Privacy Policy

1. Introduction

Welcome to Homeducate ("we," "our," or "us"). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our homeschool management platform (the "Service").

By using Homeducate, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

Account Information: Email address, username, password (encrypted), family/organization name

Profile Information: Student names, parent/guardian information, exam dates, subject preferences

Educational Data: GCSE subjects and progress, study timetables, work logs, assignments, resources, progress tracking

Wellbeing & Support Information (optional): Only if you switch on the optional Wellbeing & Support feature: daily mood, sleep and energy check-ins, notes about difficult moments and what helped, support goals and adaptations. See section 9.

Payment Information: Billing details (processed by Stripe - we do not store full card details), transaction history

2.2 Information Automatically Collected

IP address, browser type, device information, pages visited, time and date of access

3. How We Use Your Information

• Provide and maintain the Homeducate platform
• Manage your account and authentication
• Store and organize educational data
• Track student progress and GCSE preparation
• Process subscription payments through Stripe
• Send transactional emails and service updates
• Provide customer support
• Improve our Service and develop new features

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We only share data with:

Stripe (Payment Processing) - For subscription payments, located in Ireland (EU)

Supabase (Database Hosting) - For storing application data, EU data centers

Resend (Email Service) - For transactional emails

5. Data Retention

Active Accounts: Data retained for the duration of your subscription

Cancelled Accounts: Data retained for 30 days after cancellation, then permanently deleted

Legal Requirements: Tax and accounting records retained for 6 years (UK legal requirement)

6. Your Data Protection Rights (GDPR)

Under GDPR and UK Data Protection Act 2018, you have the right to:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restrict Processing: Request that we limit how we use your data
• Data Portability: Request your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Lodge a Complaint: File a complaint with the UK ICO (ico.org.uk)

7. Data Security

We implement strong security measures:

• All passwords encrypted with bcrypt
• HTTPS/SSL encryption for all data transmission
• Strict organization-scoped data access
• Secure token-based authentication
• Regular encrypted backups

8. Children's Privacy

Parent/Guardian accounts must be 18+ years old. Parents have full control over student accounts and can view, edit, and delete all student data. We collect only essential educational data for students. Health and wellbeing information about a child is only recorded if a parent switches on the optional Wellbeing & Support feature (see section 9).

9. Wellbeing & Support Data (Optional)

Wellbeing & Support is an optional feature. If a parent switches it on, the account can record information about a child's health and wellbeing. Under UK GDPR this is special category data, so we handle it with extra care.

• What may be recorded: daily self-rated mood, sleep and energy scores with optional notes; notes about difficult moments (what led up to them, what helped, recovery time); support goals; and adaptations in place (for example extra time or breaks)
• Why: to help families understand patterns, plan support and, if the parent chooses, evidence the provision they make for their child
• Lawful basis: your explicit consent (UK GDPR Article 9(2)(a)), given by the parent or guardian when they switch the feature on. It is never turned on automatically
• Who can see it: the parent accounts in your family, and the child's own login, which can only see their own check-ins, goals and adaptations. Difficult-moment notes are visible to parents only. It is not shared with other families, tutors or advertisers
• Reports: it is never included in a Local Authority report unless you choose to include it each time you export
• Analytics: this area is excluded from session recording and heatmaps
• Withdrawing consent: a parent can turn the feature off at any time. Doing so permanently deletes all wellbeing data held for your family. Individual entries can also be deleted at any time
• Retention: kept until you delete it, withdraw consent, delete the student or delete your account. It is included in your data download
• Not medical advice: it is a record-keeping tool. It does not diagnose, assess or monitor any condition, and we make no automated decisions about your child from it

10. Cookies & Analytics

We use minimal cookies for essential functionality (authentication). With your consent only, we also use Microsoft Clarity analytics to see how the app is used; typed text and student details are masked and you can withdraw consent at any time. We also use cookieless visit counting that does not identify you. See our Cookie Policy for details.

11. Contact Us