Privacy Policy

1. Information We Collect

1.1 Information You Provide to Us

We collect information that you provide directly to us when you:

• Account Information: When you create an account, we collect your name, email address, password (stored securely using industry-standard hashing), and role (Parent, Student, or Admin)
• Student Information: When you create student accounts, we collect student names, email addresses, grade levels, and passwords
• Educational Content: We store assignments, questions, submissions, grades, and other educational content you create or upload
• Payment Information: When you subscribe to a paid plan, we collect payment information through our third-party payment processor (Stripe). We do not store your full payment card details on our servers
• Communication Data: If you contact us for support, we collect the information you provide in your communications

1.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

• Usage Data: Information about how you interact with the Service, including pages visited, features used, and time spent on the platform
• Device Information: Your IP address, browser type, operating system, and device identifiers
• Log Data: Server logs that may include IP addresses, access times, and error messages
• Cookies and Tracking Technologies: We use cookies and similar technologies to maintain your session, remember your preferences, and analyze Service usage. See our Cookie Policy for more details

1.3 Information from Third Parties

We may receive information about you from third-party services:

• Authentication Providers: If you sign in using Google OAuth, we receive your name, email address, and profile picture from Google
• Payment Processors: Our payment processor (Stripe) provides us with transaction information and subscription status

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain the Service: Create and manage your account, process transactions, and deliver the features you request
• To Improve Our Service: Analyze usage patterns, identify technical issues, and develop new features
• To Communicate With You: Send you service-related notifications, respond to your inquiries, and provide customer support
• To Send Marketing Communications: With your consent, send you promotional emails about new features, updates, or special offers. You can opt out at any time
• To Ensure Security: Detect, prevent, and address fraud, security breaches, and other harmful activities
• To Comply with Legal Obligations: Meet legal requirements, respond to legal processes, and protect our rights
• To Personalize Your Experience: Customize content and features based on your preferences and usage patterns

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Payment Processing: Stripe processes payments and manages subscriptions
• Email Services: SendGrid sends transactional and marketing emails
• Authentication: Google OAuth for single sign-on authentication
• Hosting and Infrastructure: Cloud service providers that host our application and databases

These service providers are contractually obligated to protect your information and may only use it for the purposes we specify.

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or other legal processes
• Requests from government or law enforcement agencies
• Enforcement of our Terms of Service or other agreements
• Protection of our rights, property, or safety, or that of our users or others

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or use of your information.

3.4 With Your Consent

We may share your information with your explicit consent or at your direction.

4. Your Rights and Choices

You have certain rights regarding your personal information, including:

4.1 Access and Portability

You have the right to access the personal information we hold about you and to receive a copy of your data in a portable format. You can access much of your information directly through your account settings. For additional data or assistance, please contact us at hi@dibbledevelopment.com.

4.2 Correction and Updates

You can update most of your personal information directly through your account settings. If you need to correct information that cannot be updated through your account, please contact us.

4.3 Deletion

You have the right to request deletion of your personal information. You can delete your account through your account settings, which will remove your personal information from our active systems. Please note that we may retain certain information as required by law or for legitimate business purposes, such as:

• Records required for tax or financial reporting
• Information necessary to resolve disputes or enforce agreements
• Data stored in backup systems (which will be deleted according to our retention schedule)

4.4 Objection and Restriction

You have the right to object to certain processing of your personal information and to request restriction of processing in certain circumstances. Contact us to exercise these rights.

4.5 Opt-Out of Marketing

You can opt out of receiving marketing communications from us by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your email preferences in your account settings
• Contacting us directly at hi@dibbledevelopment.com

4.6 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be Informed: You have the right to be informed about how we collect and use your personal data (this Privacy Policy serves that purpose)
• Right of Access: You can request access to your personal data
• Right to Rectification: You can request correction of inaccurate data
• Right to Erasure: You can request deletion of your personal data
• Right to Restrict Processing: You can request limitation of how we process your data
• Right to Data Portability: You can request your data in a structured, commonly used format
• Right to Object: You can object to processing based on legitimate interests
• Rights Related to Automated Decision-Making: You have rights regarding automated processing and profiling

To exercise any of these rights, please contact us at hi@dibbledevelopment.com. We will respond to your request within 30 days.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

For detailed information about the types of cookies we use, their purposes, and how to manage them, please see our Cookie Policy.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Secure password storage using industry-standard hashing algorithms
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure hosting infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Information: Retained while your account is active and for a reasonable period after account deletion to comply with legal obligations
• Educational Content: Retained while your account is active. You can delete content at any time through the Service
• Payment Records: Retained as required by law for tax and financial reporting purposes (typically 7 years)
• Log Data: Retained for up to 12 months for security and troubleshooting purposes

When we delete your information, it will be removed from our active systems, but may remain in backup systems until those backups are overwritten according to our retention schedule.

8. Children's Privacy

Our Service is designed for use by parents and educators to manage educational content for students. Student accounts are created and managed by parent accounts.

We collect limited information from student accounts (name, email, grade level) as necessary to provide the Service. Parents have full control over student accounts and can delete them at any time.

We do not knowingly collect personal information from children under 13 years of age without parental consent. If you believe we have collected information from a child under 13 without proper consent, please contact us immediately at hi@dibbledevelopment.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

If you are located in the EEA, we ensure that appropriate safeguards are in place for such transfers, such as Standard Contractual Clauses approved by the European Commission.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this page
• Sending you an email notification (for significant changes)
• Displaying a prominent notice on our Service

You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

For users in the EEA, you also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.