacted consumer privacy legislation (Virginia, Colorado, Connecticut, Utah, etc.), we honor the same rights described above for all users regardless of location.

9. Changes to This Policy

If we make material changes to this Privacy Policy, we will notify you by email at least 30 days before the changes take effect, and we will ask you to affirmatively accept the updated version. Minor clarifications or updates that do not affect your rights may be made without advance notice, but the version number and "Last Updated" date will always reflect the most recent revision.

10. Contact

If you have questions about this Privacy Policy or our data practices, contact us:

Hands Off Digital LLC

d/b/a Hands-Off Homeschool

Email: support@handsoffschool.com

Website: handsoffhomeschool.com

Platform: app.handsoff.school