Privacy policy
Last updated 14 October 2026 · Draft for review before the first paid family
StudyPal is made by Aisoft LLC. It helps a child with homework using their own school material. This page says what we collect, why, who processes it, and how a parent can see or delete it. StudyPal is for children in kindergarten to 8th grade, so it is built for the U.S. Children's Online Privacy Protection Act (COPPA): a parent or guardian creates the account and consents for the child, and the child never gives us an email address.
What we collect
- From the parent at sign-up: parent name and email, the child's first name, grade, school (optional) and country, and the parent's consent.
- What the family adds: photos or files of homework, study guides and tests; notes; and answers the child types or says in practice and tutoring.
- How it is used: which pages and practice were opened and the results, so StudyPal can show progress and pick the next thing to practise.
- Payment (paid plan): handled by Stripe. We keep only the plan status; we never see or store card numbers.
Why
Only to run StudyPal for your family: to make lessons and practice from your child's material, show you what is due and how it is going, keep the account secure, and bill the plan. We do not sell personal information, show ads, or use your child's data for advertising.
Who processes it
- Google Gemini reads uploaded sheets and writes lessons, practice and tutoring replies.
- Vercel hosts the app; Neon and Supabase store account data and material.
- Cloudflare Turnstile checks sign-up and repeated log-in attempts for bots.
- Stripe takes payments for the paid plan.
- Google Analytics counts visits to the public pages (not inside a child's account).
Each processes data only to provide its service to us.
A parent's choices
- See what StudyPal holds for your child in the parent view of the app.
- Delete the whole family account and everything in it from Account & plan in the app (parents only). Activity logs kept by our providers are purged within 30 days.
- Stop further collection at any time by deleting the account. A child cannot be signed up without a parent.
How long we keep it
For as long as the family account is open. When an account is deleted we remove its data within 30 days, except billing records the law requires us to keep.
Security
Data travels over HTTPS and is stored with the providers above. Children sign in with a family PIN; parents have a separate login.
Contact
Aisoft LLC · privacy@aisoft.us