WholeChildAI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and service at wholechildai.org and app.wholechildai.org.

By using WholeChildAI, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create an account, we collect:

Student Information

To generate personalized learning plans, adult users enter information about the students they support. This may include:

Payment Information

Subscription payments are processed by Stripe. We do not store your credit card number or full payment details on our servers. Stripe handles all payment data in accordance with PCI-DSS standards.

Usage Data

We automatically collect certain information when you use the service, including:

2. How We Use Your Information

We use the information we collect to:

We do not use your information for advertising, and we do not sell your personal data to third parties.

3. Children's Privacy (COPPA)

WholeChildAI is a tool for adults. Parents, teachers, and other adult educators use our platform on behalf of the children they support. Children do not create accounts or directly interact with our service.

We do not knowingly collect personal information directly from children under 13. Student information (name, grade, subjects) is entered exclusively by adult account holders. If you believe a child has provided us personal information without adult oversight, please contact us at support@wholechildai.org and we will promptly delete it.

Our service is designed for adults (18+) who use it to support children's education. Adults are responsible for what student information they choose to enter.

4. Data Sharing & Third Parties

We share data only with the service providers necessary to operate WholeChildAI:

OpenAI

Student information you enter is sent to OpenAI's API to generate learning plans. OpenAI processes this data according to their Privacy Policy. We use OpenAI's API with data processing settings that do not allow OpenAI to use your data to train their models.

Stripe

Subscription billing is handled by Stripe. Payment information is transmitted directly to Stripe and is governed by Stripe's Privacy Policy.

SendGrid

Transactional emails (account confirmation, password resets) are sent via SendGrid. Your email address is shared with SendGrid solely for this purpose.

Supabase

Our database infrastructure is hosted on Supabase (PostgreSQL), which stores your account and student data securely in the United States.

Google Analytics / Tag Manager

We use Google Analytics via Google Tag Manager to understand aggregate usage patterns on our marketing site. This data is anonymized and does not include student information.

We do not share your personal data with any other third parties for marketing or advertising purposes.

5. Data Retention & Deletion

We retain your account information for as long as your account is active. Student information is retained until you delete it from your account or close your account.

To request deletion of your account and all associated data, email us at support@wholechildai.org. We will process deletion requests within 30 days.

Some data may be retained for a limited period after deletion to comply with legal obligations or resolve disputes.

6. Security

We take reasonable measures to protect your information:

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

To exercise any of these rights, contact us at support@wholechildai.org.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify users by email. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: