Effective: October 12, 2026
ZenHue Learning ("we," "us") operates ZenHue AI Tutor, a homeschool practice app for families. This policy explains what information we collect, why, and what rights you have. If you have questions, contact us at dmpadavic@gmail.com.
1. Information we collect
From parents (account holders): first name, email address, and password (stored securely by our authentication provider). If you subscribe to Premium, our payment processor collects your payment details — we never see or store your card number.
Child profiles (created by the parent): display name, login email, grade levels, drill answers and scores, streaks, stars and rewards, videos watched, and app settings (like quiet mode). Children cannot create accounts themselves — only a parent can add a child profile.
What we never collect: we do not ask for or store children's birthdates, locations, or photos.
2. Children's privacy (COPPA)
We comply with the Children's Online Privacy Protection Act (COPPA):
- Verifiable parental consent: a parent creates the parent account (with an email address we can reach) and then creates each child profile. Creating the child profile is how the parent gives consent for us to collect that child's learning information.
- Parents' rights: at any time, a parent may review their children's information in the parent dashboard, correct it, ask us to delete it, or refuse further collection — just email dmpadavic@gmail.com.
- No behavioral advertising: we show no ads to children and never use children's information for advertising.
- Data minimization: we collect only what the app needs to teach, track progress, and run the family account.
3. How we use information
- To run the app: logins, adaptive drills, progress tracking, stars and rewards.
- To communicate: account emails, password resets, and (with your permission) learning updates.
- To improve the app: aggregated, de-identified usage patterns (never sold, never shared with advertisers).
4. Who we share information with
We do not sell personal information, and we do not share it with advertisers or data brokers. We share limited information only with the service providers needed to run the app:
- Supabase — database and login services (United States).
- Cloudflare — app hosting and delivery.
- Square — payment processing for Premium subscriptions.
- Resend — transactional email (password resets, receipts).
Each provider may only use the information to provide its service to us.
5. Data security
We use industry-standard protections: encrypted connections (HTTPS), hashed passwords, and database access rules so families can only ever see their own data. No system is perfectly secure, so we keep improving and will notify you promptly of any breach affecting your information.
6. Data retention and deletion
We keep account information while your account is active. You may delete your account — and all child profiles and learning data with it — at any time by emailing dmpadavic@gmail.com. We will complete deletion within 30 days.
7. Your privacy rights (including California residents)
You have the right to know what personal information we hold about you, to correct it, to delete it, and to opt out of any sale of personal information (we don't sell any). To exercise these rights, email dmpadavic@gmail.com. We will never discriminate against you for exercising your rights.
8. Changes to this policy
If we make material changes, we will notify you by email or with a notice in the app before the changes take effect.