Privacy Policy

• Only a parent or guardian creates an account and signs in. Children do not have their own logins and cannot create accounts. A child is represented only as a "learner" sub-record that the parent adds and controls.
• Direct notice & consent before collection. Before a parent adds a child's information, we present this policy and require the parent to confirm they are the child's parent or guardian and agree to it. We record that consent (date and policy version).
• How we verify parental consent. For families who enroll in a paid pod, the parent's payment card transaction serves as verifiable parental consent. For free use — where we still collect a child's first name and grade — we use the "email-plus" method permitted because we do not disclose children's information to third parties beyond the service providers that operate ICONIX for us. [Counsel: confirm the VPC method(s) and that Stripe emails the cardholder per transaction.]
• Review, delete, and refuse further collection. A parent can review and download everything we hold about their family, delete individual learners, or delete the entire account and its data at any time (see "Your choices and rights").

• Parent / account information: name, email address, optional phone number, household name and time zone, and billing details (processed by Stripe — we do not store full card numbers).
• Children's information (entered by the parent): a learner's first name, grade level, and date of birth, which we use to place them in the right pod and to pre-fill the state filings you generate here. A parent may also tell us about a child's interests, how they learn, and their health and safety needs — see Health and safety information about your child below. Everything beyond first name, grade and date of birth is optional.
• Learning activity: lesson and material progress, posts, comments, direct and group messages, reactions, and points/badges — all created by parent/leader accounts.
• Uploads and recordings: files a parent or leader chooses to upload and pod session recordings, which may include a child's work, image, or voice.
• Technical information: sign-in identifiers, cookies, IP address, and device/usage data needed to operate and secure the service.

We treat what you write in two tiers, and the split is enforced in our database rather than by policy alone:

• Shared with the leaders who teach your child. The allergy, condition, medication and accommodation information, and the emergency contact you give us, is visible to the leaders of your own child's pod, so they can keep your child safe during live sessions. It is not visible to other families, or to leaders of pods your child is not in.
• Not shared with pod leaders at all. Anything you write in the "anything else about their health" box is visible only to you and to ICONIX administrators.

• Supabase — database, authentication, and file storage.
• Amazon Web Services — file and recording storage and delivery.
• Stripe — payment processing for paid pods.
• Resend — transactional email (invites, password resets, notices).
• Twilio — optional SMS reminders, if enabled.
• Anthropic — AI generation of lesson plans from curriculum/book content authored by leaders. This feature does not send children's personal information.

Inside ICONIX, pod leaders see some of your child's information. A pod leader is a person, not a vendor, and the leaders of your own child's pod can see that child's first name, grade, interests and learning notes, the safety information described under Health and safety information about your child above, and — unless you turn it off for that child in your year planner — the child's year plan: what is planned each week, how much of it is marked done, the notes you write on a week, and the suggestions a leader has left. ICONIX staff who help run pods can see the year plan too. They cannot see your child's date of birth, the fuller health notes you mark for administrators only, or anything at all about children who are not in their pod.

• Family and learning data is kept while the account is active and is deleted when the account is removed at the parent's request (including uploaded files and recordings).
• Your child's health and safety information is kept while your account is active, and removed sooner if you ask us to remove it. It is deleted with the child's record when you remove that learner, and with everything else when the account is deleted.
• The welcome questionnaire you completed is kept as a record of your household, exactly as you answered it, for as long as your account is active. Because it is a record of what you told us at the time, removing an individual learner does not rewrite it; it is deleted in full when your account is deleted.
• Operational records such as notifications and security/audit logs are automatically deleted on a rolling schedule. [Counsel: set the specific retention period for each category, e.g., 90 days.]

• Delete your account and all of your family's data — learners, progress, posts, messages, and uploaded files — permanently, by asking your ICONIX administrator to remove your family. You may refuse further collection of your child's information by requesting this deletion.