Privacy

The short version

• Everything about your family is saved in this browser, on this device. We don't keep a copy on a server yet.
• We never attach a learner's name, your name or your email to what we send an AI model or another company. Text and photos go as they were typed or taken, so a name inside them goes too.
• When the AI tutor is on, it sends the question and the conversation to Anthropic.
• No ads, no tracking scripts, and no selling or sharing data for marketing.
• You can download everything or delete it from Settings at any time.

What we keep

• Your account: your name, your email, and your password in scrambled form (a salted hash), never as typed.
• Each learner: the name or nickname you choose, grade, language, a color, the settings you pick, interests, and notes on how they learn best.
• The learning record: each answer (right on their own, right with help, or not yet; what they answered; how long it took), practice sets, courses and lessons, tutor conversations, school dates and notes you add, photos or files you save with a school item, the reading log, your notes, and question reviews.

Where it's kept

Today: in this browser's storage on this device. It doesn't sync to your other devices, and clearing this site's data in the browser deletes it.

Our host, Vercel, carries each request between your browser and our server. Our server uses a request to answer it and doesn't save what was in it, except public answers to lookups (see Looking things up).

Like most websites, our host's request logs record each request's IP address, time and page address, and a lookup's page address includes the words looked up. They're kept for as long as our hosting plan keeps logs. Our server also holds IP addresses briefly in memory, to limit how often one address can call it.

Later: once accounts are on, your family's record will be kept on our server so it can follow you to other devices. This page will say exactly where before that happens.

What goes to Anthropic (the AI tutor)

When this site has the AI tutor connected, our server sends Anthropic, the company that makes the Claude models: what a learner types or says to the tutor and the conversation so far, the problem they're on, their grade, language, interests and how-we-teach notes; topics typed for a new course or new practice questions; school text or photos you choose to read with AI; and, when you ask for the optional note on a learner's page, that week's numbers, skill names and the school items coming up. It may pass through Vercel's AI Gateway on the way.

We never attach a learner's name, your name or your email. Text goes as it was typed, though, so a name typed into a message or a school item goes with it. The tutor is told never to ask for personal details. A photo of a worksheet can show a name, so crop it out when you can.

Anthropic handles it under its commercial terms and privacy policy, which say how long it keeps it.

When the AI tutor isn't connected, nothing goes to Anthropic: a scripted demo tutor answers in your browser, and the app says it's a demo.

Looking things up

When the tutor or a lesson looks something up, our server asks a public source (Wikipedia, Wikisource, Datamuse, Open Library, LibriVox, PoetryDB or the Common Standards Project) with only the words being looked up. No name and no account go with it, and the request comes from our server, not your browser. Answers are kept for a day so the same lookup is quick (see Data retention).

Voice

Read-aloud uses your browser's own voices. Usually those are built into your device; some browsers (often Chrome on Chromebooks and Linux) use an online Google voice, which gets the text being read.

Talking to the tutor with the microphone is off until a grown-up turns it on for a learner. It uses the browser's own speech recognition, which may send the audio to Apple or Google to turn it into text. Typing always works.

We plan to add a voice service, a company that turns speech into text and text into speech. This page will name it before it's used, and for children under 13 it will stay off until a parent gives consent.

Children under 13

KaizenEDU is parent-first. A grown-up makes the account and adds each child. Children don't sign up and have no email or password, and a grown-up check stands in front of account settings, data export and delete.

Before KaizenEDU opens to the public, a parent will give consent in a way the law accepts (verifiable parental consent under COPPA) before we collect anything about a child, and we'll keep a record of it. Until then, this is a test version that a parent sets up on their own device.

As a parent you can see everything (on the Family page, or in the download), correct it, delete one child's data or all of it, and turn the microphone or the weekly email off at any time.

Email

We use your email to sign you in. If you turn on the weekly email, we send it through Resend, an email delivery company, to your address only. It holds numbers, skill names, and the titles of upcoming tests and quizzes as you typed them, with the names saved in KaizenEDU taken out; another name typed into a title stays. Nothing goes out after a week with no activity, and turning it off in Settings stops it.

What we don't do

No ads. No selling, renting or sharing data for marketing. No third-party tracking or analytics scripts. Nothing a learner says or answers goes into lessons that other families see.

Security

Today your data is as safe as this device and browser. Anyone who can open this browser can open KaizenEDU; the grown-up check keeps small children out of parent areas, but it isn't a lock. In this test version the password only closes the account inside the app; the saved data itself isn't encrypted on this device. With accounts on our server, sign-in will use strong password hashing and secure sessions.

Errors and logs

When something breaks on our server, we write a short technical record: which page, what went wrong and when. Before it's written, email addresses, phone numbers, keys and quoted text are masked, and request bodies, query values, conversations and fields that hold names or typed text are left out. The same cleaning applies to the server's own error output. Free text inside an error can't always be recognized, so a record may rarely still hold a word someone typed.

Your choices

In Settings: download all your data, delete one learner or everything, change the language, turn the weekly email on or off. On a learner's page: the microphone, interests and teaching notes.

Changes

When this page changes, the date at the top changes. Bigger changes, like moving data to our server, will be explained in the app before they happen.

Contact

Questions or requests about your data: privacy@kaizenedu.net