Privacy Policy

    Last updated: April 27, 2026

    LearnSpark LLC ("LearnSpark", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including our websites and applications across all subdomains (learnspark.io, app.learnspark.io, app2.learnspark.io, and any future subdomains).

    1. Information We Collect

    We may collect the following categories of personal information. Not all fields are collected from every user — what we collect depends on which features you use, whether you make a purchase, and what you choose to provide.

    1.1 Contact & account information

    • Your full name
    • Your email address
    • Your phone number (optional — used for setup session confirmations, SMS reminders, and support)
    • Your mailing address (optional — used only when we send physical items such as swag, gifts, printed materials, or event invitations)
    • Account credentials (hashed password, or auth provider ID if you sign in with Google)

    We use your email and phone number for transactional messages (booking confirmations, billing receipts, account alerts) regardless of marketing preferences. Marketing messages (newsletter, product updates) are opt-in and can be unsubscribed at any time.

    1.2 Billing & payment information

    Collected only if you subscribe to a paid plan or make a purchase:

    • Billing name and billing address (required for tax compliance and fraud prevention)
    • Subscription tier, billing cycle, and invoice history
    • Last 4 digits, card brand, and expiry date of your payment method (for display only)

    Full card numbers and CVC codes are never stored on LearnSpark servers. All payment processing is handled by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. See Stripe's Privacy Policy for details on how they handle payment data.

    1.3 Educational & product-usage information

    • Educator profile (teaching style, subjects, goals)
    • Student profiles you create (first name or nickname, age/grade, learning preferences, mastery data) — see Section 4 for children's data handling
    • Lesson plans, schedules, generated content, and progress records
    • Setup session prep responses (subject interests, education style)

    1.4 Technical information (collected automatically)

    • IP address, browser type, device type, and operating system
    • Pages visited, referrer, UTM parameters, and affiliate attribution IDs
    • Cookie identifiers (subject to your consent — see our Cookie Policy)
    • Meta Pixel (fbclid) and analytics identifiers, where consent has been given

    2. How We Use Your Information

    We use the information we collect to:

    • Provide, operate, and maintain our Service
    • Improve, personalize, and expand our Service
    • Understand and analyze how you use our Service
    • Develop new products, services, features, and functionality
    • Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Service, and for marketing and promotional purposes
    • Process your transactions and send related information
    • Find and prevent fraud
    • Comply with legal obligations and regulatory requirements

    3. Data Processors and Third-Party Services

    We use the following third-party service providers to process your data as part of our Service delivery:

    AI & Language Processing:

    • Google Gemini API – AI language model for personalized learning recommendations and content generation. Data Processing Agreement included in Google Cloud Terms.
    • OpenAI API – AI language model for supplementary educational content and analysis. Data Processing Agreement available upon request.
    • Anthropic Claude API – AI language model for content generation and learning support. Data Processing Agreement available upon request.
    • Perplexity AI API – Research and information synthesis for educational content. Data Processing Agreement available upon request.
    • XAI (Grok) API – AI reasoning and content generation for learning materials. Data Processing Agreement available upon request.

    Audio & Voice Processing:

    • ElevenLabs API – Text-to-speech and voice synthesis for accessible learning content. Data Processing Agreement available upon request.

    All processors are contractually obligated to process personal data only on our instructions and to maintain appropriate security measures. Data Processing Agreements for all providers are available upon request at [email protected].

    4. Children's Privacy & Educational Data

    Our Service is designed for use by parents, guardians, and educators over the age of 18. Children do not create accounts or interact with the platform directly. However, because LearnSpark generates personalized educational content, adult account holders may provide information about their children to use our Service. We take the protection of children's data extremely seriously and comply with the Children's Online Privacy Protection Act (COPPA).

    What Children's Data We Collect:

    Through parent or guardian accounts, we may collect the following information about children:

    • Child's name or nickname (as provided by the parent/guardian)
    • Age or grade level
    • Learning preferences and interests
    • Subjects and topics of study
    • Progress and assessment data generated through use of the Service
    • Lesson history and curriculum records
    • Interest profiles used for personalized content generation

    Why We Collect It:

    Children's educational data is collected and processed solely to:

    • Generate personalized, age-appropriate lessons and learning materials
    • Track educational progress and adapt difficulty levels
    • Provide progress reports and insights to parents and educators
    • Improve the quality and relevance of educational content

    How It's Collected:

    All children's data is provided indirectly by verified adult account holders (parents, guardians, or educators). Children never create accounts, log in, or interact with LearnSpark directly. We do not knowingly collect personal information directly from children under 13.

    How Long We Keep It:

    Children's educational data is retained for as long as the parent or guardian account remains active. When a parent removes a child's profile from their account, or when the parent account is deleted, all associated children's data is deleted or anonymized within 30 days.

    Third-Party Processing:

    Children's data may be processed by the AI and audio service providers listed in Section 3 above, solely for the purpose of generating personalized educational content. Children's data is never sold, shared for advertising purposes, or used for behavioral targeting.

    Parental Rights:

    Parents and guardians have the right to:

    • Review all personal information collected about their child
    • Request a copy or export of their child's educational data
    • Request correction of any inaccurate information
    • Request deletion of their child's data at any time
    • Withdraw consent for further collection of their child's information

    To exercise any of these rights, parents may manage child profiles directly within their account settings or contact us at [email protected]. Deletion requests are completed within 30 days.

    5. Data Security

    We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

    6. Data Retention and Deletion

    Retention Period:

    We retain your personal data indefinitely while your account is active. This allows us to maintain your learning history, progress records, and account information.

    Deletion Request:

    You may request deletion of your account and associated personal data at any time by contacting us at [email protected]. Upon receiving a deletion request:

    • We will delete or anonymize your personal data within 30 days from the date of your request
    • Some data may be retained longer if required by law or for legitimate business purposes
    • Certain data may be retained in anonymized form for analytics and service improvement

    7. Cookie Policy

    Please refer to our Cookie Policy for information about how we use cookies and similar tracking technologies.

    8. Your Data Protection Rights

    Depending on your location, you may have the following rights regarding your personal information:

    Universal Rights (All Users):

    • The right to access – You have the right to request copies of your personal data.
    • The right to rectification – You have the right to request that we correct any information you believe is inaccurate.
    • The right to erasure – You have the right to request that we erase your personal data, subject to certain conditions.
    • The right to data portability – You have the right to request that we transfer the data we have collected to another organization, or directly to you.

    GDPR Rights (EU Residents):

    If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including:

    • The right to restrict processing – You have the right to request that we restrict the processing of your personal data
    • The right to object to processing – You have the right to object to our processing of your personal data
    • The right to lodge a complaint with a data protection authority
    • Rights related to automated decision-making and profiling

    CCPA Rights (California Residents):

    If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

    • The right to know what personal information is collected, used, shared, or sold
    • The right to delete personal information collected from you
    • The right to opt-out of the sale or sharing of your personal information
    • The right to non-discrimination for exercising your CCPA rights

    PIPEDA Rights (Canadian Residents):

    If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including:

    • The right to access your personal information
    • The right to request correction of inaccurate personal information
    • The right to understand how your information is being used
    • The right to request deletion subject to legal obligations

    Exercising Your Rights:

    To exercise any of these rights, please contact us at: [email protected]

    If you make a request, we have one month (or as otherwise required by applicable law) to respond to you.

    9. Changes to This Privacy Policy

    We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

    10. Contact Us

    If you have any questions about this Privacy Policy or our privacy practices, please contact us at: [email protected]

    Mailing Address:
    LearnSpark LLC

    11. Lead Magnet & Free Resource Data

    When you download a free resource, we collect your email address and, where provided, your name. This data is used to: (a) deliver the requested resource, (b) send related educational content and product information, and (c) improve our resources and services.

    Your email and name may be shared with our email/messaging platform (currently Respond.io) for the sole purpose of delivering communications you've consented to. We do not sell your personal data to third parties.

    12. Third-Party Tools

    We use the following third-party services that may process your data: Respond.io (messaging, email delivery, and in-app support), Stripe (payment processing), and Google Analytics / PostHog (anonymous usage analytics). Each service has its own privacy policy governing their data handling.

    13. Data Retention (Email Subscribers)

    We retain your email and contact information for as long as you remain subscribed to our communications. If you unsubscribe, we will delete your data within 30 days unless we are required to retain it for legal or compliance purposes.