Last updated October 21, 2026
Privacy
We collect as little as we can, use it only to teach your kids, and never sell or share it for ads.
📝 Draft, under legal review. It describes how the pilot works today in plain words; the final version may change.
The short version
- Kids are known by a first name or nickname. No birthdays, photos, addresses, or kid email addresses.
- We use what your kids answer to figure out what to teach next. That's it.
- No ads, no tracking pixels, no selling or renting data.
- Parents see everything their kids do and can delete it anytime.
What we store
About parents
- Your email address and a password (handled by our login provider; we never see your password).
- Your family's name and the other adults you invite.
- Anything you add: learning-time logs, evaluations, attendance, notes, and approvals.
About kids
- A first name or nickname, grade, chosen subjects, avatar, and settings like read-aloud.
- A 4–6 digit PIN, stored only as a scrambled hash.
- Their answers, how long they took, their progress, streaks, and badges.
- Writing they submit, and messages with the practice helper if a parent turns it on.
- Questions they report as confusing.
From the contact form
Your name, email, and message, plus a scrambled version of your internet address used only to stop spam.
How we use it
- To place each child, build their weekly plan, and show you their progress and records.
- To improve questions: for example, when many kids miss the same one, we check whether it's worded badly.
- To reply when you contact us.
We don't use kids' data for advertising, and we don't build profiles for anyone else.
AI features
Two optional features use Anthropic's Claude: writing feedback, and the practice helper. When used, the child's writing or helper conversation and the question it's about are sent to Anthropic to produce a reply. We don't send names. AI is never used during placement checks or check-ins. Parents can see every message and turn the helper off.
Who can see it
- The adults in your family account.
- A child sees only their own work.
- Our team, only to run and support the service (for example, to fix a problem you report).
- Service providers, only to do their job: Vercel (runs the website), Supabase (stores the database and parent sign-ins, in the United States), Cloudflare (our domain name), and Anthropic (only for the optional AI features described above).
- Authorities, only if the law requires it.
Cookies and storage
We use cookies only to keep you and your kids logged in. Sound on/off is remembered in the browser. No third-party analytics or ad cookies.
Children's privacy
Graymalkin Lane is set up and controlled by parents. A parent creates the account, adds each child, and gives consent for the information above. Kids can't create accounts, and we don't ask kids for personal information. Parents can review or delete a child's information at any time.
Keeping and deleting data
We keep your family's data while your account is open so records stay complete for the school year. Delete a child or your whole family from the parent dashboard and it's removed. You can also ask us to delete everything.
Security
Data travels encrypted. Kids' PINs are hashed, parent passwords are handled by our login provider, and only the server can read the database. No system is perfect; if something goes wrong that affects you, we'll tell you.
Changes and questions
If we change this policy in a way that matters, we'll tell parents before it takes effect. Questions? Contact us.