Privacy Policy

1. Who We Are

FolioKid ("we," "us," or "our") is a homeschool portfolio tool that helps parents document and organize their children's academic work. Our website is foliokid.com. For privacy questions, contact us at admin@foliokid.com.

2. Information We Collect

We collect only what is necessary to provide the service:

• Account information: Your email address and hashed password, used to create and secure your account.
• Student profiles: Names and grade levels you add for each child you're homeschooling.
• Portfolio content: Photos of student work, subject tags, time logged, and notes you enter.
• Usage data: Basic app activity (pages visited, features used) to help us improve the product. This data is not linked to your identity.
• Device information: Browser type, operating system, and IP address, collected automatically when you use the service.
• Checklist and guide sign-ups: If you request a free checklist or guide on our website, we collect your email address, the state you chose, and how you found us (for example, which ad or link you clicked). You don't need a FolioKid account to do this.

We do not collect Social Security numbers, payment card details, or government-issued ID. If you subscribe to a paid plan, payment is processed by a third-party provider (Stripe or RevenueCat) and we do not store your card information.

3. How We Use Your Information

• To provide, operate, and maintain the FolioKid app and website.
• To authenticate you and keep your account secure.
• To store and display your portfolio content.
• To generate PDF exports of your portfolio on request.
• To send transactional emails (account confirmation, password resets).
• If you request a free checklist or guide: to email it to you, and to send a short series of follow-up emails with record-keeping tips and information about FolioKid. Every one of these emails includes an unsubscribe link. We do not send you other marketing emails without your consent.
• To diagnose technical problems and improve app performance.

4. Children's Privacy (COPPA)

FolioKid is designed for parents and guardians, not for use by children directly. We do not knowingly collect personal information from children under 13. The student profiles and portfolio photos you create belong to your account — a parent or guardian's account — and are not accessible to or collected from the children themselves.

Portfolio content may include photos of a child's work (drawings, writing samples, projects). This content is stored privately and is only accessible to the account holder. If you believe we have inadvertently collected data from a child under 13 without parental consent, please contact us immediately at admin@foliokid.com.

5. How We Store and Protect Your Data

Your data is stored on Supabase, a secure cloud platform hosted on Amazon Web Services (AWS) in the us-west-1 (Oregon) region. Supabase provides:

• Encryption at rest and in transit (TLS/HTTPS).
• Row-level security policies so only your account can access your data.
• Regular automated backups.

Photos you upload are stored in a private Supabase Storage bucket. Access is controlled by your authenticated session. We use signed or public URLs scoped to your account only.

No security system is perfect. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

• Service providers: Supabase (database and file storage), Stripe or RevenueCat (payment processing), email delivery services, Sentry (error monitoring — collects browser and session data to help us diagnose bugs), hCaptcha (bot protection on sign-up and login forms — subject to hCaptcha's privacy policy), and Meta (Facebook) Pixel (advertising and conversion tracking — subject to Meta's privacy policy) — only to the extent necessary to provide or improve the service.
• Legal compliance: If required by law, court order, or to protect the rights, property, or safety of FolioKid, our users, or the public.
• Business transfer: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and subject to a different privacy policy.

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct your account information at any time in the app.
• Deletion: Delete individual portfolio items from within the app, or request full account deletion by emailing admin@foliokid.com. We will delete your account and all associated data within 30 days.
• Data portability: Export your portfolio as a PDF directly from the app. You may also request a data export in machine-readable format.
• Opt-out: You may opt out of non-essential emails at any time with the unsubscribe link in any email, or by emailing us.

If you are a resident of the European Union (GDPR), California (CCPA/CPRA), or another jurisdiction with specific privacy rights, those rights also apply. Contact us at admin@foliokid.com to exercise them.

8. Cookies and Tracking

The FolioKid web app uses localStorage (not cookies) to maintain your login session. We use Plausible Analytics for privacy-preserving, cookieless traffic measurement — no personal data or cross-site identifiers are collected by Plausible. We also use the Meta Pixel, which may set cookies and collect browsing data to measure advertising effectiveness and conversions on Facebook and Instagram. When you request a checklist, the Pixel records that a sign-up happened; we do not send your email address to Meta. You can opt out of Meta's data collection via your Facebook ad settings or the Digital Advertising Alliance opt-out tool.

9. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will permanently delete your data within 30 days, except where retention is required by law. Backups may retain data for up to 90 days after deletion.

If you sign up for a free checklist or guide without creating an account, we keep your email address until you unsubscribe or ask us to delete it. After you unsubscribe, we keep only your address on a do-not-email list so we never email you again.

10. Third-Party Links

The app may contain links to third-party websites (e.g., state education department websites). We are not responsible for the privacy practices of those sites and encourage you to review their policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by displaying a notice in the app at least 14 days before the changes take effect. Continued use of FolioKid after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

• Email: admin@foliokid.com
• Website: foliokid.com