Privacy policy
Effective date: [DATE] · Last updated: [DATE]
Draft. This document is pending attorney review and will be finalized before launch. Bracketed items are placeholders.
Masomo (“we”, “us”, “our”) is operated by [COMPANY LEGAL NAME], [ADDRESS], [PHONE], [PRIVACY EMAIL]. We provide an adaptive learning service for children in Pre-K through 5th grade. We designed the service for children, so we follow the U.S. Children's Online Privacy Protection Act (COPPA) and applicable state privacy laws.
1. Who uses the service
- Parents / guardians create an account, give consent, manage child profiles and pay for subscriptions.
- Children use the service on their parent's device through a child profile. Children do not create accounts, log in, or provide contact information.
2. Information we collect
From parents
| Information | Why |
|---|---|
| Name, email address | Account, receipts, password reset, service emails |
| Mobile phone number | Phone verification at signup, account recovery, service texts |
| Password (stored hashed), 4-digit parent PIN (stored hashed) | Security, keeping children out of parent settings |
| If you sign in with Google or Facebook: your name, email address and account ID from that provider | Signing you in. We never post to, or read anything else from, your Google or Facebook account |
| Billing details | Processed by Stripe. We never see or store full card numbers. |
| Consent records (date, time, notice version, IP address) | Proof of parental consent as required by COPPA |
About children (provided by the parent or created through use)
| Information | Why |
|---|---|
| Nickname (not required to be a real name), grade, reading level | Personalize questions, hints and difficulty |
| Learning activity: answers, correctness, hints used, time spent, skills mastered, placement results | Adapt learning, show progress, create parent reports |
| Short typed answers | Grade answers. We screen typed answers for personal details and remove them before any processing by our AI provider. |
We do not collect from children: email addresses, phone numbers, photos, precise location, contacts, or voice recordings.
Automatically
Device and log data (IP address, browser type, error reports, performance data) to keep the service secure and working. We do not use third-party advertising or behavioral tracking in child areas, and we do not show ads.
3. How we use information
- Provide, personalize and improve learning (adaptive questions, hints, placement, progress)
- Send parent emails and texts: signup, security (password/PIN changes), payments, trial reminders, monthly progress reports (you can opt out of reports)
- Security, fraud prevention, troubleshooting and legal compliance
We never sell personal information, use children's information for advertising, or build marketing profiles of children.
4. Artificial intelligence
We use an AI provider ([Anthropic]) to create practice questions and to personalize hints. When personalizing a hint we send only de-identified learning context — grade, reading level, the skill and recent mistakes on that skill. We do not send a child's name, nickname, the parent's contact details or any identifier that could identify the child. AI-generated content is validated before children see it.
5. How we share information
We share information only with service providers that help us run the service, under contracts requiring them to protect it and use it only for our purposes:
| Provider | Purpose |
|---|---|
| DigitalOcean | Hosting and storage (United States) |
| Stripe | Payments |
| Twilio / SendGrid | Text messages and email |
| Anthropic | AI question generation and hint personalization (de-identified data only) |
| OpenAI | Generating illustrations for questions (question content only — no child or parent data) |
| New Relic, Bugsnag | Performance monitoring and error reporting (personal data masked) |
| [Text-to-speech provider] | Reading questions aloud (question text only). Until a provider is chosen, narration uses the voice built into your device's browser. |
We may disclose information if required by law, to protect safety, or in a merger or acquisition (subject to this policy). We do not disclose children's personal information to third parties for any other purpose.
6. Parental consent (COPPA)
Before a child profile is created, we give parents a direct notice of our practices and obtain verifiable parental consent. Parents may consent to our collection and use of their child's information without consenting to disclosure to third parties beyond those integral to the service.
7. Your rights as a parent
At any time you can, from Parent area → Account → Privacy or by contacting [PRIVACY EMAIL]:
- Review the personal information we hold about your child
- Download a copy (export)
- Correct it
- Delete your child's profile and information
- Withdraw consent and stop further collection (this ends your child's use of the service)
We will verify that you are the parent before acting on a request. California and other state residents may have additional rights (access, deletion, correction, opt-out of sale/sharing — we do not sell or share for targeted advertising). We will not discriminate against you for using these rights.
8. Data retention
- Active accounts: kept while the account is active.
- Inactive accounts: an account is never considered inactive while it has an active paid subscription. Otherwise, accounts with no parent sign-in and no child activity for 12 months are deactivated; we email the parent before and at deactivation. If not reactivated within [30] days, the account and all child data are permanently deleted, with a final reminder before deletion.
- Trials that never convert: deactivated after 90 days and permanently deleted 30 days later. We email the parent before each step.
- Deletion requests: processed within [30] days.
- Backups: deleted data is removed from backups as they expire, within [35] days.
- Legal records (payment and consent records) may be kept longer where required by law, separated from learning data.
9. Security
We use encryption in transit (TLS) and at rest, hashed passwords and PINs, access controls with two-factor authentication for staff, audit logging, and regular security testing. No system is perfectly secure; if a breach affecting your information occurs we will notify you as required by law.
10. Children's use without consent
If we learn we collected a child's information without parental consent, we will delete it promptly. Contact [PRIVACY EMAIL].
11. Changes
We will notify parents by email of material changes and, where required, obtain new consent before applying changes to children's information.
12. Contact
[COMPANY LEGAL NAME] · [ADDRESS] · [PHONE] · [PRIVACY EMAIL] · or use our contact form.