Privacy Policy
Last updated: August 24, 2026
WholeChildAI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and service at wholechildai.org and app.wholechildai.org.
By using WholeChildAI, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Account Information
When you create an account, we collect:
- Name (parent, teacher, or other adult user)
- Email address
- Password (stored as a secure hash; we never store plaintext passwords)
- Account type and subscription tier
Student Information
To generate personalized learning plans, adult users enter information about the students they support. This may include:
- Student first name
- Grade level and age
- Subjects and learning areas
- Learning preferences, strengths, and challenges (as described by the adult)
- Any additional context the adult chooses to provide
Payment Information
Subscription payments are processed by Stripe. We do not store your credit card number or full payment details on our servers. Stripe handles all payment data in accordance with PCI-DSS standards.
Usage Data
We automatically collect certain information when you use the service, including:
- Pages visited and features used
- Browser type, device type, and operating system
- IP address and general location (country/region)
- Timestamps of actions
2. How We Use Your Information
We use the information we collect to:
- Generate personalized learning plans using AI
- Create and manage your account
- Process subscription payments
- Send transactional emails (account confirmation, password reset)
- Respond to support requests
- Improve and develop our service
- Comply with legal obligations
We do not use your information for advertising, and we do not sell your personal data to third parties.
3. Children's Privacy (COPPA)
WholeChildAI is a tool for adults. Parents, teachers, and other adult educators use our platform on behalf of the children they support. Children do not create accounts or directly interact with our service.
We do not knowingly collect personal information directly from children under 13. Student information (name, grade, subjects) is entered exclusively by adult account holders. If you believe a child has provided us personal information without adult oversight, please contact us at support@wholechildai.org and we will promptly delete it.
Our service is designed for adults (18+) who use it to support children's education. Adults are responsible for what student information they choose to enter.
4. Data Sharing & Third Parties
We share data only with the service providers necessary to operate WholeChildAI:
OpenAI
Student information you enter is sent to OpenAI's API to generate learning plans. OpenAI processes this data according to their Privacy Policy. We use OpenAI's API with data processing settings that do not allow OpenAI to use your data to train their models.
Stripe
Subscription billing is handled by Stripe. Payment information is transmitted directly to Stripe and is governed by Stripe's Privacy Policy.
Amazon Web Services (SES)
Transactional emails (account confirmation, password resets) are sent via Amazon Simple Email Service. Your email address is shared with AWS solely for this purpose.
Supabase
Our database infrastructure is hosted on Supabase (PostgreSQL), which stores your account and student data securely in the United States.
Sentry
We use Sentry for error monitoring so we can find and fix problems quickly. Error reports may include technical context about the request that failed; they are not used for advertising.
Google Analytics / Tag Manager
We use Google Analytics via Google Tag Manager to understand aggregate usage patterns. This data is anonymized and does not include student information.
We do not share your personal data with any other third parties for marketing or advertising purposes.
5. Data Retention & Deletion
We retain your account information for as long as your account is active. Student information is retained until you delete it from your account or close your account.
To request deletion of your account and all associated data, email us at support@wholechildai.org. We will process deletion requests within 30 days.
Some data may be retained for a limited period after deletion to comply with legal obligations or resolve disputes.
6. Security
We take reasonable measures to protect your information:
- All data is encrypted in transit using TLS/HTTPS
- Our database uses Supabase with Row-Level Security (RLS), ensuring users can only access their own data
- Passwords are hashed and never stored in plaintext
- Access to production systems is restricted to authorized personnel
No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Data portability
To exercise any of these rights, contact us at support@wholechildai.org.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify users by email. Continued use of the service after changes constitutes acceptance of the updated policy.
9. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
Email: support@wholechildai.org
Website: wholechildai.org