Privacy Policy

Effective: April 18, 2026 · Version 1.0

Readiness Coach is a parent-facing literacy intelligence platform serving families with children in Kindergarten through Third Grade. This policy explains what data we collect from parents and children, how we use it, how long we keep it, and how you can delete it at any time.

Plain-English summary. We collect only what we need to run your child's readiness check and weekly plan. Your child's audio is encrypted, parent-controlled, and never used to train ads or third-party models. You can delete everything — including audio samples — with one tap in Settings. We do not sell data. We do not use third-party ad tracking. We are COPPA + FERPA + CCPA + GDPR aligned.

1. Who we are

Readiness Coach is operated by the Readiness Coach team. For privacy questions, reach us at privacy@readiness-coach.com.

2. Data we collect

We collect two broad categories of data.

From the parent (account holder):

Name, email, and password (handled by Clerk, our auth provider).
Billing information (handled by Stripe — we do not store card numbers).
Language preference, notification preferences, and timezone.
Messages you send the AI Parent Coach.

About the child:

First name (nickname accepted), grade, state of residence, date of birth.
School name and district (optional, used to align with state reading-gate policy).
Home language(s) and optional dialect profile for fair scoring.
Skill data from screeners, games, and ORF sessions (what the child answered and how long it took).
Audio recordings from Reading Buddy / ORF sessions (encrypted at rest and in transit; see §5 for retention controls).
Uploaded school-data files (i-Ready, DIBELS, STAR, mCLASS, state-test PDFs) if the parent chooses to upload them.

3. Why we collect it

To produce a readiness band, skill map, and pass-probability forecast tuned to your state's reading-gate policy.
To generate the weekly Home Plan and to let the AI Parent Coach respond with child-specific suggestions.
To score oral reading dialect-fairly — dialect variants are never counted as errors.
To let you track progress across months.
To meet our legal obligations (billing records, tax, fraud prevention).

4. How we use the data — and what we never do

We do not sell your data.
We do not use child audio to train third-party models.
We do not place third-party ad-tracking pixels.
We do not share data with schools, districts, or the state unless you explicitly ask us to (via the Tutor Report / IEP Packet export).
We may use de-identified, aggregated statistics to improve the product (e.g., "50% of G2 readers master blending before Thanksgiving"). Individual-level data is never used this way.

5. Retention & deletion

Child audio: default retention is 30 days. You can lower this to 0 days (delete immediately after scoring) or set a custom window in Settings → Privacy.
Skill & session data: retained while your account is active so you see long-term trends. Delete any session from the Progress page.
Account deletion: one tap in Settings → Delete account. Your account, children, audio, and all derived reports are permanently removed within 30 days.
Backups: encrypted backups may retain data for up to 35 days after deletion for disaster-recovery purposes, after which they are expired.

6. COPPA (Children's Online Privacy Protection Act)

Readiness Coach is operated by the parent, on the parent's device, with parental consent as the lawful basis for all child-related data processing. We do not market to children, do not serve behavioral ads, and do not ask children to create accounts. The child-facing Reading Buddy never asks personal questions. Parents control all retention and deletion via Settings.

7. FERPA (Family Educational Rights and Privacy Act)

When a parent uploads school records (e.g., i-Ready export) to Readiness Coach, we act as a service provider on the parent's behalf. We do not share those records with third parties. The parent may delete uploaded files at any time from Settings.

8. California residents (CCPA)

California residents have the right to know, delete, correct, and opt out of sale. We do not sell personal information, so the opt-out right is already honored for everyone. Exercise any right by emailing privacy@readiness-coach.com.

9. EU / UK residents (GDPR)

Our lawful basis for processing parent data is contract performance and legitimate interest. Lawful basis for child data is parental consent. You have the right to access, correct, delete, port, and restrict processing of your data. Email privacy@readiness-coach.com to exercise any of these.

10. Service providers

Clerk (authentication)
Stripe (payments)
Vercel (hosting)
Railway / Supabase (database + object storage)
Anthropic (AI Parent Coach — parent data only; no child audio)
Deepgram or AssemblyAI (speech recognition on child audio, encrypted in transit)
Resend (transactional email)
Sentry (error monitoring, no child audio)

Each provider is contractually bound to equivalent-or-stronger privacy protections.

11. Changes to this policy

We will email you about material changes at least 30 days before they take effect. Non-material edits (typos, clarifications) are published here with a new effective date.

12. Contact

Questions, corrections, or deletion requests: privacy@readiness-coach.com.