Data and privacy

Homeschool Planner holds the structure of your children’s school year — names, grades, what they’re learning, what got done. We treat that data like the records it is: yours, never sold, deletable on demand, and protected with reasonable engineering practices. This page covers what we collect, how it’s protected, and what controls you have today.

At a glance

• What we collect: account info, household, children’s names + grades + birthdays, sessions, materials, attachments
• What we don’t: voice recordings, biometrics, cross-site tracking, payment numbers
• Where it lives: US-based managed cloud (Supabase + AWS), HTTPS everywhere, encrypted backups
• Best for: parents wanting a clear picture before they trust the platform with family records

What we store

The data behind your account, in plain terms:

• Your profile — name and email
• Your household — household name, the state you homeschool in
• Your children — first name, grade, birthday, colour, avatar
• Your school year(s) — start and end dates, vacations, holidays
• Your subjects — the per-child Required/Optional/Off matrix
• Your materials — books, websites, apps you’ve added, with subject and child tags
• Your scheduled activities — recurring rules across the year
• Your sessions — every planned and logged block, with date, child, subject, duration, completion status, and any notes or attachments
• Anything you upload — voice memo audio (transient — see below), worksheet photos attached to sessions, materials cover images

That’s the complete list. There’s no advertising profile, no behavioural tracker, no third-party data broker.

What we don’t store

• Voice memo audio after transcription. When you use Plan it with voice or the Voice button on a note, the audio is sent to a transcription service, the text comes back, and the audio is discarded. We don’t keep voice recordings on your account.
• Children’s biometric data. No facial recognition, no voiceprints. Avatars are decorative shapes or photos you upload — never derived from facial analysis or other biometrics.
• Cross-site behaviour. Cookies are limited to what’s needed to keep you signed in. We don’t track which other sites you visit before or after Homeschool Planner.
• Payment card numbers. When billing comes online (it’s not yet — Homeschool Planner is currently free), payment data will be held by the processor (Stripe), not by us. We’ll receive only a token saying you have an active subscription.

Where it lives

Your data is stored on managed cloud infrastructure (Supabase running on AWS) in the United States. Backups are encrypted at rest using industry-standard keys. Connections between your browser and the planner are HTTPS only — there’s no plain HTTP fallback.

Day-to-day operations (the planner running, your data syncing) happen on US-based servers. We don’t replicate to other regions yet, which means children’s data stays in US jurisdiction. If a future expansion requires non-US storage, we’ll notify users in advance and offer an opt-out.

Who can see it

• You. Always. You signed up; the account is yours. You can read, edit, or delete every piece of data through the app.
• The Homeschool Planner team. For support and debugging only, on a need-to-know basis. We don’t browse accounts for fun, and access is logged. If you email us about a bug, we may briefly look at your account to reproduce the issue — and we’ll mention it in the response if so.
• Nobody else. We don’t sell data. We don’t share with curriculum publishers, state agencies, ad networks, AI training datasets, or analytics firms.

When the Compliance view ships, you’ll be able to print or export a state-required report yourself — but the planner won’t send anything to a state agency on your behalf without a deliberate, per-report action by you. The state never sees your data unless you decide to send it.

Deleting your account

The destructive option is Settings → Account → Delete account. The button asks for confirmation, then removes:

• Your profile and household
• Every child you added
• Every session, scheduled activity, planned block, and logged work
• Every material and attachment (photos, PDFs, links)
• Your subject matrix and school year settings

The deletion is immediate and not reversible — there’s no soft-delete, no 30-day grace period, no support tickets that can recover the data afterwards. Anonymized aggregate analytics (counts, never identifiable) may persist.

Getting your data out

A formal export feature isn’t in the early-access build yet. In the meantime, here are three workarounds:

• Print the day, week, or settings pages from the in-app print buttons. Save as PDF for digital records, or print physically.
• Photograph or screenshot the children list, subject matrix, scheduled activities, school year, and materials list — they’re each one screen, so a phone photo captures each comprehensively.
• Email us at [email protected] if you need a structured export (CSV/JSON) of your sessions; we’ll generate one manually while the export tool is built. Specify what you need (e.g., “all sessions for 2024-25 school year as CSV”) and we’ll respond within a few days.

When the export tool ships, it’ll bundle everything (children, materials, subjects, sessions, attachments) into one downloadable archive. The data layer is already structured for it; what’s missing is the UI.

Children’s privacy

Homeschool Planner is a parent’s tool. Accounts are owned by adults, and the child records you create are records about your children — not separate accounts your children sign into. This distinction matters for several privacy regulations (COPPA in the US, similar regulations elsewhere).

Specifically:

• We don’t direct marketing at children or build a profile of any child for advertising or training purposes.
• We don’t share child records with anyone outside your account, including curriculum vendors who might want them.
• The minimum child data we need is name and grade; birthday is optional but used for compliance reports that ask for one.
• Children’s names appear in your weekly sheets, scheduled activities, and reports — but only ever within your account.

If a child’s circumstances change and you want their record removed (without deleting the whole account), the Remove button on the Family page does exactly that.

Cookies

We use cookies for one thing: keeping you signed in. The first time you sign in, a session cookie is set on your browser; it expires when you sign out or after a period of inactivity (typically several weeks). We don’t use cookies for tracking, advertising, or third-party analytics.

Modern browsers’ privacy modes (Safari ITP, Firefox ETP, Chrome’s third-party cookie phase-out) don’t affect Homeschool Planner because we don’t use third-party cookies. Sign-in works the same regardless of which privacy settings you have on.

Reporting a concern

Email [email protected] with anything you’d like to flag — a record that shouldn’t be there, an attachment that won’t delete, a privacy question, or a security issue you noticed. A human responds, usually within a day. Sensitive reports go straight to the founder.

If you’ve identified a security vulnerability (a way to access another account’s data, for example), please email us before posting publicly. We respond fast to security reports and credit researchers in changelog notes if requested.