Privacy Policy

Effective date: June 5, 2026  |  Last updated: June 5, 2026  |  Version: 1.0 (Trial)

1. Who We Are

Homework Hub ("we", "us", "our") is a private beta service operated by PM Advisory (an Ontario corporation), based in Ontario, Canada. Contact us at privacy@homeworkhub.app.

2. Who This Policy Covers

This policy applies to:

• Parents / guardians who register and manage a family account.
• Children whose homework activity is tracked through the parent's account.

Children do not create their own accounts. They are represented as named profiles within a parent's account. We collect only the minimum information needed to provide the service.

3. Information We Collect

3a. From Parents

• Email address — used for account login and service communications.
• Password — stored as a secure hash; never readable by us.
• Consent record — timestamp of when parental consent was given.
• Invite code — the code used to register (for trial management only).

3b. From Children's Profiles (entered by parent)

• First name or alias — we recommend using a nickname rather than a full legal name.
• Grade level — used to tailor question difficulty and curriculum.
• Homework schedule preferences — the subjects and active days chosen by the parent.
• Difficulty setting — a per-child level (e.g. relaxed, standard, or challenge) chosen by the parent.
• Optional PIN — a 4-digit PIN a parent may set so a child can confirm it before starting their homework session.

3c. Homework Activity

• Questions generated for each session.
• Answers submitted by the child and AI-generated feedback scores.
• Session timestamps (date, not precise time).

3d. What We Do NOT Collect

• Full legal names of children.
• Dates of birth.
• Photos or biometric data.
• Location data.
• Device identifiers or advertising IDs.
• Browsing history outside of Homework Hub.

4. How We Use Your Information

• To generate personalised homework questions at the correct grade level. Questions are generated automatically each week on a schedule, and also on demand when a parent requests a new set, using the AI provider described in Section 5b.
• To display progress history to the parent on the dashboard.
• To authenticate the parent and protect family data from other users.
• To view per-family operational data (such as number of sessions completed, average scores, and last active date) so the Homework Hub team can operate, support, and improve the service. This data is accessible only to the Homework Hub operator and is not used for advertising or profiling.
• To operate and improve the service during the trial period.
• To respond to support or deletion requests.

We do not use your data for advertising, profiling, or sale to third parties. We do not use children's data to train any AI model.

5. Third-Party Service Providers

We use a small number of third-party services to operate Homework Hub. Each receives only the minimum data necessary:

5a. Google Firebase (Google LLC)

We use Firebase for account authentication and data storage. Data is stored in Canada (Toronto region). Google processes data under its Cloud Data Processing Addendum, which includes GDPR-compliant safeguards. Privacy policy: policies.google.com/privacy.

5b. Anthropic (Claude AI)

Homework Hub uses Claude (by Anthropic, PBC) to generate age-appropriate questions and to grade student answers. When a grading request is made, the following information is sent to Anthropic's API: the child's grade level, subject, curriculum region, difficulty setting, and the student's submitted answers. No real names, email addresses, or account identifiers are sent. Children are referred to only by their alias (a nickname chosen by the parent, such as "Alex"). Anthropic does not retain submitted data for model training under its standard API terms. Privacy policy: anthropic.com/privacy.

5c. Resend (email delivery)

We use Resend (Resend Inc.) to deliver transactional emails — specifically your trial code, welcome email, and trial extension confirmation. Your email address is passed to Resend solely for the purpose of delivering these messages. Resend does not use your data for advertising. Privacy policy: resend.com/legal/privacy-policy.

5d. Firebase Hosting (Google LLC)

The Homework Hub website is hosted on Firebase Hosting (Google LLC). Google may log standard server access logs (IP address, page requested, timestamp). These logs are governed by Google's Privacy Policy.

We do not use Google Analytics, Meta Pixel, or any advertising or behavioural tracking tools.

6. Parental Consent (COPPA)

Homework Hub is designed for use by children under the supervision of their parent or guardian. Before any child profile or homework data can be created, the parent must:

• Read this Privacy Policy and our Terms of Service.
• Actively check a consent checkbox confirming they are the parent or legal guardian.
• Complete registration with a valid invite code and email address.

We record the timestamp of consent. No child data is collected until this step is complete.

Parents may withdraw consent at any time by requesting account deletion (see Section 8).

7. Data Retention

• Active accounts: Data is retained while the account is active.
• Trial end: At the end of the trial period, all trial family data will be deleted unless the service continues commercially. If it does, registered families will receive an email notification and must explicitly opt in to continue — data will not be retained based on continued use alone.
• Deleted accounts: Data is permanently deleted within 30 days of a deletion request.

8. Your Rights & Data Deletion

Depending on your jurisdiction, you have rights including:

• Access — request a copy of the data we hold about your family.
• Correction — ask us to correct inaccurate information.
• Deletion — request that we permanently delete your family's account and all associated data.
• Portability — request your data in a machine-readable format.
• Withdrawal of consent — withdraw parental consent at any time.

9. Data Security

• All data is transmitted over HTTPS.
• Passwords are never stored in plain text — Firebase Auth handles credential storage securely.
• Each family's data is isolated: one family cannot access another family's data by design (enforced at the database level, not just the UI).
• API keys for third-party services are stored in server-side secret management and never exposed to the browser.
• The codebase has undergone an internal security audit covering access control, dependency vulnerabilities, prompt injection, COPPA compliance, and infrastructure configuration.
• In the event of a data breach affecting your personal information, we will notify you by email as required by applicable law (PIPEDA, UK GDPR), without undue delay.

10. Children's Privacy (COPPA / UK Children's Code)

• Children do not interact with the account creation, login, or settings — only parents do.
• Children's profiles use first names or aliases only — we recommend aliases over legal names.
• We do not serve advertising to children.
• We do not share children's data with third parties for commercial purposes.
• We do not allow children to share data publicly.
• AI-generated content is filtered to be age-appropriate and educational.

11. California Residents (CCPA)

We do not sell personal information. We do not share personal information for cross-context behavioural advertising. California residents have rights to know, delete, and opt out under CCPA — exercise these rights at privacy@homeworkhub.app.

12. UK Residents (UK GDPR)

Our lawful basis for processing parent data is contract performance (providing the service you registered for). Our lawful basis for processing child data is parental consent. UK residents have rights under UK GDPR including access, erasure, rectification, and restriction. Contact privacy@homeworkhub.app to exercise these rights. If you are unsatisfied with our response, you may contact the ICO at ico.org.uk.

13. Cookies

Homework Hub does not use tracking cookies or advertising cookies. Firebase Auth may use a session token stored in your browser's local storage to keep you signed in. This token is used solely for authentication and is not shared with third parties.

14. Changes to This Policy

We may update this policy as the service evolves. If we make material changes, we will notify registered parents by email at least 14 days before the changes take effect. Continued use after that date constitutes acceptance of the updated policy.

15. Canadian Residents (Provincial Privacy Laws)

Residents of Quebec, British Columbia, and Alberta are also protected by substantially similar provincial privacy laws. We apply the same rights and practices described in this policy to all Canadian residents regardless of province.

16. Contact

For any privacy questions, access requests, or deletion requests:

Email: privacy@homeworkhub.app

We aim to respond to all enquiries within 5 business days.