Account name, sign-in email, and a service-generated account identifier.

Age band and, for an under-13 learner, a guardian email and consent history.

Classroom membership, assignments, announcements, lesson decisions, written reflections, assessment drafts and results, progress, educator feedback, and certificates.

Security, access, support, and operational records needed to prevent misuse and keep the service reliable.

If store checkout is enabled, order and fulfillment status. Payment providers process card details; this application does not store full card numbers.

Deliver the assigned financial education course and resume saved work.

Give the learner immediate feedback and let the teacher review progress and written evidence.

Protect school workspaces, verify roles, provide support, and investigate service problems.

Create learner-requested exports, honor deletion requests, and verify issued certificates without publishing learner identity.

The learner can see their own work and data controls.

The assigned teacher and authorized school staff can see classroom learning evidence needed to teach the course.

A connected family account receives only the limited progress and assessment view described in the app.

Service providers support identity, database, hosting, email, meetings, and payments under their own security and privacy terms. Public certificate verification omits learner identity.

We may disclose information when legally required or when needed to protect a person or the service.

The signup flow asks the learner to involve a parent or guardian before continuing.

After a student joins a classroom, the course stays locked until the current privacy notice is reviewed. An under-13 learner also needs guardian email approval before lessons open.

A guardian may ask the teacher or program contact to review, correct, export, or delete the learner’s information. Refusing optional media permission does not affect course participation.

Learning records remain while the account and classroom program need them, unless a school’s approved retention schedule or law requires a different period.

Student classroom calls are not recorded. A separate adult-only leadership room for Brenda and platform administrators can record, transcribe, and create AI notes only after explicit consent; Cloudflare retains those files for seven days.

Profile → Privacy provides a JSON export and permanent deletion of this app’s learner-linked records. Deletion does not remove the separate sign-in account.

Families can ask their school or teacher about access, corrections, accommodations, or school-specific records. We minimize collection and review retention before a school launch.