Privacy Policy

The short version

• A parent creates the family account and every student sign-in. Children can't open an account on their own.
• We keep what's needed to teach and grade: names, sign-in details, lesson progress, exam answers and scores, written answers, notes and any photos a student attaches.
• We never sell personal information, never show advertising and never build advertising profiles.
• Payments are handled by Stripe. We never see or store card numbers.
• A parent can review their child's work at any time and can ask us to delete it.

What we collect

From parents

• Your name, email address and password. Passwords are stored only as a one-way hash (bcrypt), never in readable form.
• Your family name and the number of student seats on your plan.
• Billing status from Stripe: your Stripe customer and subscription identifiers, your plan, its status and renewal date. Stripe holds your card details. We don't.
• The grades and comments you give your students' written work.

About students (entered by their parent)

• A display name and the sign-in email or username and password the parent sets.
• If the family uses the Xogos platform, the student's Xogos user number, so grades can be shared with the Xogos Parent Portal.

Created as a student learns

• Lesson progress: which lessons, activities and videos are started or finished.
• Exam attempts: the answers chosen, scores, and which attempt it was. We also record when an exam is left part-way, because that counts as an attempt.
• Written work: activity reports, the written final question on each exam, and reflections.
• Notes, highlighting on the student's own answers, and study settings.
• Photos a student chooses to attach to an activity. They are stored privately and shown only to the student and their family through short-lived links.
• Basic usage events (for example, "lesson opened" and "exam submitted") so families and teachers can see progress. These are tied to an account or to an anonymous number, not used for advertising.

Stored in your own browser

Some progress, the Xogos sign-in token and site settings are kept in your browser's local storage so lessons work quickly and even offline. Signing in to a family account uses one essential, secure cookie that keeps you signed in. We do not use advertising or tracking cookies.

Site statistics

To see which pages are useful, we may count visits with a privacy-friendly analytics tool that sets no cookies and collects no names, emails or other personal information. Only page addresses and general information, such as the type of device, are counted.

How we use it

• To run the courses: show lessons, score exams, save progress and work across devices.
• To let parents see and grade their children's work.
• To manage accounts, subscriptions and support requests, and to send account email such as password-reset links and a welcome message.
• To keep the service secure and fix problems.

We don't use students' information for advertising, and we don't sell or rent anyone's personal information.

Who we share it with

Only these service providers, and only to run the service:

• Amazon Web Services: hosting, the database, private photo storage and outgoing email.
• Stripe: payments and subscription billing.
• Xogos Gaming's platform, for families who use it. When a student launches All Science Academy from Xogos, their scores, written answers and time on task go to the Xogos Parent Portal, where their parent grades them. The grades come back to the student here.
• YouTube: lesson videos play through YouTube's privacy-enhanced mode (youtube-nocookie.com), which sets no tracking cookies until a video is played. YouTube's own privacy policy applies once a video plays.
• Google Fonts: the site's typefaces load from Google's font service.

We may also disclose information if the law requires it, or to protect someone's safety. If All Science Academy is ever sold or merged, this policy would continue to apply to information collected under it.

Children's privacy (COPPA)

Many of our students are under 13. In line with the Children's Online Privacy Protection Act, children cannot create accounts themselves. A parent or guardian creates the family account and sets up each student sign-in, which is how we get parental consent. We collect from children only what's needed to teach and grade them, as listed above.

A parent can, at any time:

• Review their child's work, grades and progress from the parent page.
• Reset their child's password or close the student's sign-in.
• Ask us to delete their child's information, or refuse further collection, by writing to support@allscienceacademy.com or using our contact form.

If we learn we've collected a child's information without a parent's consent, we will delete it.

How long we keep it, and deleting it

We keep account and learning records while the family account is open, so students keep their progress and grades. When a family asks us to delete their account, we delete the parent and student accounts and everything attached to them (progress, exam attempts, written work, notes and photos) from our live systems. Backup copies age out within about 7 days. Billing records that Stripe and tax law require may be kept longer.

How we protect it

• The site and all its connections use encrypted HTTPS.
• The database and photo storage are encrypted at rest, and the database accepts connections only from our servers.
• Passwords and sign-in tokens are stored only as one-way hashes.
• Student photos are private and reached only through short-lived signed links.

No system is perfectly secure. If we ever have a breach that affects your information, we will tell you promptly.

Your choices and rights

You can see and correct most of your information from your account page. To get a copy of your family's information, delete it, or ask any privacy question, contact us. Depending on your state, you may have further rights under laws such as the California Consumer Privacy Act; we honour these requests for all families, wherever they live.

Changes

If we change this policy, we'll update the date at the top. For important changes, we'll tell account holders by email before the change applies.

Contact

All Science Academy (Xogos Gaming) · support@allscienceacademy.com · Contact form