SuperEduc8 Privacy Policy — For Students, Parents, and Teachers
Last updated: September 27, 2026
Important note before you read further:This policy accurately describes what SuperEduc8 actually collects, stores, and does with data today, based on a full technical review of our systems. However, because SuperEduc8 serves children as young as 7, this policy - and in particular our parental consent process - is currently undergoing formal legal review to ensure it meets all requirements under laws like the U.S. Children's Online Privacy Protection Act (COPPA) and applicable data protection law for minors. We are publishing this accurate draft now so parents have real, honest information, while we complete that review. We will update this notice as that process concludes.
1. Who We Are
SuperEduc8 is an AI-powered learning platform for students, with tools for parents and teachers to support that learning. This policy applies to everyone who uses SuperEduc8 - students, parents/guardians, mentors, and teachers.
2. Age Requirements and How Signup Works
SuperEduc8 is designed for students ages 7 to 17.
- Students 13 and older can create their own account directly.
- Students under 13 cannot sign themselves up. A parent or guardian must provide their email address and give consent before a child's account is created. We currently do this by sending the parent/guardian an email with an approval link, which expires after 72 hours if not used. We want to be transparent: we are currently reviewing whether this consent method meets the specific legal standard required for children's services, and may strengthen this process (for example, requiring a more robust verification step) as a result of that review.
- Parents/guardians who approve a child's account automatically get ongoing access to a parent dashboard showing that child's learning progress.
3. What We Collect
From Students
- Name and login credentials (email, or for younger/supervised students, an account we help set up - never one the child creates unsupervised)
- Age band (a range like "7-8" or "13-14," not an exact birthdate)
- School-related info: year group, curriculum followed, preferred study language (English, Arabic, French, or Spanish), favorite subjects
- Homework photos - if a student uses homework scanning, we temporarily store the photo (by default deleted automatically after 48 hours, or up to 30 days if the student chooses to keep it longer) and send it to our AI provider to generate feedback
- Voice input - how this works depends on the student's device:
- On an iPhone/iPad, or any browser that doesn't support built-in speech recognition, a student's recorded voice is sent to our servers and forwarded to our AI provider (Groq) to be converted into text. That audio recording is not saved anywhere - it's used only to produce the text, then discarded.
- On most desktop browsers (like Chrome), speech is converted to text directly in the browser, and no audio ever leaves the device.
- Either way, only the resulting text is used in the tutoring conversation itself.
- Voice output - when the AI tutor or Voice Buddy speaks back, the text of its reply is sent to OpenAI to generate the spoken audio. We don't save that audio file; it's played back and then discarded.
- Conversations with the AI tutor - we keep a record of these so a student can pick up where they left off, and so we can review for safety and appropriate use. These are visible to the student on their own account. Parents and teachers do not currently see the full content of these conversations - they see summaries of learning progress (like topics covered and time spent), not the actual conversation text.
- Conversations with "8," our in-app help assistant for questions about using the platform (not learning/tutoring) - unlike AI tutor conversations, these are not saved. They exist only in your browser while the chat is open and are cleared when you close it or refresh the page.
- Essays and written work a student submits, along with AI-generated feedback
- Learning activity: planner items, quiz/flashcard results, mastery tracking, grade estimates
- Shared group notes and flashcard sets, if a student participates in a study group (this is not private messaging between students)
From Parents/Guardians
- Email address (for the consent process and ongoing progress updates)
- Access to your child's learning progress through a secure parent dashboard link
- If you subscribe to a paid plan: your subscription status, plan type, billing interval, and (for family plans) how many children are covered. Payment card details are handled entirely by our payment processor, Stripe - we never see or store your full card number.
From Teachers
- Account and school information
- Access to aggregate class/student progress data (not individual conversation or essay content)
4. Who Can See What
| Data | Student | Parent/Guardian | Teacher |
|---|---|---|---|
| Their own AI tutor conversations | Full access | Progress summary only | Aggregate only |
| Learning progress (mastery, activity) | Yes | Yes | Yes (aggregate) |
| Homework photos & essays | Yes | No | No |
5. Third-Party Services We Use
- Supabase - our core database, authentication, and file storage
- Groq - our AI provider for tutoring conversations, essay feedback, homework photo analysis, voice-to-text conversion (on devices where this happens server-side, see Section 3), and our "8" help assistant. This means homework photos and written content are sent to Groq to generate feedback.
- OpenAI - converts the AI tutor's and Voice Buddy's text replies into spoken audio. Only the reply text and a voice selection are sent; no student audio, photos, or account details are shared with OpenAI.
- Stripe - processes subscription payments for paid plans. We never see or store your full card number.
- Resend - sending parental consent emails, welcome emails, and progress notifications
- Sentry - technical error monitoring, to help us catch and fix bugs
We do not use SuperEduc8 student data for advertising, and we do not sell student data to anyone.
6. How Long We Keep Data
- Homework photos: automatically deleted after 48 hours by default, or up to 30 days if a student chooses to extend that.
- Voice recordings sent for server-side transcription (see Section 3): never saved - used only in the moment to produce text, then discarded.
- "8" help-assistant conversations: never saved - exist only in your browser for the current session.
- Subscription and billing status: kept for as long as your account is active, so we can correctly apply your plan; removed when your account is deleted (Stripe retains its own payment records separately, as required for financial recordkeeping).
- Everything else (chat history, essays, learning progress, planner data): currently kept until the account is deleted. We recognize this should have a clearer, more limited retention period given this is children's data, and are working on adding a specific retention/deletion policy for this rather than keeping it indefinitely.
- Account deletion: deleting an account removes the associated student record and related data. We are also reviewing our deletion process to confirm homework photos stored in our file system are fully and reliably removed alongside the database record, not just the database entry itself.
7. Parents' Rights
As a parent or guardian, you can: review what learning progress data we have about your child through your parent dashboard; request your child's account be deleted at any time by contacting us; withdraw consent for your child's account at any time, which will deactivate the account.
8. Security
We use encrypted connections (HTTPS/TLS) for all data in transit, and access controls limiting who can view student data based on their role (student, parent, teacher). No system is perfectly secure, but we take reasonable, ongoing steps to protect children's information specifically, given its sensitivity.
9. Changes to This Policy
Given this policy is currently under active legal review, we expect to update it. We'll update the date at the top whenever we do, and will make reasonable efforts to notify parents of any material changes, especially anything affecting how their child's data is handled.
10. Contact Us
Questions or requests about your child's data, including deletion requests, can be sent through our support contact.