Your record and the services you choose

Privacy

Draft operating policy, not approved for global enrollment. Operator identity, regional requirements, human staffing and policy review must be verified before launch.

No account is needed for local practice. A normal local record is stored unencrypted in browser storage. Optional shared-device profiles encrypt each record with a passphrase; visible nicknames are not encrypted. An unlocked screen, downloaded export, malicious extension, or compromised device is outside that protection.

What the browser stores

The learner name or nickname, grade, settings, learning progress, practice logs, written work, investigation notes and interrupted sessions are stored locally. Shared profiles keep these records separate. The browser may remove data when storage is cleared; export a private backup. Losing a profile passphrase means losing access unless an export exists.

When data leaves the device

In ordinary mode, optional accounts use the configured Supabase service for authentication and saved records. When live tutor, scoring or defense services are enabled, requests go to this site's API and may be processed by its configured model provider. Tutor messages, item identifiers and submitted writing can be transmitted even without a signed-in account. Provider identity, retention terms and regional processing arrangements require operator review before enrollment.

Encrypted shared-profile mode disables account sync and live AI services. The browser still loads the site and may check for app updates. No advertising or third-party analytics is included. Fonts are served locally.

Access, export and erasure

Settings exports the current learner record and can erase that learner's local copy. Exported JSON is not encrypted. Local erasure does not delete server records, service logs, backups or exports already made. A verified operator must publish the request process and retention schedule for those records before enabling enrollment. Signing out removes the local account session; it does not erase the learner record.

Children and human oversight

Account enrollment, parental permission, staff access, processor agreements and regional requirements need documented review. The current interface is not proof that consent or staffing has been verified. No named human is promised merely because a server is configured.

What is not collected by this application

No camera access, microphone recording, attention or emotion inference, advertising identifiers, or keystroke/mouse telemetry is implemented. Hosting and optional services may process operational request data under their own configured policies.

Who is responsible

Data controller: TO BE COMPLETED BEFORE ENROLLMENT OPENS
Registered address: TO BE COMPLETED BEFORE ENROLLMENT OPENS
Privacy contact: TO BE COMPLETED BEFORE ENROLLMENT OPENS

Last built 2026-10-10. This page is generated from the same build the automated gates check, so it cannot describe a school that does not exist.