📋 Privacy Policy

Welcome to Homeducate. We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our homeschool management platform.

By using Homeducate, you agree to the collection and use of information in accordance with this Privacy Policy.

For the complete, detailed Privacy Policy, please see: PRIVACY-POLICY.md

1. Information We Collect

Personal Information You Provide:

• Account: Email, username, password (encrypted)
• Profile: Family name, student names, exam dates
• Educational: Subjects, timetables, work logs, assignments, resources
• Payment: Billing info (processed by Stripe)

Automatically Collected:

• IP address, browser type, device info
• Session cookies (authentication only)
• Usage data (pages visited, features used)

2. How We Use Your Information

• Provide and maintain the Homeducate platform
• Manage your account and authentication
• Process subscription payments
• Send important emails (verification, password resets, billing)
• Improve the service and fix bugs
• Comply with legal obligations

3. How We Share Your Information

We do NOT sell, rent, or trade your personal information.

We only share with:

• Stripe: Payment processing (EU-based)
• Supabase: Database hosting (EU data centers)
• Resend: Transactional emails
• Authorities: Only if legally required

4. Your Data Protection Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request copies of your data
• Rectification: Correct inaccurate data
• Erasure: Delete your data ("right to be forgotten")
• Restrict Processing: Limit how we use your data
• Data Portability: Download your data in machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time
• Lodge Complaint: File complaint with UK ICO

To exercise these rights: Email privacy@homeducate.com - We'll respond within 30 days.

5. Data Security

Security Measures:

• ✅ Password encryption with bcrypt
• ✅ HTTPS/SSL encryption for all data
• ✅ Organization-scoped access control
• ✅ Token-based authentication
• ✅ Rate limiting against attacks
• ✅ Regular backups

6. Data Retention

• Active Accounts: Data retained during subscription
• Cancelled Accounts: 30 days grace period, then permanently deleted
• Tax Records: 6 years (UK legal requirement)

7. Children's Privacy

• Parent/guardian accounts must be 18+ years old
• Parents create and control all student accounts
• We collect only essential educational data for students
• No sensitive personal data collected from children
• Parents can access, edit, and delete all student data

8. Cookies

We use minimal cookies:

• Authentication Cookie: Keeps you logged in (essential, cannot be disabled)
• No Analytics: We don't use Google Analytics or tracking cookies
• No Advertising: No ad networks or retargeting
• No Social Media Tracking: No Facebook/Twitter pixels

View full Cookie Policy →

9. International Data Transfers

Homeducate operates from the UK. Data may be transferred to/processed in UK/EU with adequate protection through:

• EU-based service providers where possible
• Standard Contractual Clauses (SCCs) for non-EU transfers
• Full GDPR compliance

10. Your Responsibilities

To help protect your data:

• Keep your password secure (8+ characters, mixed case)
• Don't share your account
• Log out on shared devices
• Report suspicious activity immediately

11. Contact Us

Questions about privacy?

• Email: privacy@homeducate.com
• Website: homeducate.online
• Response Time: Within 30 days

UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

12. Updates to This Policy

We may update this Privacy Policy. When we do:

• We'll update the "Last Updated" date
• We'll email you about material changes
• Continued use constitutes acceptance

---

By using Homeducate, you acknowledge that you have read and understood this Privacy Policy.