Privacy policy

The short version. We keep what the site needs to work: your email, your children's first names and grades, and their practice work. We don't sell it, show ads, or use it to train anything. Three features send a child's own words or a photo of their work to an outside AI service, named below: the tutor, photo grading and the marking of written answers. The person who runs the site, and any admin he authorizes, sees how often each family uses it, as counts, never your children's work. A co-parent or tutor you invite sees your children's work only because you added them, and you can remove them at any time. Friends in another family are off unless you turn them on, and both families approve each friendship. A teacher outside your family sees a child's class work only after you enrol that child yourself, only for that class, and only the fields listed below — and you can remove the class whenever you like. You can download or delete everything at any time.

What we collect

• From you: your email address, a password (stored by our login provider, never by us in plain text), and an optional family name.
• About each child you add: a first name, a school grade, and a login password you choose. A birthday only if you choose to enter one in the child's settings, where it shows an age estimate.
• Practice work: assignments, each answer, scores, stars, rewards and achievements.
• Lesson videos: which lesson videos your child started and finished, how many times they pressed play, and which videos you sent them. The videos are ours and are stored with our database provider; playing one sends nothing about your child anywhere else.
• Messages to your child: short messages that you, a tutor you invited, an AI assistant you connected or, if you allow it, your child's class teacher write for your child to see in Yep Edu, when each is set to show, when a condition set for it (a score, a streak, a number of stars or sheets) was met, and when your child first saw it and closed it. A tutor's message reaches your child only after you or a co-parent approve it, unless you turn on skipping approval for that tutor; an assistant's and a teacher's always wait for your approval, and a teacher never learns whether your child saw one. Stopping a teacher's messages, or leaving the class, deletes them. We delete a message 180 days after it stops showing.
• Tutor chat: what your child types to the tutor and what it replies, kept so you can read it.
• Competitions and game rankings: if you join a competition or enter your child in a learning game's ranking, the display name you choose and the score.
• Friends: if you turn Friends on for a child, the friendships you approve and the messages your child sends and receives, including any our safety check stopped.
• Referrals: if you signed up through another family's invite link or a child's friend link, which family's link it was. Opening such a link stores the code in a cookie in your browser for 30 days so sign-up can credit it; nothing else is tracked.
• Classroom: if you enrol a child in a teacher's class, we keep which class, which child, the consent you gave and the version of this policy it was given under, and, if you later remove the class, when you removed it. The class work itself is ordinary practice work, already listed above. If the teacher sets their own level for your child in a math skill, we keep that level, whether you accepted it, and any notes the teacher writes about it. If you allow the teacher to send your child messages, we keep that you allowed it and under which version of the consent.
• Other adults in your family: if you invite a co-parent or a tutor, the email address you invite, and the profile each adult gives when they join: their name, their relationship to the children, a contact email and, if they choose, a phone number. We also keep a record of when an adult was invited, joined, was removed or had their role changed.
• If you sign up as a teacher (a separate kind of account, not a family): your email, and the profile you write for parents to read — your name, headline, about text, a photo you upload, school or affiliation, subjects, grades, years of experience, your teaching note and how you prefer to be contacted. All of it is written by you, for parents, and none of it is verified by us. If a parent allows it, also the messages you write to their child, kept as described under messages above.
• Notices you close: Yep Edu sometimes shows a notice at the top of the pages parents, tutors or teachers see, for example about planned downtime or a change to the site. If you close one, we record which notice it was, your account, whether you closed it as a parent, co-parent, tutor or teacher, the family or teacher account you were using, and the time. We use this so the notice stays closed for you and to see how many people a notice reached. Only the person who runs the site can see who closed a notice; admins with the notices permission see only how many people did. Nothing records whether you read a notice, and children are never shown one.
• Usage counts: how many AI requests your family made, to enforce the free usage cap, and the date and time of each sheet, assignment and tutor message, which the site already keeps to show you your children's progress.
• Sign-in time: our login provider records when you last signed in.

We don't collect a child's address, school, photo of their face, or location, and there are no ads, analytics services or third-party tracking scripts on the site. The one outside player is YouTube's, and it loads only when someone presses play on a lesson video we host on YouTube (see below).

Who else sees it

These services process family data so the site can work. Each is named because it matters.

• Ollama (ollama.com), a US AI provider. Three things from a child go there: (1) what a child types to the tutor, with the tutor's earlier replies in that chat and the child's first name and grade; (2) a photo of a marked worksheet, when you use photo grading; and (3) a child's written answer, with the question and the child's grade and no name, when a written answer is marked. Worksheet generation sends the topic, level and grade (no name). A spelling sheet built from words your child missed also sends those words, without a name. Each message a child sends to a friend is also sent there first, without any name, to check it is safe to deliver; a question your child shares with a friend is checked the same way. If your child is in a teacher's class and that teacher asks for help, two more things go there: for a draft note to you about one sheet, your child's first name, the sheet's title and the score; and for a summary of how the class did on a sheet, the questions and how many children missed each one, with no names. A photo of your signed consent form (your name, signature and email, no child details) is sent there once to check it is complete. We don't store the worksheet photo; Ollama's own terms govern what they do with what they receive.
• An AI assistant you connect (for example Claude, ChatGPT or Yep), only if you connect one. It reads what that connection allows: the first names and grades of the children you choose, their worksheets, answers, scores and stars, and the messages sent to them. If you have signed the printed consent form, it can also read their progress reports: working levels, a chart of them and a printable copy. The company behind the assistant processes what it reads under its own terms. You can see and disconnect every connection under Remotes in family settings, and its access stops when you do.
• Google, if your child answers out loud. Voice answers use the browser's built-in speech recognition; in Google Chrome that sends the audio to Google to turn it into text. We never receive or store the audio. Typing avoids it.
• YouTube (Google), only for a lesson video we host on YouTube. Nothing loads from YouTube until someone presses play on that video. It then plays in YouTube's privacy-enhanced player (youtube-nocookie.com), and from then on YouTube receives the device's IP address and what its player reports about playback, may store data on the device, and may show ads, all under Google's privacy policy. We send YouTube nothing about your child. Lesson videos stored with Supabase involve no one else.
• Supabase hosts our database, logins and file storage. Everything listed above lives there.
• Netlify runs the website itself and sees ordinary web request data.
• Resend delivers our emails (sign-up confirmation, password reset, family invitations and weekly summaries).
• Other families see your child's display name and score in a competition you join, or in a learning game's ranking you enter your child in. If you turn on Friends and approve a friend, that friend sees your child's display name and avatar, what you choose to share (badges, level, practice streak, subjects practised this week) and the messages your child sends them; their parents can read those messages too. If your child shares a question from a sheet to ask for help, the friend sees that question and its answer choices, and not which choice is right. Nothing else: never scores, your child's answers or worksheet titles. If you signed up through another family's link, that family sees only that one more family joined, never who you are, and you see the same number for your own link.
• A teacher you enrol a child with sees, for that class only: your child's display name and grade, and for each sheet the teacher assigned, whether it is not started, in progress, submitted or graded, the score out of the total, how many questions were missed, and when it was started and finished. That list is the whole of it — it is enforced in the code as an allowlist, not a redaction, so a new field cannot leak in by accident. A teacher never sees your email, your other children, your child's birthday, their tutor chats, their friends or what friends write them, their work in any other class, or anything they did outside the class. A teacher can download their own class gradebook as a spreadsheet; it contains exactly those fields and nothing more. The one exception is yours to give: if you also share your child's level, the teacher sees our estimated level for each math skill (for example "Multiplication: grade 3"), worked out from class work and home practice, and never the home sheets, answers or scores behind it. If you also allow the teacher's messages, the teacher sees that you allowed them and, for each message they wrote, whether it is waiting for you, approved or taken back, never whether your child saw it.
• A teacher's levels and notes. A teacher can record their own level for your child in a math skill and use it in their class. You see that level on your child's Levels page and decide whether home practice uses it; the teacher sees whether you accepted it. A teacher can also write notes about it. Notes the teacher shares appear on the Levels page; notes the teacher keeps private do not, but they are your family's data and are included when you download it. Your child sees neither. Levels and notes are deleted when your child leaves the class, whether you remove them or the teacher does, or when the teacher deletes the class.
• Adults you add to your family see what is described under Adults in your family below.
• Admins the site owner authorizes see what is described under Admins below.
• An AI agent you connect over MCP sees what you authorize it to see. You choose it; its maker's terms apply to it.

We don't sell or rent any of this, and we don't share it with anyone else unless the law requires it.

What the person running the site sees

To know whether Yep Edu is being used and keep it running, its operator, and any admin with the usage permission (see Admins below), has a private usage summary. For each family it shows the family name, the parent's email, when you joined, how many children you added, when you last signed in and were last active, and counts over the last 7 and 30 days: active days, sheets finished and AI requests. It also shows whether the consent form and this policy were accepted.

It is built only from the records listed above. Nothing new is tracked to make it. It never shows children's names, grades, birthdays, answers, scores, tutor chats or photos, and it is never shared or sold. Deleting your family removes you from it.

Admins

The site owner can give other people admin permissions, for example to review consent forms or look after the shared worksheets. Each permission opens only certain pages. The usage permission opens the summary above and how far each family has got from sign-up to a first finished sheet. The consents permission opens the signed forms parents upload, with the parent's name, signature and email. The teachers permission opens the list of teacher accounts, with each teacher's contact email and how many classes and children they have, but no child's name. The content permission opens the shared worksheet templates and the learning games that connect to Yep Edu. The keys permission opens the keys that let an admin's own tools manage those templates. The notices permission lets an admin write and publish the notices described above, and shows how many people closed each one, but not who. None of these pages shows a child's name, answers, scores, tutor chats or photos of their work.

An admin's permissions do nothing until they have read and accepted a written admin agreement, and they switch off again until they accept a new version if it changes. The agreement says an admin may look at a family's or a child's information only when the admin job needs it (reviewing consent forms, managing content, helping families and teachers, keeping the site running), must not copy or share it outside Yep Edu, and may contact families only through approved channels. The site owner can remove an admin's access at any time, which also ends their admin keys. The agreement is shown only to people who hold an admin role; it is not published on this site.

Yep Edu keeps a record of who was given or lost admin access, who accepted the agreement and when, and calls made with an admin key. Changes made from the admin pages are recorded too, each with who made it and when: approving or rejecting a consent form, suspending a teacher or lifting a suspension, changing a learning game, issuing or revoking an admin key, and writing, publishing or ending a notice. These records can only be added to: the app cannot edit or delete them, and only the person who runs the site can see them.

The Classroom

A teacher can create a class and give out a join code. Enrolling is a parent's act and only a parent's act: a child cannot join a class, and a teacher cannot add a child. When you open a join code we show you the teacher's profile and the exact list of what they would see, and you consent to that text, at the version it was shown at, for one named child. If the text changes, the old consent does not carry over.

You can remove a class at any time from the parent dashboard. The teacher loses the view of that child immediately — the child disappears from their gradebook and their class list — and your child keeps every sheet and star already earned. We keep a note that the enrolment ended, and when.

Nothing in a teacher's profile is verified. We do not check that a teacher is who they say they are, does the job they say they do, or works where they say they work, and there is no background check. Treat a teacher profile as you would a flyer on a noticeboard, and only enrol a child with a teacher you already know.

If a teacher account has to be stopped, the person who runs the site can suspend it. A suspended teacher immediately loses their console and their class links stop working for parents. Suspension never removes your enrolment or your child's work: ending a consent is your decision, not ours.

Teachers' use of the AI features is counted and capped the same way a family's is, per teacher and per class, so one account cannot exhaust the shared free allowance.

Children

Children use Yep Edu through a parent's account. A child can't sign up alone, and a parent adds each child. As a parent you can see everything your child has done, including the full tutor chat and every message to and from a friend, and you can change or remove anything. Friends are off by default. A child can only be found by a friend code you share, a friendship with another family starts only after both parents approve it, and you can remove or block a friend at any time.

Adults in your family

A family has one owner, the parent who created it. The owner can invite other adults by email, as co-parents or as tutors, up to four besides the owner. An invite works once and only for the address it was sent to. Before they are added, that person confirms the address, gives their name, relationship to the children and contact details, and accepts these terms and this policy.

A co-parent is treated as a parent. They see every child in the family, including the full tutor chat and every message to and from a friend, and can do what the owner can do except invite or remove co-parents, change anyone's role, or delete the family. A co-parent can also invite and remove tutors.

A tutor sees only the children you list for them, and for those children at most their assignments, worksheets and scores. A tutor is not shown stars, a star balance, badges, rewards, friends, screen-time settings, a birthday, the notes a parent wrote on answers, the child's chat with the AI tutor, the other adults, or any AI agent you connect, and cannot print sheets. A tutor cannot change settings, give consent, connect an agent, invite anyone, or delete the family or a child. A tutor can delete only the sheets they proposed that the child has not started and the worksheets they made. What a tutor assigns waits for a parent to approve it, and so does a score a tutor records: no stars are given until a parent approves the score. If a parent turns approval off for a tutor, that tutor's work and scores count at once, and the tutor still sees no stars. A tutor can also write the children short messages; each waits for a parent unless approval is turned off for that tutor's messages, a check refuses contact details and links in them, and the tutor sees whether a child saw their own. A tutor may get a weekly email about the children listed for them: each child's first name, the sheets finished and how many answers were correct, and what to practise next. The email has a link to stop it.

You decide who is added. The owner can remove a co-parent, any parent can remove a tutor, and a co-parent or tutor can leave on their own. Removing an adult, or changing a co-parent to a tutor, ends the AI agents that adult connected and cancels the invites they sent. We keep a record, which the app cannot edit, of when adults were invited, joined, were removed or had their role changed.

Your choices

• See or download it: the family settings page has an export of everything we hold about your family.
• Delete it: the same page deletes your family, every child, all their work and uploaded files, and the logins. It is immediate and permanent.
• Ask us: email privacy@yepgent.com and we will do it by hand.

How long we keep it

Conversations with the AI tutor are deleted automatically 60 days after they happen, and messages between friends 90 days after they are sent. Everything else (worksheets, scores, uploaded photos) stays until you delete it or close the account. Backups kept by our database provider roll off on their schedule after that.

We can also delete a family ourselves, for example one that has not been used for a long time or that breaks the terms. Normally we email the family's owner and show a notice on the family's pages at least 7 days before, and the owner or any co-parent can stop it by pressing “Keep my account”. We delete without that notice only when the family asks us to, or when the law or a serious breach of the terms requires it. Either way it removes everything listed under “Delete it” above.

Security

Access is limited per family, uploaded files are private, and child logins are rate-limited. No system is perfectly secure, and this one is run by one person; see the terms.

Changes and contact

When this policy changes in a way that matters, the version date at the top changes and we ask you to accept the new version. Questions or requests: privacy@yepgent.com.