1. Introduction
ClassGenie is operated by Soleo Technologies, a sole proprietorship based in Austin, Texas, founded by Laura Dovalina. This policy explains what information we collect, why we collect it, and what choices you have.
We take children's privacy seriously. ClassGenie is built on a parent-first model: parents create accounts, parents add student profiles, and parents control all data about their children. We never collect data from children directly, and we never use children's data for advertising or behavioral profiling.
Questions? Email hello@homescholarapp.com with the subject line "Privacy Question."
2. Information We Collect
From parent / teacher accounts
- Full name, email address, hashed password
- Optional profile photo
- State of residence (for state-specific legal documents)
- Payment information — processed and stored by Stripe; ClassGenie never sees or stores card numbers
- Subscription status and billing history
- Account preferences and settings
From student profiles (created and managed by parents)
- First name and last initial or nickname (full last name optional)
- Age or grade level (we do not collect full date of birth)
- Learning style preferences
- Strengths, areas for growth, and accommodations / IEP notes — all parent-entered
- Subject enrollment, curriculum assignments, grades, and academic performance
- Assignment submissions and uploaded student work (for AI grading)
- Generated transcripts, report cards, and progress data
- Calendar events and schedule data
- Optional parent-uploaded student photo
From co-op features
- Co-op name, location, description, and member roles
- Invite codes, join requests, and shared resources
Automatically collected
- Anonymized IP address, browser type, device type
- Pages visited, time spent, referral source
- Session recordings via Microsoft Clarity (sensitive fields masked)
- Essential and analytics cookies — never advertising cookies
3. How We Use Your Information
- To provide the core service: planning, gradebook, assignments, transcripts, reports
- To generate AI-powered educational content via Google Gemini (see next section)
- To process payments via Stripe
- To send transactional emails — confirmations, password resets, billing — via GetResponse
- To improve the service through anonymized analytics
- To prevent fraud and ensure security
- To comply with legal obligations
4. AI Data Processing Disclosure
ClassGenie uses Google's Gemini API to power AI features (lesson plans, worksheets, study guides, grading suggestions, etc.). When you use an AI tool, the following is sent to Gemini:
- Subject name and grade level
- Topic or assignment description
- Learning style (when relevant to the generation)
- Uploaded student work text (for AI grading only)
What is never sent to Gemini: student names, student photos, parent names or emails, payment information, IP addresses, or device information.
Per Google's API terms, Gemini does not retain ClassGenie user data and does not use it to train its models. AI-generated content is clearly labeled as AI-generated. AI-suggested grades require parent review and approval before they become final — there is no fully automated decision-making about students.
You can opt out of AI processing at any time from Account Settings → Privacy → AI Tools. AI features become unavailable; everything else continues to work.
5. Legal Basis for Processing (GDPR)
- Consent: AI features, analytics cookies, and other optional processing
- Contract performance: Account management and core educational features
- Legitimate interest: Security, fraud prevention, service improvement — children's interests always override
- Legal obligation: Tax record-keeping and lawful requests
6. Children's Privacy (COPPA)
ClassGenie is designed for use by parents and teachers managing children's education. We collect information about children under 13 only with verifiable parental consent obtained during account creation.
The parent-first model means:
- Children cannot create independent ClassGenie accounts
- Parents create student profiles and control all data
- Parents review and approve any AI-suggested grades or feedback
Parental rights under COPPA:
- Review all personal information we have about your child
- Request deletion of your child's personal information
- Refuse further collection of your child's information
- Withdraw consent at any time
Exercise these rights via Account Settings or by emailing hello@homescholarapp.com with the subject "Children's Privacy Request." If we ever discover we have collected information from a child without verified parental consent, we will delete it immediately.
7. How We Share Information
We share data only with the processors required to run the service:
- Supabase — database, authentication, file storage (operates under a Data Processing Agreement)
- Google Gemini — AI generation, receives only the limited data above; does not retain or train
- Stripe — payment processing (independent controller for payment data)
- GetResponse — transactional email delivery
- Cloudflare — hosting, CDN, DNS, SSL
- Google Analytics 4 — IP-anonymized analytics, advertising sharing disabled
- Microsoft Clarity — session recording with sensitive field masking
We may disclose information if required by law, court order, or to protect safety. We will notify affected users of any such disclosure unless legally prohibited.
8. Cookies and Tracking Technologies
See our full Cookie Policy for details. Summary:
- Essential cookies (authentication, session) — required, no consent needed
- Analytics cookies (Google Analytics, Microsoft Clarity) — set on every visit to understand which pages help
- No advertising or retargeting cookies, ever
9. Data Retention
- Active account data: retained while your account is active
- Student academic records: retained 1 year past account deletion (for transcript requests)
- Uploaded student work: deleted automatically 1 year after the school year ends
- AI-generated content: deleted after 1 year
- Payment records: retained 7 years (US tax law)
- Analytics: anonymized after 14 months
- Deleted accounts: purged from active systems within 30 days; from backups within 90 days
10. Data Security
- TLS / HTTPS encryption in transit
- AES encryption at rest (via Supabase)
- Row Level Security so users only access their own data
- bcrypt password hashing
- Regular security audits and access controls
We will notify affected users within 72 hours of discovering a data breach.
11. Your Rights
For all users
- Access, correct, or delete your data
- Export everything as JSON or ZIP
- Withdraw consent for AI processing or analytics
For EU / UK users (GDPR)
- Restrict or object to processing
- Lodge a complaint with your supervisory authority
- No automated decision-making — AI grading always includes human review
For California users (CCPA / CPRA)
- Know what we collect, delete it, opt out of sale (we do not sell)
- Non-discrimination for exercising your rights
12. International Data Transfers
Data is stored in the United States via Supabase. EU/UK transfers are protected by Standard Contractual Clauses with our processors. By using ClassGenie from outside the US, you consent to this transfer.
13. Changes to This Policy
We notify you by email of material changes at least 30 days before they take effect. Continued use after the effective date constitutes acceptance. Previous versions are archived and available on request.
14. Contact Us
Email: hello@homescholarapp.com
Mail: Soleo Technologies, Austin, TX
Children's privacy requests: subject line "Children's Privacy Request"
Response time: within 30 days (45 days for complex requests, with notice)