Privacy Policy

1. Introduction

Spatrian ("we," "our," or "us") is committed to protecting the privacy of our users, particularly the children who participate in our homeschool physical education program. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Our platform is designed for parent-directed homeschool physical education. We comply with the Children's Online Privacy Protection Act (COPPA) and implement practices aligned with the Family Educational Rights and Privacy Act (FERPA), although as a supplementary curriculum tool we are not a FERPA-covered educational institution.

2. Information We Collect

2.1 Information You Provide

• Account Information: Parent/guardian name, email address, state of residence
• Student Information: Student name, age group designation (e.g., U14, U16)
• Consent Records: Digital signatures, waiver acceptances, dates of agreement, COPPA verifiable parental consent
• Educational Records: Lesson completion data, quiz scores, rubric assessments, journal entries, progress tracking
• Assistant Messages: What you or your child type to Coach Spatrian in the app, and what a visitor types to the assistant on our public pages
• Payment Information: Processed securely through Stripe — we do not store credit card numbers

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, session duration
• Device Information: Browser type, operating system, screen resolution
• Uploaded Content: Videos, images, and documents uploaded to the file repository or video journal

2.3 Performance and Movement Data

• Biometric Patterns: Movement speed, acceleration, and activity patterns derived from uploaded video
• Spatial Tracking: Position coordinates relative to the playing field during video analysis
• Health & Fitness Indicators: Estimated exertion levels, fatigue indicators, and activity intensity metrics
• Performance Analytics: Skill scores, session metrics, badges, and progression data

3. Children's Privacy & COPPA Compliance

We comply with the Children's Online Privacy Protection Act (COPPA), including the Rule amendments effective April 22, 2026. We do not knowingly collect personal information directly from children without verified parental consent.

3.1 Parental Consent

• All accounts are created and managed by the parent/guardian
• We require Verifiable Parental Consent (VPC) before collecting children's data
• Parents provide granular consent for specific data categories: account information, biometric data, spatial tracking, performance analytics, video recordings, and health/fitness data
• An age-gate verification is performed during onboarding

3.2 Parental Rights

• Parents may review all data collected about their child at any time
• Parents may revoke consent for specific data categories without closing the account
• Parents may request complete deletion of their child's data
• Upon consent revocation, affected data is purged within 48 hours

3.3 Limitations

• We do not require children to provide personal information beyond what is necessary for the educational program
• We do not share children's personal information with third parties for marketing purposes
• We do not serve behavioral advertising to children
• We do not enable children to make personal information publicly available
• A child's conversation with Coach Spatrian is stored under that child's own record, and is deleted by the same request that deletes the rest of it
• Coach Spatrian proposes activity hours; a parent presses the button that logs them

4. How We Use Your Information

• To provide and maintain the homeschool PE curriculum and tracking services
• To generate progress reports, transcripts, and compliance documentation
• To perform AI-powered video analysis and coaching feedback (see Section 6)
• To process payments and manage subscriptions
• To send essential service communications (not marketing)
• To improve and optimize the platform
• To comply with legal obligations

5. Data Storage and Security

Your data is stored on secure cloud infrastructure hosted in the United States (Amazon Web Services). We implement appropriate technical and organizational measures to protect personal information, including:

• Encrypted data transmission (TLS/HTTPS) for all connections
• Secure authentication mechanisms with hashed credentials
• Regular data retention reviews with automatic purging of expired records
• Role-based access controls limiting data visibility
• Immutable audit logs for all consent and data deletion operations

6. Data Sharing & Third-Party Services

We do not sell, trade, or rent personal information to third parties. Information may be shared only in the following circumstances:

• AI Features (Google Gemini): Google's Gemini API processes three things for us: video you submit for analysis, together with its metadata; the messages exchanged with Coach Spatrian in the app, which for a student account are a child's messages; and the messages typed to the assistant on our signed-out public pages. Google acts as a data processor on our behalf. For video analysis, Google does not use the content to train their general AI models. See Google's AI Terms of Service.
• Shopping Assistant (Anthropic): The pre-purchase assistant on our marketing pages runs on Anthropic's Claude API, which receives the messages typed to it. It is available before sign-in only, answers questions about the product, and is never given access to a family's records. See Anthropic's Privacy Policy.
• Payment Processing (Stripe): Stripe receives payment information necessary to process transactions. See Stripe's Privacy Policy.
• Email Delivery (Brevo): Account email — verification, password resets, reports you ask us to send — is delivered through Brevo, which receives the recipient address and the message. See Brevo's Privacy Policy.
• Legal Requirements: When required by law, subpoena, or court order
• Safety: To protect the rights, property, or safety of our users

We do not use third-party analytics services, advertising networks, or social media tracking pixels.

7. Cookies & Local Storage

We use browser local storage to maintain your login session and application preferences. We do not use third-party tracking cookies or advertising cookies. No information is shared with advertising networks through cookies or similar technologies.

8. Your Rights

You have the right to:

• Access the personal information we hold about you and your child
• Correct inaccurate information
• Request deletion of your data (processed within 48 hours)
• Export your data in a portable format
• Withdraw consent at any time, including for specific data categories
• Opt out of AI-powered video analysis while continuing to use other platform features

8.1 California Residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us using the information in Section 11.

9. Data Retention

We retain personal information only as long as necessary to provide our services or as required by law. Specific retention periods by data category:

• Account Information: Duration of subscription plus 2 years after last activity
• Performance Analytics: Up to 3 years (to support long-term progression tracking)
• Biometric & Spatial Data: Up to 1 year
• Video Recordings: Up to 6 months
• Health & Fitness Data: Up to 1 year
• Coach Spatrian Conversations: The most recent 40 turns per child, so the coach can remember last week's session; older turns fall off as new ones arrive

Expired data is automatically purged or anonymized. You may request earlier deletion at any time. Upon account closure, all personally identifiable data is deleted within 30 days, with anonymized aggregate data retained only where necessary for platform improvement.

During beta: these are the periods we retain data for, and they are ceilings rather than guarantees that data will still be there. A release may reset or lose records, as the Beta Terms of Service say in full — so export anything you need to keep. Deletion on request works as described above either way.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. For material changes affecting children's data, we will re-obtain parental consent where required by COPPA.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights regarding personal data, or need to submit a COPPA-related request, please contact us:

• Through the Contact Us page on our platform
• By email at: privacy@spatrian.com

We will respond to verified requests within 30 days.