← Back

Privacy Policy

SkillLoop is built for teenagers, so we treat privacy as a core product requirement, not fine print. This policy explains what we collect, why, and the choices families have.

1. What we collect

• Account information: name, email, and password (passwords are stored securely hashed — we cannot see them).
• Onboarding responses: answers to the intake questionnaire, including age range, skill self-assessments, and optional information about school supports (IEP/504) and current services. "Prefer not to say" is always an option for sensitive questions.
• Uploaded IEP/504 documents (optional): if a family chooses to upload these, files are stored in a private location accessible only to that family and authorized staff — never public, and never bundled with other students' files.
• Emotions Journal entries: free-write text a student chooses to share, plus an automatically generated supportive reply.
• Learning activity: which lessons and assignments are completed, quiz results, written reflections, stars earned, and the calendar days the platform was used.
• Payment status: subscription plan and status from our payment processor. We never receive or store full card numbers.

2. How we use it

• To run the platform: save progress, award stars, and personalize starting difficulty.
• To support care coordination: where a family participates through a care team, activity records (such as days of engagement and completed assignments) may be shared with that family's authorized clinical team, including for insurance documentation the family has consented to.
• To improve lessons and fix problems.

We do not sell personal information. We do not show third-party advertising.

3. Children's privacy (COPPA)

SkillLoop serves teens, including users under 13 in some school or clinic settings. Where required, we obtain verifiable parental consent before collecting personal information from children, collect only what is needed to run the service, and give parents the right to review and request deletion of their child's information.

4. Student records (FERPA)

When SkillLoop is used through a school under an institutional agreement, student data is handled as directed by the school consistent with FERPA, and used only for the educational purposes in that agreement.

5. Health-related information

Some information families choose to share (for example, existing services or supports) may be health-related. Where SkillLoop activity is used by an authorized clinical team for care or insurance purposes, that data is handled under the safeguards required for protected health information, is encrypted in transit and at rest, and access is limited to the family's own care team.

6. Emotions Journal

The Emotions Journal is a free-write space for students to reflect or vent. Entries and the supportive reply generated for the student are visible to that student. Every entry is automatically reviewed — first by a safety check for language suggesting self-harm or crisis, which triggers immediate crisis resources shown directly to the student, and otherwise by a general review that may flag an entry for staff attention (for example, "a staff member should check in" or "this may be worth mentioning to a partner clinic"). Staff generally see this flag and a short internal note, not the raw entry text, unless a deeper review is needed for safety reasons. The Emotions Journal is a supportive feature, not a clinical or therapy record.

7. Where data lives and who processes it

• Database and authentication: Supabase (data encrypted in transit and at rest, access controlled per-user).
• Payments: Stripe.
• Hosting: Netlify.

8. Retention and deletion

We keep account data while the account is active. Families can request a copy of their data or full deletion at any time by contacting us; deletion removes the account, progress, reflections, and onboarding responses, subject to any records we are legally required to retain.

9. Your choices

• Skip any sensitive onboarding question using "prefer not to say."
• Request access, correction, or deletion of your data.
• Cancel a subscription at any time.

10. Contact

Privacy questions or requests: help@skillloop.org