1. Information we collect
We collect the following categories of information:
- Account information: parent/guardian name, email, phone number, country, time zone, and password (stored only as a secure hash).
- Learner information: a child's name or preferred name, age or date of birth, time zone, availability, cohort, and learning progress.
- Learning activity: lesson completions, quiz attempts, assignment submissions, achievements, and messages within the Service.
- Billing information: subscription plan, transaction records, and payment status. Card details are handled by our payment processor, not stored by us.
- Technical information: device, browser, IP address, and usage data collected through cookies and similar technologies.
2. Children's privacy and parental consent
Accounts are created and managed by an adult. When a parent or guardian enrolls a child, they consent to our collection and use of that child's information as described here. We collect only the information reasonably necessary to provide the educational Service.
We do not require a child to disclose more information than is needed to participate. Parents and guardians may review their child's information, request corrections or deletion, and withdraw consent at any time by contacting us.
3. How we use information
- To provide and personalize the Service, including lessons, cohorts, progress tracking, and feedback.
- To process payments, manage subscriptions, and send transactional messages such as receipts and class reminders.
- To keep the community safe through moderation and to enforce our Terms.
- To improve and develop the Service, and to communicate important updates.
- To comply with legal obligations and protect our rights and the safety of users.
4. Legal bases
Where applicable law (such as the GDPR) requires a legal basis, we rely on the performance of our contract with you, your consent (including parental consent for children), our legitimate interests in operating and improving the Service, and compliance with legal obligations.
5. How we share information
We do not sell personal information. We share information only as needed to operate the Service:
- Service providers who process payments, host our infrastructure, or provide communication tools, under contractual confidentiality and security obligations.
- Educators, who see the learner information needed to teach and support their assigned cohorts.
- Legal and safety recipients, where disclosure is required by law or necessary to protect a child or other person.
- A successor entity in the event of a merger, acquisition, or reorganization, subject to this Policy.
6. Data retention
We retain personal information for as long as an account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When information is no longer required, we delete or anonymize it.
7. Security
We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your rights and choices
Depending on your location, you may have rights to access, correct, delete, export, or restrict the processing of personal information, and to withdraw consent. Parents and guardians may exercise these rights on behalf of their children. To make a request, contact us using the details below; we will respond within the timeframe required by applicable law.
9. International transfers
We may process and store information in countries other than where you live. Where we transfer personal information across borders, we take steps to ensure it receives an adequate level of protection consistent with applicable law.
10. Changes and contact
We may update this Policy from time to time and will post the updated version with a new effective date. For privacy questions or to exercise your rights, contact us at hello@heritageclub.app.