Privacy Notice for Parents

1. Operator

ASPIRE Education. Contact: privacy@aspireprep.us.

2. Personal Information We Collect from Children

• Account information: name, email address, password (hashed), grade level.
• Practice activity: answers to practice questions, time spent, skill mastery estimates, written essay submissions.
• Technical: IP address, browser type, basic device information, and timestamps for security and fraud prevention.

We do not collect geolocation data, audio or video recordings, persistent identifiers for advertising, or social-graph data.

3. How We Use the Information

• To provide and improve the practice + curriculum experience.
• To personalize content via adaptive question selection and spaced repetition.
• To produce parent-facing progress reports.
• To communicate service-related updates to the parent.
• To maintain platform security and prevent abuse.

We do not use a child's information for behavioral advertising, and we do not sell or rent it.

4. Disclosure to Service Providers

We share child information only with the service providers needed to operate the platform, each bound by a data-processing agreement:

• Stripe — payments (parent billing only; child data not sent).
• Resend — transactional email (e.g. invitation acceptance confirmation).
• OpenAI — AI-assisted essay feedback. Configured for zero data retention.
• Turso / Postgres provider — database hosting.
• Vercel — application hosting and request logging.

5. Verifiable Parental Consent

We obtain verifiable parental consent under §312.5(b)(2) before collecting personal information from a child under 13. Our mechanism is the parent's payment-anchored relationship with ASPIRE: the parent maintains an active subscription or Founding-Family membership, and the parent affirmatively initiates the link to a child's account by sending an invite from their parent dashboard.

6. Your Rights as a Parent

• Review. Request a copy of your child's data. Available in-app via the parent dashboard or by emailing privacy@aspireprep.us.
• Delete. Request deletion of your child's identifying information. We anonymize practice and essay data by default so cohort analytics stay coherent; you may request hard deletion instead.
• Revoke consent. Stop further collection at any time. Existing data is anonymized or deleted per the above.
• Refuse further use. Tell us not to make further use of the information we already have.

We respond to parental requests within 14 days.

7. Retention

Child personal information is retained only as long as reasonably necessary to provide the service. On parental revocation, identifying information is anonymized within 14 days.

8. Security

Passwords are hashed; transit is TLS; database backups are encrypted at rest. No system is perfectly secure; we will notify you in the event of a breach affecting your child's data.

9. Changes

We will notify the parent of record by email before any material change to this notice that affects information already collected from a child.

10. Contact

Questions, requests, or concerns: privacy@aspireprep.us.