Privacy Policy

Heduly (“Heduly,” “we,” “us”) provides parent-controlled homeschool planning tools. This Privacy Policy explains what information we collect, how we use it, and the choices you have. Heduly is designed for parents and legal guardians. We take children’s privacy seriously and follow the principles of the U.S. Children’s Online Privacy Protection Act (COPPA).

1. Who Heduly is for

Only adults 18 years or older may create accounts. A parent or legal guardian sets up the family, adds children, and controls all information. Children never create their own accounts and never provide an email address. Children sign in with a family code and PIN set by the parent and can only mark work complete and make choices the parent has allowed.

2. Information we collect

From parents

• Name, email address, password (stored hashed), family name, and home state

About children (entered by the parent only)

• First name, birthdate (used for age/grade estimation), grade level, avatar, interests, and chosen learning philosophy
• Assignments, completion progress, optional observation journal notes and photos, and optional hours log

Billing

• Payments are processed by Stripe. We do not receive or store full card numbers. We store a customer and subscription identifier and plan status.

Technical

• Basic log and usage data necessary to operate and secure the service

We collect only the minimum information needed to provide the service.

3. How we use information

• Provide and personalize the service
• Generate philosophy-matched weekly plans using AI
• Process subscriptions and send account/billing communications
• Maintain security, prevent abuse, and comply with law
• Produce the compliance aids you request (hours log, portfolio export, etc.)

We do not sell personal information. We do not use children’s information for advertising. We do not show third-party ads to children.

4. Children’s privacy (COPPA)

By creating an account and adding a child profile, the parent or legal guardian provides verifiable parental consent under COPPA for the collection and use of the limited personal information described in this Policy for the purpose of providing the service to their family.

We follow these principles:

• Minimal data collection
• No direct collection of personal information from children
• No disclosure of children’s information for third-party marketing
• Parents can review, correct, or delete their children’s information at any time

Photos uploaded to the observation journal are optional, parent-uploaded only, stored securely, never used for AI training or advertising, and deleted when the related child profile or family account is deleted.

If you believe a child under 13 has provided us information without parental involvement, contact us immediately at learn@heduly.com and we will delete it.

5. AI processing

To generate weekly plans, we send limited context to our AI provider (currently Anthropic): the child’s first name, grade, chosen philosophy, interests, and the family’s weekly rhythm and state. This information is used solely to produce the plan returned to you. It is not used to train AI models and is not shared for any other purpose. You review and approve all plans before your child sees them.

6. Service providers

We share information only with service providers that help us operate Heduly, under contracts that limit their use of the data to our instructions. Current providers include:

• Supabase (database, authentication, storage)
• Anthropic (AI plan generation)
• Stripe (payments)
• Resend (email)
• Vercel (hosting)

We do not sell your data or share it for others’ advertising.

7. Security

We use authentication, row-level security that isolates each family’s data, and encryption in transit. No system is perfectly secure, but we take reasonable measures to protect your information.

8. Retention and deletion

We retain your information while your account is active. When you delete a child profile or your family account, we delete the associated personal information, except for limited records we are required to keep for legal, security, or billing purposes. You may request deletion at any time by emailing learn@heduly.com.

9. Your rights and choices

You may access, update, or delete your and your children’s information in the app or by contacting us. Depending on your location, you may have additional rights (access, correction, deletion, portability). We honor valid requests for all users.

10. Where your data is processed

Heduly is operated in the United States. Information is processed and stored in the United States.

11. Cookies

We use only the cookies and local storage necessary to keep you signed in and operate the application. We do not use third-party advertising or cross-site tracking cookies.

12. Changes to this policy

We may update this Privacy Policy. We will post the revised version with a new “Last updated” date. For material changes, we will provide additional notice. Continued use of the service after the effective date constitutes acceptance.

13. Contact

Heduly - learn@heduly.com.