Privacy Policy

• Only a parent or guardian creates an account and signs in. Children do not have their own logins and cannot create accounts. A child is represented only as a "learner" sub-record that the parent adds and controls.
• Direct notice & consent before collection. Before a parent adds a child's information, we present this policy and require the parent to confirm they are the child's parent or guardian and agree to it. We record that consent (date and policy version).
• How we verify parental consent. For families who enroll in a paid pod, the parent's payment card transaction serves as verifiable parental consent. For free use — where we still collect a child's first name and grade — we use the "email-plus" method permitted because we do not disclose children's information to third parties beyond the service providers that operate ICONIX for us. [Counsel: confirm the VPC method(s) and that Stripe emails the cardholder per transaction.]
• Review, delete, and refuse further collection. A parent can review and download everything we hold about their family, delete individual learners, or delete the entire account and its data at any time (see "Your choices and rights").

• Parent / account information: name, email address, phone number, where you live (your ZIP code, city and state — or your city and country outside the US), how you heard about us and what you're looking for from us, household name and time zone, and billing details (processed by Stripe — we do not store full card numbers). We look up your city and state from your ZIP code using data from GeoNames, licensed under CC BY 4.0.
• Children's information (entered by the parent): a learner's first name, grade level, and date of birth, which we use to place them in the right pod and to pre-fill the state filings you generate here. A parent may also tell us about a child's interests, how they learn, and what helps them learn — see What helps your child, and an emergency contact below. Everything beyond first name, grade and date of birth is optional. We do not ask for medical information about your child.
• Learning activity: lesson and material progress, posts, comments, direct and group messages, reactions, and points/badges — all created by parent/leader accounts.
• Uploads and recordings: files a parent or leader chooses to upload and pod session recordings, which may include a child's work, image, or voice.
• Technical information: sign-in identifiers, cookies, IP address, and device/usage data needed to operate and secure the service.
• Gifts: if you give to ICONIX, the amount, the date, whether the payment went through or was refunded, and the email address Stripe gives us for your receipt. Stripe processes the payment, and we never see or store your card number. Other families never see what you gave; the donation jar in the portal shows only a combined total.

When your family joins, the welcome questionnaire asks for two things about care:

• An emergency contact — someone we can call if we can't reach you during a session. Only you and ICONIX administrators see it.
• What helps your child learn (optional) — accommodations such as a movement break or a warning before a transition. The leaders of your own child's pod, and ICONIX staff who help run pods, see it so they can teach your child well. It is not visible to other families.

• Supabase — database, authentication, and file storage.
• Amazon Web Services — file and recording storage and delivery.
• Stripe — payment processing for paid pods and donations.
• Resend — transactional email (invites, password resets, notices).
• Twilio — optional SMS reminders, if enabled.
• Anthropic — AI generation of lesson plans from curriculum/book content authored by leaders. This feature does not send children's personal information.

Inside ICONIX, pod leaders see some of your child's information. A pod leader is a person, not a vendor, and the leaders of your own child's pod can see that child's first name, grade, interests and learning notes, the accommodations described under What helps your child, and an emergency contact above, and — unless you turn it off for that child in your year planner — the child's year plan: what is planned each week, how much of it is marked done, the notes you write on a week, and the suggestions a leader has left. ICONIX staff who help run pods can see the year plan too. They cannot see your child's date of birth, your emergency contact, or anything at all about children who are not in their pod.

• A card shows a name, a short thank-you line that we write, and sometimes the kind of gift (for example, Monthly Givers). It never shows how much anyone gave.
• A card carries an adult's name or a family's name, never a child's.
• A card is added by us, or at your request: after you give, you can leave the name you would like shown. That card waits until we approve it, and we write its thank-you line.
• If a card names your family, you can take it down yourself from the Thank You Wall page at any time. Taking it down deletes it.
• You can ask us to change or remove any card by writing to us from Get help in the portal.

• Your agreement: the exact terms shown to you, when you agreed, the email address you signed up with, and the internet address and device you agreed from.
• Your card, from Stripe: its brand, last four digits, whether it is a credit, debit or prepaid card, and a fingerprint — a code Stripe uses to recognise the same card again. We never see or store your full card number.
• Your downloads: which curriculum files you download or print during the trial (it includes 5).
• The emails we send you about it (the confirmation, the reminder before your first charge, and any about a cancellation or a payment), exactly as sent.

• Family and learning data is kept while the account is active and is deleted when the account is removed at the parent's request (including uploaded files and recordings).
• Your child's accommodations and emergency contact are kept while your account is active, and removed sooner if you ask us to remove them. They are deleted with the child's record when you remove that learner, and with everything else when the account is deleted. Nothing medical is kept on your child's record.
• The welcome questionnaire you completed is kept as a record of your household, exactly as you answered it, for as long as your account is active. Because it is a record of what you told us at the time, removing an individual learner does not rewrite it; it is deleted in full when your account is deleted.
• Operational records such as notifications and security/audit logs are automatically deleted on a rolling schedule. [Counsel: set the specific retention period for each category, e.g., 90 days.]

• Delete your account and all of your family's data — learners, progress, posts, messages, and uploaded files — permanently, by asking your ICONIX administrator to remove your family. You may refuse further collection of your child's information by requesting this deletion.