Privacy policy

The short version

• Worldschool OS holds information about children, so we collect only what the app uses.
• We don't sell personal information. There are no ads, and no analytics or advertising trackers in the app.
• To plan lessons, we send your child's learning profile to AI providers. The details are below.
• Children have no public profiles and can't message anyone.
• Parents control the account. You can ask us to show you or delete your child's information at any time.

Who we are

Worldschool OS is run by [legal name of the company or person running Worldschool OS].

Address: [postal address]
Phone: [phone number]
Email: [privacy contact email]

What we collect from parents

Your account

Email address and password (stored only as a secure hash). Your parent PIN is stored as a hash too.

Your family

Family name, home state, time zone, and the places you'll be with their dates.

Email settings

Your summary day and hour, and the addresses of up to 5 other people you choose to send summaries to.

Invite requests

The email address, name and note you send when asking for an invite.

What you add

Outside classes, quick links, check-in notes, plan notes, instructions for the AI tools, and the PDFs, text, web links and YouTube links you attach. We keep the text extracted from your attachments.

Outside progress

Screenshots, photos, PDFs or spreadsheets of progress from other services. We read them to fill in your check-in, keep the rows you approve, and don't keep the files.

What we collect about children

Parents enter this when they set up a child's profile or use the app:

Profile

Name, avatar and color, age, grade level, learning style, pace, interests, teaching approach and preferred teacher character. Earlier versions of a profile are kept, so we can tell which version each plan used.

Learning differences

Any you choose to tell us, such as ADHD or dyslexia, and your support notes. This can be sensitive, and it's optional.

Plans and records

Monthly plans, weekly activities, subjects, hours, compliance records and check-ins.

Work samples

Photos and notes you add to the portfolio. Photos are kept in private storage. A photo may show your child if you take it that way.

Approved videos

The YouTube videos you approve for each child.

When a child uses the kid view, the app also records:

Learning activity

Quests finished, XP, coins, badges and streaks, breaks taken, and the teacher they picked.

Answers

Quiz and lesson answers, including short answers they type, and how sure they felt.

Requests for help

A tap on "Get a grown-up". There's no free text.

Time on outside tools

Which tool they opened, how long they were away, and what they picked as having worked on.

Saved logins

You can save logins for outside tools. The app encrypts them before they're stored (AES-256-GCM), with a key kept apart from the database. So the database holds only scrambled text, but the app's server can unlock them when you ask. Seeing or copying a login needs your parent PIN. If you turn on "Kids can copy", your child can copy that login without seeing it. Saved logins are never logged or sent to an AI.

Cookies and storage on your device

We use only what the app needs to work:

Sign-in cookies

Keep you signed in.

Kid view cookie

Remembers which child is using the device, for up to 30 days.

Saved-login cookie

Remembers a correct PIN for 5 minutes.

Stored on the device

Whether you've seen the app tour, streak display details, and quests finished while offline, until they sync.

Offline copy

The kid view saves the week's pages on the device so it works offline. Leaving the kid view clears them.

How we use information

• To run the app: plans, quests, progress, compliance tracking and portfolios.
• To personalize lessons to your child and where you are.
• To send account emails, invites and the weekly summary (turn it off with one click, or on the Family page).
• To keep the service secure and fix problems.

We don't use children's information for advertising, and we don't build marketing profiles.

How AI is used

Lessons, plans and quizzes are written by AI, not by a person. Children can't type to or chat with the AI. Content is made when a parent asks for it, when a child opens a lesson, or when they tap to go deeper.

Each time we generate something, we send the AI provider your child's name, age, grade, learning preferences, interests, any learning differences and support notes, your family's current location and home state, your notes and instructions, and any material you attached. Children's typed answers aren't sent.

Anthropic (Claude) writes Compass plans, lessons and lesson plans, and checks facts. Its commercial terms say it may not train its models on what we send.

Google (Gemini) makes flashcards, quizzes, discussion guides and project ideas, reads progress files, and writes notes on videos you ask it to watch. [how Google treats data sent to Gemini]

Who we share information with

We don't sell personal information. We share it only with the services that run the app, for that purpose:

Supabase

Database, sign-in and file storage. Holds everything described above.

Vercel

Hosts the app. Everything you see or send passes through it, along with your IP address.

Anthropic

AI, as described above.

Google

Gemini AI as described above, and YouTube video playback as described below.

Resend

Delivers our emails. It sees recipient addresses and message contents. Weekly summaries include children's names, hours and progress.

Cloudflare

Domain name lookups only. App traffic and family data don't pass through it.

We may also share information if the law requires it, to protect someone's safety, or if the business changes hands, in which case we'll tell you first. These providers may process information in the United States or other countries.

YouTube videos

Approved videos play from YouTube using its privacy-enhanced mode (youtube-nocookie.com). YouTube says this mode keeps views from shaping the viewer's YouTube experience or personalized ads. The player still connects your device directly to YouTube, so Google receives information such as your IP address. Worldschool OS uses YouTube's services, so by watching you also agree to the YouTube Terms of Service, and the Google Privacy Policy applies.

Children's privacy and parents' rights

Worldschool OS is for parents and guardians. A child reaches the kid view only through a parent's account, on a device the parent has set up. You may not add a child unless you're their parent or legal guardian.

As a parent, you can at any time:

• Review the information we hold about your child.
• Ask us to delete it.
• Refuse further collection or use. That means closing your child's profile, as the app can't work without it.

Email [privacy contact email] from your account's email address. We check that the request comes from the account holder, and we'll respond within [number of days] days.

What you can change in the app

In the app, you can edit a child's profile, remove a child from your switcher (this archives the profile and doesn't delete it), delete individual portfolio items, attachments, links, saved logins and outside records, and download a portfolio PDF.

There's no button yet to delete a whole account or child, or to export everything. Email us and we'll do it for you.

How long we keep information

Right now the app doesn't delete anything automatically, so information stays until you delete it or ask us to. [how long data is kept, and why]

We'll delete information within [number of days] days of a parent's request.

Security

Each family's data is walled off from other families at the database level, connections are encrypted, and portfolio photos are in private storage. No system is perfectly secure, so we can't promise that nothing will ever go wrong.

Your state privacy rights

Depending on where you live, you may have other rights, such as to access, correct, delete or get a copy of your data. Contact us at [privacy contact email] to use them.

Changes to this policy

If we make a material change, we'll email parents before it takes effect and ask for consent again where the law requires it.