Privacy Policy

We collect information necessary to provide our tutoring services and operate our platform effectively. The categories of information we collect are:

We use the information we collect solely for the following legitimate purposes:

• Service Delivery: Creating and managing parent and student accounts, generating weekly lesson plans tailored to your child's grade and selected subjects, and providing access to the ProTeach portal.
• Teacher Companion Coordination: Sharing relevant child profile information (first name, grade, subjects, accommodations) with the assigned Teacher Companion so they can plan and upload appropriate weekly lessons.
• Progress Tracking: Generating learning progress summaries and reports available to parents through the Parent Portal.
• Billing & Subscriptions: Processing weekly subscription payments, managing free trials, handling cancellations, and issuing credits where applicable.
• Communications: Sending transactional emails (account confirmations, payment receipts, lesson availability notifications, and support responses) via Resend. We do not send unsolicited marketing emails.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve lesson quality, fix bugs, and develop new features.
• Security & Fraud Prevention: Detecting and preventing unauthorized access, fraudulent activity, and abuse of our services.
• Legal Compliance: Meeting our legal obligations, including responding to lawful government requests and maintaining financial records as required by applicable law.

We do not use your information or your child's information for targeted advertising, behavioral profiling for commercial purposes, or sale to data brokers.

ProTeach uses AI-assisted tools on the server side to assist with generating lesson plan frameworks. All AI processing occurs server-side only — credentials are never exposed to the client or browser. Here is exactly how AI is used on our platform:

• Server-Side Lesson Generation: ThynkQ AI is used server-side to assist Teacher Companions in generating lesson plan frameworks. All AI-generated content is reviewed and approved by Lexie, the Teacher Companion, before it is delivered to any student. No raw AI output is ever sent to students without human review.
• No User Data Used for AI Training: Our AI infrastructure operates under strict data processing agreements that explicitly prohibit the use of any user data — including children's data — for AI model training or improvement. Your data is used solely to generate the educational response for your session.
• PII Stripping: All prompts sent to the AI are stripped of personally identifiable information before processing. The AI receives only the child's grade level, selected subjects, and the educational context needed to generate a lesson framework. First names are not sent to the AI service.
• Behavior Analytics: Our on-platform learning engine tracks anonymized behavior patterns (time on task, struggle detection, feature usage) to surface personalized learning recommendations. This data is stored in your Firestore account and is accessible to parents through the Parent Portal. This analysis is performed within our own infrastructure and does not involve external AI calls.
• No Automated Decisions: AI is used solely as a lesson-planning aid for human teachers. No automated decisions are made about your child's academic placement, advancement, or capabilities based on AI analysis alone. All curriculum decisions are made by human Teacher Companions.

ProTeach is designed as a service for parents and guardians to use on behalf of their school-age children. We take the Children's Online Privacy Protection Act (COPPA), as amended by the 2024 COPPA Rule updates (effective April 2025), and the protection of minors' data extremely seriously.

• Parental Consent Required: All accounts are created by a parent or guardian (18 years or older). By creating an account and providing your child's information, you as the parent or guardian provide verifiable consent for us to collect limited child profile data as described in this policy.
• No Direct Collection from Children: We do not knowingly collect personal information directly from children under 13. Children access the Student Portal only through a parent-configured PIN login. The Student Portal does not include forms that solicit personal information from the child.
• No Advertising to Children: Child data is never used for advertising, marketing, or any commercial purpose beyond delivering the educational service. We do not serve any advertisements to children.
• No Social Media Features for Children Under 13: The Student Portal does not include social media features, public profiles, or any feature that would allow a child under 13 to share personal information publicly or with peers outside the platform.
• No Third-Party Sharing of Child Data for Marketing: Child profile information is never shared with third parties for marketing, behavioral advertising, or commercial profiling. The only third-party access to child data is through our essential service providers (Firebase for storage, AI-assisted lesson generation — with PII stripped) who are contractually prohibited from using it for any other purpose.
• Parental Rights: Parents may request access to, or deletion of, their child's data at any time. See Section 9 (Your Rights) for how to exercise these rights.

If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. To report a concern, please contact us at privacy@proteachhomelearning.com.

In compliance with COPPA, we obtain verifiable parental consent before collecting any personal information from children under 13. Our consent method is approved by the Federal Trade Commission (FTC):

• Credit Card Verification: We obtain verifiable parental consent through credit card verification during the subscription process, as approved by the FTC under COPPA (16 CFR 312.5(b)(2)). The act of providing a valid credit card and completing the subscription constitutes verifiable parental consent for the collection of limited child profile data.
• Parent-Only Account Creation: Only adults (18+) can create accounts. Children cannot create their own accounts or provide personal information directly. All child profiles are created by the parent or guardian during the onboarding process.
• Consent Records: We maintain records of parental consent for audit purposes, including the date consent was provided, the method of verification, and the scope of data collection authorized.
• Withdrawal of Consent: Parents may withdraw consent at any time by contacting us at privacy@proteachhomelearning.com. Withdrawal of consent will result in the deletion of the child's profile and the inability to use child-specific features of our service.

We do not sell, rent, lease, or trade your personal information or your child's information to any third party, ever. We share data only with the following service providers who are contractually obligated to use it solely to provide services on our behalf:

We may also disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of ProTeach, our users, or the public.

In the event of a merger, acquisition, or sale of all or substantially all of our assets, user data may be transferred to the successor entity. We will notify you via email prior to any such transfer and your data will remain subject to this Privacy Policy.

We use cookies and similar technologies to operate and improve our platform. We do not use any advertising or cross-site tracking cookies. For full details, please see our Cookie Policy.

• Session & Authentication Cookies: Strictly necessary. Keep you logged in and protect your session from hijacking. Cannot be disabled without breaking the portal.
• Preference Cookies: Remember your portal settings, theme, and display preferences.

We do not use Google Analytics, third-party analytics cookies, advertising pixels, or any cross-site tracking technologies. Usage data collected for platform improvement is processed internally through our own infrastructure only.

Your data is stored on Google Firebase servers located in the United States. We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• All data transmitted between your browser and our servers is encrypted via TLS (HTTPS).
• Firebase Security Rules restrict database and file storage access so that users can only read their own data. Teacher Companions can only access the profiles and lessons assigned to them.
• Passwords are hashed using Firebase Authentication and are never stored in plaintext.
• Payment data is handled exclusively by Stripe and never passes through our servers.
• Access to our Firebase project is restricted to authorized personnel only, protected by multi-factor authentication.
• We conduct periodic security reviews of our Firebase Security Rules and application code.

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your rights or freedoms, we will notify you as required by applicable law.

As a parent or guardian — and as the account holder — you have the following rights regarding your personal information and your child's information:

• Right to Access: You may request a copy of all personal data we hold about you and your child.
• Right to Correction: You may request that we correct inaccurate or incomplete information. Most account details can be updated directly through the Parent Portal.
• Right to Deletion: You may request that we delete your account and all associated personal data. We will process such requests within 14 business days, subject to any legal obligations to retain certain records.
• Right to Data Portability: You may request an export of your learning data (lesson history, progress records) in a machine-readable format.
• Right to Withdraw Consent (COPPA): As a parent, you may withdraw consent for us to collect your child's information at any time. Withdrawal of consent will result in the inability to use child-specific features of our service.
• Right to Object: You may object to certain processing activities (e.g., analytics).

To exercise any of these rights — including requesting access to or deletion of your child's data — email us at privacy@proteachhomelearning.com with the subject line “Privacy Request.” We will verify your identity before processing any request and respond within 30 days. Data deletion requests are processed within 30 days of verification.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• We Do Not Sell Personal Information: ProTeach does not sell, and has never sold, the personal information of any user — including children — to any third party for monetary or other valuable consideration.
• We Do Not Share for Cross-Context Behavioral Advertising: We do not share personal information with third parties for cross-context behavioral advertising purposes.
• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions under applicable law.
• Right to Opt-Out: Since we do not sell personal information, there is no need to opt out of data sales. However, you may contact us at any time to confirm our data practices.
• Non-Discrimination: We will not discriminate against you for exercising any of your California privacy rights.

To exercise your California privacy rights, email us at privacy@proteachhomelearning.com with the subject line “California Privacy Request.” We will verify your identity and respond within 45 days as required by law.

In compliance with COPPA (16 CFR 312.10, amended April 2025) and applicable state laws, we retain personal information only as long as reasonably necessary. Our tiered retention policy:

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices — including COPPA-related requests and parent data deletion rights — please contact our Privacy team:

We may update this Privacy Policy from time to time. We will notify you of material changes via email and/or a prominent notice on our website at least 30 days before the change takes effect. Continued use of our services after the effective date constitutes acceptance of the updated policy.