Privacy & Child Data

1. Parent-Managed Accounts and Learner Records

• U.S. residents only
• Accounts are created and managed by parents or legal guardians
• Children do not create a login, provide an email address, or create a public profile
• A parent may create a learner record using a nickname and grade or learning level

Please do not enter your child’s full legal name, email address, phone number, date of birth, home address, or other sensitive information into a learner record. A nickname is enough for progress tracking.

2. Information We Collect (High Level)

We collect only the information needed to operate and improve the platform.

We do not collect:

• Social Security numbers
• Precise location data
• Child contact details (email or phone)
• Child dates of birth
• Advertising profiles

3. Why We Collect Information

We use information to:

• Create and manage parent-controlled accounts and child-nickname profiles
• Deliver educational practice and feedback
• Track student progress for parents
• Process payments and subscriptions
• Maintain platform security
• Improve usability and performance

We do not sell personal data or use child-profile data for behavioral advertising.

4. How Children’s Data Is Protected

Child safety is central to how the platform is designed.

• Every learner record is linked to the parent account that created it
• Children cannot communicate with other users through TruePath
• No public profiles or social features
• Child-profile data is used for the parent-controlled learning experience and is not sold or used for behavioral advertising
• Data access is limited to the parent account owner, authorized staff, and essential service providers
• Staff access is role-based and minimal

5. Parent Confirmation and Child Access

The person creating a TruePath account must confirm that they are the child’s parent or legal guardian and acknowledge this policy. We verify the parent account’s email address before the account is used.

Parents decide whether to add a learner record and what nickname to use. A child may use TruePath only through a parent-managed account. We do not offer child self-registration.

If we learn that a child has created an account directly or sent us personal information outside a parent-managed account, we will contact the parent when possible and delete the information if the account cannot be confirmed as parent-managed.

6. Parental Rights and Control

Parents and guardians have full control.

You can:

• View and manage your child’s profile and progress data
• Update or correct information
• Request account deletion
• Request data export (where applicable)
• Cancel subscriptions

To make a child-data request, email support@truepathacademics.com from the parent account’s email address with the subject “Child-data request.” Tell us the child nickname and whether you want to review, correct, delete, or stop further collection. We may ask you to sign in or provide limited account details before releasing or deleting data.

7. Cookies and Analytics

We use cookies to:

• Keep users signed in
• Remember preferences
• Understand how the platform is used

We use Google Analytics to understand general website use and improve the service. Google Analytics may collect device, browser, cookie, IP-address, and usage information. We do not use Google Analytics for behavioral advertising or to target advertising based on a learner record.

You can control non-essential cookies through your browser settings or the Google Analytics opt-out tools. Some essential cookies are needed to sign in and use TruePath securely.

8. Data Retention and Deletion

• We keep child-profile data only while it is needed to provide the parent-managed learning service or meet a legal obligation.
• After a verified parent deletion request, we delete the learner record and associated active-system progress data within 30 calendar days.
• Deleted child-profile data may remain in encrypted database disaster-recovery backups for up to 3 calendar days, which is our current hosting database's point-in-time recovery window. Those copies are not used for routine service operations.
• Where we must retain a record, we limit it to what is necessary and do not use it for learning, marketing, or advertising.

9. Security Measures (High Level)

We use industry-standard safeguards, including:

• Encrypted connections (HTTPS)
• Secure password handling
• Restricted administrative access
• Reputable third-party providers for payments and email

No system is perfect, but we continuously review and improve our security practices.

10. Service Providers

We use service providers to operate TruePath. Their processing of information is limited to the services they provide to us and is governed by the agreements and privacy terms that apply to those services:

• Stripe: parent billing and subscription payments. We do not store full card details on our servers.
• SendGrid: parent account and support emails.
• Google Analytics: general website analytics as described above.
• Infrastructure providers: hosting, database, security, and reliability services needed to operate TruePath.

We do not share child-profile data with providers for their own advertising purposes.

11. Changes to This Policy

We may update this policy as the platform evolves. When we do:

• The “Last updated” date will change
• Material changes will be communicated to parents