Who we are
Arc School is operated by Arc Labs LLC, a North Carolina limited liability company. Questions about this policy: helloarclabshq@gmail.com.
Our parent-first architecture
Arc School is designed for parents and guardians. The parent is the account holder and the sole user of the platform. Children participate in learning activities at the direction of their parent — they don’t interact with the app, create accounts, or submit information directly.
This design is intentional. It means parental oversight is built into every interaction, and no data is collected from children without a parent present and in control.
Information we collect
Account information (when you sign up)
Your email address, password (hashed, never stored in plain text), and display name. This is standard account data collected from you, the parent.
Child profile data (entered by you)
Your child’s grade level and interest preferences. This data is entered by you about your child — your child does not enter it themselves. We do not collect children’s names, photos, birthdates, or any directly identifying information about your child.
Learning activity data
Mastery observations (Got It / Needs Practice), session logs, difficulty ratings, session notes, and assessment results. All of this data is recorded by you, the parent, based on your observations of your child’s learning. Your child does not input any of this data.
Feedback
If you submit feedback through our feedback widget, we collect your rating, category, message, and optionally your email (if you want a reply). Page URL is captured for context.
Payment information (if you upgrade)
Payment processing is handled entirely by Stripe. We never see, store, or have access to your credit card number. We store only your Stripe customer ID and subscription status to manage your account tier.
Usage analytics
We use Vercel Analytics and Speed Insights to understand how the site is used (page views, load times). This data is anonymous and aggregated. No personal information is included.
AI usage
When AI features are triggered (differentiation, Smart Reschedule), we send anonymized learning context to Anthropic’s Claude API. This context includes the standard being practiced, mastery level, and grade — never your name, email, or child’s identity. AI responses are cached and shared across users to minimize API calls.
How we use your information
We use your data to: operate your account and deliver the curriculum, track your child’s mastery progress, personalize the learning experience, process payments, respond to your feedback and support requests, and improve Arc School based on aggregated usage patterns.
We do not use your data for advertising. We do not sell your data. We do not share your data with third parties for marketing.
Third-party services
We use the following services to operate Arc School:
- Supabase — database and authentication (hosted on AWS, SOC 2 compliant)
- Vercel — website hosting and analytics
- Stripe — payment processing (PCI DSS compliant)
- Anthropic (Claude API) — AI-powered learning features (no personal data sent)
- Google Sheets — email list management (for pre-signup leads only)
Data retention
Account data is retained while your account is active. If you delete your account, all personal data (profile, child data, mastery records, observations, session logs) is deleted within 30 days. Anonymized, aggregated analytics data may be retained indefinitely.
AI response caches are retained for 30 days, then automatically purged.
Your rights
You may request deletion of your account and all associated data at any time by emailing helloarclabshq@gmail.com. We will process deletion requests within 30 days.
You may request a copy of all data we store about you and your child by emailing us.
You may update or correct your information at any time through your account settings.
Children’s privacy (COPPA)
Arc School is directed at parents and guardians — not children. Parents are the account holders and sole users. No data is collected directly from children.
Child profile data (grade level, interests) and learning observations are entered by the parent, not the child. We do not collect children’s names, photos, email addresses, physical addresses, phone numbers, or any directly identifying information.
If Arc School introduces child-facing features in the future (such as interfaces for Grade 3+ students), we will update this policy and implement additional COPPA compliance measures, including verifiable parental consent, before any such features are launched.
If you believe personal information from a child under 13 has been collected through our service, contact us at helloarclabshq@gmail.com and we will delete it immediately.
Security
We use industry-standard security practices: encrypted connections (HTTPS), hashed passwords, row-level security in our database, and environment-variable protection for API keys. Your data is hosted on SOC 2 compliant infrastructure (Supabase/AWS).
Changes to this policy
We may update this policy as Arc School evolves. Material changes will be communicated via email to registered users. The effective date at the top of this page will be updated.