Privacy Policy

Effective Date: March 13, 2026

Introduction

This Privacy Policy describes how OneUp Studios LLC ("Company," "we," "us," "our"), located at 455 Market St Ste 1940 PMB 736948, San Francisco, California 94105-2448, US, collects, uses, discloses, and protects personal information through the EducateWare platform, website, and related services (collectively, the "Service").

We are committed to protecting the privacy of all our users, with particular attention to the privacy and safety of children. EducateWare does not contain any third-party advertising, including targeted advertising. We do not sell personal information. We will never share or sell student data for marketing purposes.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you:

  • Create an account: Name or display name, email address, password, role (administrator, teacher, parent, or student), and optionally school affiliation.
  • Subscribe to a paid plan: Billing information is collected and processed directly by Square, Inc. We do not store your full credit card number.
  • Upload content: Documents (PDFs, images) uploaded for AI question extraction. These are processed and stored temporarily to provide the Service.
  • Contact us: Name, email, and message content when you reach out for support.

1.2 Information About Students

Student data collection is minimal by design. Student accounts are created by teachers, administrators, or parents — not by students themselves. For student accounts, we collect only:

  • A username (chosen by the teacher, parent, or student)
  • A password
  • Grade level (optional, set by teacher/parent)
  • Game activity data (scores, streaks, answers)

We do not collect email addresses from children under 13. Students log in using only a username and password. No email, phone number, home address, or other personally identifiable information is required from students.

1.3 Information Collected Automatically

When you use the Service, we may automatically collect:

  • Usage data: Pages visited, features used, game sessions played, and interactions with the Service.
  • Device information: Browser type, operating system, device type, and screen resolution.
  • Log data: IP address, access times, and referring URLs.

We use this information to maintain, improve, and secure the Service. We do not use this data for advertising or behavioral profiling.

2. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Create and manage accounts, process payments, generate AI questions, display dashboards, and deliver game experiences.
  • Improve the Service: Analyze usage patterns to fix bugs, improve performance, and develop new features.
  • Communicate with you: Send account-related notifications, respond to support requests, and provide important updates about the Service.
  • Ensure security: Detect and prevent fraud, abuse, and unauthorized access.
  • Comply with law: Meet legal obligations, respond to lawful requests, and enforce our Terms.

We do not use student data for any purpose other than providing and improving the educational Service.

3. AI Processing

EducateWare uses AI (powered by Anthropic's Claude) to generate and extract educational questions. When you use AI features:

  • Text prompts describing the desired questions (grade level, subject, difficulty) are sent to Anthropic's API for processing.
  • Uploaded documents (PDFs, images) for question extraction are sent to Anthropic's API and processed in accordance with Anthropic's Privacy Policy.
  • Anthropic does not use API inputs to train their models.
  • We do not send student personally identifiable information to AI services.

4. How We Share Information

We do not sell your personal information. We share information only in the following limited circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who help us operate the Service:

  • Square, Inc. — Payment processing
  • Supabase — Database hosting and authentication
  • Vercel — Website hosting
  • Anthropic — AI question generation and extraction

These providers are contractually bound to use your information only as necessary to perform services on our behalf and to protect your data.

4.2 School Administrators and Teachers

When students use the Service through a school or classroom, their teachers and school administrators may access student usernames, game activity, scores, and progress data. This is necessary for the educational purpose of the Service.

4.3 Legal Requirements

We may disclose information if required by law, subpoena, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

If OneUp Studios LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

5. Children's Privacy (COPPA Compliance)

We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA).

  • We do not knowingly collect personal information directly from children under 13 without parental or school consent.
  • Student accounts for children are created and managed by teachers, school administrators, or parents — who serve as the child's authorized agent.
  • Children log in with a username and password only. No email address, phone number, or other personal contact information is collected from children.
  • We collect only the minimum information necessary to provide the educational Service (username, password, game activity).
  • Parents and teachers may review, modify, or delete a child's information at any time through their dashboard or by contacting us.
  • We do not condition a child's participation on providing more information than is reasonably necessary.

6. Student Data Privacy (FERPA Compliance)

When EducateWare is used by a school, we recognize that student education records may be subject to the Family Educational Rights and Privacy Act (FERPA). In this context:

  • We act as a "school official" with a legitimate educational interest, as defined under FERPA.
  • We use student data solely for the educational purposes for which it was provided.
  • We do not use student data for non-educational purposes such as advertising, marketing, or building user profiles for commercial use.
  • Schools retain control over student education records and may request access to, correction of, or deletion of student data.
  • We will enter into appropriate agreements with schools upon request to formalize our obligations under FERPA.

7. Data Retention

  • Active accounts: We retain your information for as long as your account is active or as needed to provide the Service.
  • Canceled accounts: Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, financial records).
  • Uploaded documents: Documents uploaded for AI question extraction are processed and may be stored temporarily. They are not retained indefinitely.
  • Game activity data: Student game scores and progress data are retained while the associated teacher or parent account is active.

8. Data Security

We implement appropriate technical and organizational measures to protect personal information from unauthorized access, loss, misuse, alteration, and destruction. These measures include:

  • Encryption of data in transit (TLS/HTTPS) and at rest
  • Secure authentication with hashed passwords
  • Row-level security on our database
  • Regular security reviews and updates
  • Access controls limiting employee access to personal data

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights

9.1 All Users

You have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate personal information
  • Delete your account and associated personal information
  • Export your data in a portable format upon request
  • Withdraw consent where processing is based on consent
  • Opt out of promotional communications at any time

9.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • The right to know what personal information we collect, use, and disclose
  • The right to delete your personal information
  • The right to opt out of the sale or sharing of personal information — we do not sell or share personal information
  • The right to non-discrimination for exercising your privacy rights
  • The right to correct inaccurate personal information
  • The right to limit use of sensitive personal information

9.3 Other US State Privacy Rights

Residents of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, and other states with consumer privacy laws may have similar rights to access, correct, delete, and port their data. To exercise any of these rights, contact us at privacy@educateware.com.

9.4 Parents and Guardians

Parents and guardians may at any time review their child's personal information, request its deletion, and refuse further collection. Contact us at privacy@educateware.com or manage your child's account through your parent dashboard.

10. Cookies and Tracking

We use essential cookies that are strictly necessary for the Service to function (e.g., session authentication). We do not use advertising cookies, tracking pixels, or third-party analytics cookies that follow users across websites.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party service you access through our platform.

12. International Users

The Service is hosted in the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using the Service, you consent to the transfer of your information to the United States.

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, we will ensure appropriate safeguards are in place for any cross-border data transfers, including Standard Contractual Clauses where applicable.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Effective Date" at the top. For material changes that affect the processing of student data, we will provide notice to the relevant school administrators or parents. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

OneUp Studios LLC
455 Market St Ste 1940 PMB 736948
San Francisco, California 94105-2448, US
Email: privacy@educateware.com
General support: support@educateware.com

We will respond to privacy-related inquiries within 30 days. For requests related to children's data, we will respond as promptly as possible.