Privacy Policy

DRAFT PLACEHOLDER, NOT LEGAL ADVICE. This policy must be reviewed by a US privacy lawyer before launch, especially for the Children's Online Privacy Protection Act (COPPA) and state laws (e.g. California CCPA/CPRA, SOPIPA). Items marked [REVIEW] or [TODO] need a decision.

Last updated: [TODO: date of publication]

1. Who we are

HoppingTree ("HoppingTree", "we", "us") is operated by [TODO: legal name of operator, postal address, contact email and phone]. You can reach us at our contact page or support@hoppingtree.com [TODO: mailbox].

HoppingTree is an independent practice product and is not affiliated with, endorsed by, or sponsored by NWEA or HMH. MAP and MAP Growth are trademarks of their respective owners.

2. Our service is for parents and their children

HoppingTree is a practice tool for children in elementary and middle school, used with a parent or guardian. Accounts are held by the parent (an adult 18+). Children do not create their own accounts, do not need an email address, and cannot message other users. [REVIEW: teacher/school use would need a separate school-consent process under COPPA and FERPA.]

3. What we collect

• From parents: email address (for sign-in codes and service messages), the parent PIN (stored only as a one-way hash), consent records, and, if you subscribe, billing details handled by our payment processor (we do not see or store full card numbers).
• About each child (entered by the parent): a nickname or first name and grade. Please do not enter a full name.
• Practice data: answers, which questions were attempted, time spent, scores and estimated levels.
• Technical data: basic device and browser information and server logs needed to run and secure the service. [REVIEW: list exact logs/analytics, if any]

In the current preview (guest mode), all of this stays in your browser's local storage on your device and is not sent to us.

4. How we use it

• To run practice sessions, score them, and show progress to the parent.
• To sign parents in, provide support, and send service messages (and, if you opt in, a weekly summary).
• To keep the service secure and to improve our questions (using aggregated or de-identified data).

We do not show ads, do not use children's data for behavioral advertising, and do not sell or "share" personal information as those terms are defined under California law.

5. Parental consent (COPPA)

Before we collect personal information from or about a child under 13 on our servers, we obtain verifiable parental consent from the parent. [REVIEW: choose and document the FTC-approved consent method, e.g. a payment-card transaction for paid plans or another approved method, and update the sign-up flow accordingly.] Parents can agree to collection and use of their child's information without agreeing to disclosure to third parties beyond our service providers.

6. Who we share it with

Only service providers that help us run HoppingTree, under contracts that limit their use of the data: [TODO: confirm list, e.g. Supabase (database and sign-in), Stripe (payments), our web host, our email provider]. We may disclose information if required by law or to protect the safety of users.

7. Your choices and rights

• Review your child's information, download it, or delete it at any time in the parent area ("Download data" / "Delete all data"), or by contacting us.
• Refuse further collection or use of your child's information by deleting the learner or closing your account.
• Residents of some states have additional rights (access, correction, deletion, opt-out). Contact us to make a request. [REVIEW: state-law specifics]

8. How long we keep data

We keep practice data while your account is active and delete it within [TODO: e.g. 90] days after you close your account, unless we must keep it longer by law.

9. Security

We use encryption in transit, access controls and row-level security so each parent can see only their own family's data. No system is perfectly secure; we will notify you as required by law if a breach affects your information.

10. Changes

If we make material changes, we will notify parents before they take effect and, where required, ask for consent again.