Privacy Policy

LearnSpark (“we,” “us,” or “our”) is an AI-powered adaptive tutoring platform for K–12 students. Our service is directed at parents, who create accounts on behalf of their children.

For questions about this policy, contact us at privacy@learnspark.app.

LearnSpark takes COPPA compliance seriously. COPPA requires that operators of websites or online services directed at children under 13 obtain verifiable parental consent before collecting personal information from children.

What this means for you:

• Children under 13: We will not activate a child account until you complete our email-based consent verification. This verifies that you are the account holder and are giving consent as the parent or legal guardian.
• Children 13–17: A simplified parental acknowledgment is required at account creation.
• Right to revoke:You may revoke consent at any time by contacting us. Upon revocation, we will delete your child's account and all associated data within 30 days.
• Right to review: You may request a copy of the personal information we have collected from your child by contacting us.

Parent account data:

• Email address and full name (for account creation and communication)
• Payment information (processed by Stripe; we do not store card numbers)
• Consent verification records

Child/student data:

• Display name, date of birth, and grade level
• Learning interaction data: questions answered, responses given, time spent, mastery levels per concept
• AI tutor conversation content (used to generate feedback and personalize future sessions)
• Engagement metrics: session duration, response times (used to detect if a student is struggling or disengaged)
• Gamification data: XP, level, streaks, achievements earned

Data we do NOT collect from children:

• Full name (only display name/nickname)
• Precise geolocation
• Photos or videos
• Social connections or contact lists

We use collected data to:

• Personalize learning: Our Bayesian Knowledge Tracing engine uses interaction data to estimate concept mastery and select the right next activity.
• Power the AI tutor:Session context is sent to Anthropic's Claude API to generate tutoring responses. Anthropic does not train on your data (see their privacy policy).
• Generate parent reports:Progress summaries and weekly briefings are generated from your child's session data.
• Improve our service: Aggregate, anonymized data is used to improve curriculum quality and AI accuracy.
• Account and subscription management.

We do not sell personal data. We share data only with the following service providers, under strict data processing agreements:

• Supabase — database and authentication hosting (US-based, SOC 2 compliant)
• Anthropic (Claude API) — AI tutoring responses
• Stripe — payment processing (PCI-DSS compliant)
• Resend — transactional email delivery

We retain student data for as long as the account is active. When you delete an account:

• Personal identifying information is deleted within 30 days.
• Anonymized aggregate data (e.g., aggregate curriculum effectiveness stats) may be retained.

We use industry-standard security practices: all data is encrypted in transit (TLS) and at rest. Database access is protected by Row-Level Security (RLS) policies that ensure parents can only access their own children's data.

You have the right to access, correct, or delete your data at any time. For children under 13, parents may:

• Review data we have collected from their child
• Request correction of inaccurate data
• Request deletion of the child's account and data
• Revoke consent and prevent further data collection

To exercise these rights, email privacy@learnspark.app. We will respond within 5 business days.

We will notify you of material changes to this Privacy Policy via email. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

Questions, concerns, or requests regarding this policy or your data:

Email: privacy@learnspark.app
Subject line: Privacy Request — LearnSpark