Privacy policy

Parents only

Promptuary accounts are for parents and legal guardians. Children don't use the app and we don't collect information from children. If you think a child has made an account, tell us through the contact form and we will delete it.

What we collect about you

• Your name, email address and password (stored only as a secure hash by our sign-in provider).
• Your family: who is a member and who owns it, and family invites you send.
• Billing: Stripe collects your card and billing address. We keep only what we need to run your subscription: the Stripe customer and subscription ids, the subscription status and period, and your billing state.
• Contact form messages: your name, email, topic and message, plus a one-way keyed hash of your IP address used to limit spam. We never store the IP address itself.
• Records of actions on your account (for example, adding a child) for security and support.

What we collect about your children

The minimum: a nickname you choose, grade, state, and the preferences you set (such as themes, fonts, worldview, accommodations or what helps your child engage), plus the worksheets you make and the standards checklist. We don't ask for a child's full name, birthdate, school or photos.

Worldview, accommodations and what helps your child engage are sensitive. We ask for your explicit consent when you set them, keep them out of logs and analytics, and never send them to AI providers as a label tied to your child: only general instruction text written by us is used to shape a worksheet.

How we use it

To make your worksheets, run your account and subscription, answer your messages, keep the service secure and within its limits, and meet legal obligations. We don't sell your data and don't use it for advertising.

Who helps us run Promptuary

• Stripe, our payment processor.
• Supabase (database and sign-in), Vercel (website hosting) and Amazon Web Services (worksheet making).
• AI model providers (currently Anthropic and Black Forest Labs), which receive worksheet instructions and topics but not your name, email or your child's nickname.
• Resend, which delivers our notification email when you use the contact form.

Each handles data only to provide its service to us.

Where we offer Promptuary

We offer Promptuary only in the US states listed when you add a child, and check your billing state at checkout. This lets us follow each state's privacy rules. Federal law, including COPPA, applies everywhere.

Deleting and what we keep

• Deleting a child removes their nickname, preferences, worksheets, topics, checklist marks and files. We keep a record with no name (an id and usage counts) so plan limits and billing checks still work.
• Deleting your family removes its memberships and accounts and cancels the subscription. Stripe keeps invoices for as long as the law requires.
• Usage and cost records are kept without names. Database backups and server logs are kept for a limited time by our hosting providers, so deleted data can remain in a backup until it expires.
• You can ask for a copy of your data, or for its deletion, through the contact form.

Changes and questions

We may update this policy; the date at the top shows the latest version, and we tell you about changes that matter. Questions go through the contact form.