Privacy Policy

1. Information We Collect

• Parent account information, such as email address, authentication status, verification events, and support requests.
• Student profile information, such as parent-provided first name, last initial, grade, selected school reference, AP subjects, course context, learner-code status, learner ID, and a hashed student PIN.
• Learning data, such as answers, drafts, attempts, timing, mistake tags, mastery signals, uploaded-note activity, and parent dashboard signals.
• Uploaded materials, such as notes, images, PDFs, extracted text, generated study packs, flashcards, practice, and related metadata.
• Operational data, such as IP-derived request logs, device/browser metadata, security events, API errors, worker status, and usage diagnostics.

2. How We Use Information

• Create and protect parent accounts, student profiles, learner codes, learner IDs, and PIN-based student access.
• Provide personalized learning plans, practice, feedback, study packs, progress summaries, and parent support prompts.
• Send parent progress emails or weekly digests when parent preferences, unsubscribe/suppression controls, and the admin sending switch allow it.
• Process uploads, extract learning content, generate AI-assisted materials, and save outputs for reuse.
• Monitor service health, prevent abuse, debug errors, operate worker queues, and protect accounts and data.
• Respond to parent requests for access, correction, deletion, support, or privacy information.

3. AI Processing

TARK Learn may send uploaded notes, extracted text, answer context, or learning metadata to configured AI providers only to provide the learning features requested in the product. Generated outputs are saved to the family's TARK Learn account so reopening a study pack does not require a new generation request. Parents and students should avoid uploading sensitive information that is not needed for study. AI-specific rules are described in the AI Use Policy.

4. Sources of Information

Most parent and learner setup information comes from the parent or legal guardian. Students create their learner ID and PIN and then create learning activity as they use the product. Operational logs are generated automatically by the service. School names, districts, cities, states, and ZIP codes come from school-directory reference data and are used for search and context, not as a student's home address.

5. How We Share Information

TARK Learn does not sell your family's data. We don't show ads, we don't use tracking tools, and no one trains AI models on your family's data. We use a few services to run TARK Learn, and each one gets only what its job needs:

• Amazon Web Services (AWS) runs TARK Learn: sign-in, the database, file storage and the servers. Your family's data is stored there, encrypted.
• Amazon Bedrock, part of AWS, runs the AI that writes plans, practice, summaries and email drafts. It gets what each job needs, such as school items, a teacher file or photo you add, or a topic your child types, and never school passwords. Amazon doesn't use it to train AI models, and Bedrock's logging of requests is turned off.
• Expo, Apple and Google deliver push alerts to your phones and tablets. They get the device's push token, a short title (at most a child's first name) and a fixed sentence, never a class, assignment, score or answer (section 11).
• Expo also delivers app updates. It gets what any download needs, such as the app's version, the kind of device and its internet address, and none of your family's data.
• Zoho sends TARK Learn's emails and runs our support mailbox. It gets your email address and the emails themselves.
• Stripe handles optional support payments only. It never gets your child's information.
• TARK staff see your family's data only when needed to help you, keep the service running or look into misuse.
• We share information when the law requires it, or to protect someone's safety.

The full list is on the Subprocessors page.

6. Children and Parent Controls

TARK Learn is designed so parents create the account, add learners with minimized student details, and invite students through learner codes. Students do not need to see Cognito, create a full account, or provide an email address to set up a learner ID and PIN. Parent controls and child-specific details are described in the Children's Privacy Notice and Student Privacy page.

Parents can manage family privacy controls from the parent dashboard and can opt out of weekly digest emails through account preferences, unsubscribe links, support requests, or delivery-suppression handling.

7. Retention and Deletion

We keep family, student, upload, generated-content, and progress data while the account is active or as needed to provide the service, support requests, security, audit, and legal obligations. Used and expired learner setup codes are not kept as visible codes. Parents can hard-delete a learner profile from the parent dashboard, and can request access, correction, export, or deletion by emailing privacy@tarklearn.com. Some operational logs or backups may remain for a limited period after deletion when needed for security, legal compliance, debugging, or disaster recovery.

8. Security

TARK Learn uses account authentication, parent-controlled student onboarding, private storage, scoped AWS roles, encryption-capable cloud services, limited support access, and isolated Java code execution. No internet service can promise perfect security, but we design the service to reduce unnecessary collection and limit access to student learning data.

9. State Privacy Rights

Depending on where you live and whether a privacy law applies to TARK Learn, you may have rights to know, access, correct, delete, or limit certain uses of personal information. We honor valid parent and user requests through the contact channel below. TARK Learn does not sell student data. Cookie and browser-storage details are described in the Cookie Policy.

10. TARK Learn Browser Extension

The TARK Learn browser extension for Chrome and Edge helps a parent see their children's schoolwork in one place. It works only on school sites the parent connects, one at a time, and Chrome asks the parent to allow each site. It cannot see any other site.

• It reads what the connected site shows the signed-in parent or student: courses, assignments, due dates, scores, submission status, missing work, and message titles (sender, subject and date). It only opens pages to read them. It never clicks buttons, submits, starts, deletes or changes anything on the school site, and never opens work the student hasn't opened.
• It never reads or stores school passwords or anything typed into a sign-in form. The school site's own sign-in stays in the browser.
• After the parent gives the study coach OK for a child (see section 11), the extension sends that child's school records to TARK Learn, where they are saved for that child only. Before that OK, TARK Learn's servers refuse them. Siblings on a shared parent account are kept apart, and other children's names are removed before anything leaves the browser.
• For a site TARK Learn doesn't know yet, an AI step (see section 11) looks at the site's pages in the parent's browser to learn where the schoolwork is, then saves a reader that works without AI. The page text it sees is not stored.
• Parents can remove a site, or clear all TARK data in the browser, from the extension at any time. Removing the extension deletes what it keeps in the browser; records already saved to TARK Learn are deleted from the app or the parent dashboard.

The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. It is not sold, used for advertising, or used for anything other than the family's own study features.

11. Family AI Study Coach (pilot)

The study coach is in a private pilot with a small number of families who know it is a pilot. It is switched on for each child only after the parent gives their OK for that child in the TARK Learn app. For a child under 13, the parent also signs with their typed name and TARK Learn emails the parent a confirmation first; the OK is saved only if that email was sent. The parent can withdraw the OK at any time, which stops new syncs, AI steps and practice for that child.

• School records from the extension (section 10), saved per child.
• Teacher files and schedules the parent adds. They are read into dates, topics, grading weights and class rules for the parent to check; the file itself is kept only until it is read (about an hour at most).
• Practice: the child's answers, the photo of an answer box (read and not kept), handwriting in answer boxes as small pen strokes (kept until the parent reviews the set, 30 days at most), typed written answers, and the parent's marks and ratings.
• Problem reports a parent sends from the app, with an optional screenshot. The screenshot is deleted when the report is closed, or after 30 days.
• AI: Anthropic's Claude models, run through Amazon Bedrock in TARK Learn's own AWS account, read the school information, teacher files and the child's practice answers to write the daily note, practice sets, lessons and email drafts. The data is not used to train AI models.
• Ira is TARK's AI helper: in the app, the AI steps above go by the name Ira.
• Push alerts, when the parent (or the child, on their own device) turns them on: TARK Learn keeps the device's push token, each person's alert switches, and the alerts sent. An alert goes through Expo's push service and then Apple Push Notification service (iPhone, iPad) or Firebase Cloud Messaging (Android). They receive the device token, a short title (at most a child's first name, with words such as “2 missing assignments”) and a fixed sentence; never a class, assignment, score or answer. The app shows the details after it opens. No alerts go out between 9 pm and 7 am. Signing out on the device stops its alerts; they are deleted with the family, the child or the parent.
• Activity: a short record, per child, of what the parent, the child and TARK did with the study coach (a set made or finished, a plan task done, teacher material added, a school check that found something), with how much of Ira each used. It holds no child's name and no question text. Only the family's parents see it; it is in the family's data copy and is deleted with the family or the child.
• Answer keys, school records and teacher email drafts are shown only to the parent. Teacher emails are drafts the parent sends from their own email.
• Deletion: the parent can delete the whole family, including every child's data and the parent's sign-in, from Settings in the app. One child's data can be deleted on the parent dashboard, and a copy of the family's data can be requested there or by email.

12. Pilot Invite Requests

If you ask to join the pilot on tarklearn.com, we keep your email address, your school district and how many children you have in grades 6 to 12, with the date you asked. We use them only to invite you to the pilot and to send pilot news, and we don't share them. We delete a request when the pilot ends or when you ask us at privacy@tarklearn.com.

13. Changes

We may update this Privacy Policy as the product, legal requirements, or subprocessors change. The effective date above shows when this version became active.

14. Contact

Questions or requests can be sent to privacy@tarklearn.com. Product support can be sent to support@tarklearn.com.