Privacy Policy

1. Introduction

Welcome to Homeducate ("we," "our," or "us"). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our homeschool management platform (the "Service").

By using Homeducate, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

Account Information: Email address, username, password (encrypted), family/organization name

Profile Information: Student names, parent/guardian information, exam dates, subject preferences

Educational Data: GCSE subjects and progress, study timetables, work logs, assignments, resources, progress tracking

Payment Information: Billing details (processed by Stripe - we do not store full card details), transaction history

2.2 Information Automatically Collected

IP address, browser type, device information, pages visited, time and date of access

3. How We Use Your Information

• Provide and maintain the Homeducate platform
• Manage your account and authentication
• Store and organize educational data
• Track student progress and GCSE preparation
• Process subscription payments through Stripe
• Send transactional emails and service updates
• Provide customer support
• Improve our Service and develop new features

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We only share data with:

Stripe (Payment Processing) - For subscription payments, located in Ireland (EU)

Supabase (Database Hosting) - For storing application data, EU data centers

Resend (Email Service) - For transactional emails

5. Data Retention

Active Accounts: Data retained for the duration of your subscription

Cancelled Accounts: Data retained for 30 days after cancellation, then permanently deleted

Legal Requirements: Tax and accounting records retained for 6 years (UK legal requirement)

6. Your Data Protection Rights (GDPR)

Under GDPR and UK Data Protection Act 2018, you have the right to:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restrict Processing: Request that we limit how we use your data
• Data Portability: Request your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Lodge a Complaint: File a complaint with the UK ICO (ico.org.uk)

7. Data Security

We implement strong security measures:

• All passwords encrypted with bcrypt
• HTTPS/SSL encryption for all data transmission
• Strict organization-scoped data access
• Secure token-based authentication
• Regular encrypted backups

8. Children's Privacy

Parent/Guardian accounts must be 18+ years old. Parents have full control over student accounts and can view, edit, and delete all student data. We collect only essential educational data for students.

9. Cookies

We use minimal cookies for essential functionality only (authentication). See our Cookie Policy for details.

10. Contact Us