Privacy Policy

Hi there! Let's talk about your privacy.

We believe in being completely transparent about how we handle your information. Here's everything you need to know, in plain language.

What Information We Collect

When you sign up:

Your email address
Your name
Whether you're a parent or educator
Your password (which we securely hash)

For learners:

Names and basic info provided by parents/educators
Photos uploaded to their portfolios by parents/educators
Learning context and tags
Pod memberships (if any)

When using Prism:

Photos you choose to upload
Comments and context you add
Tags and categories you create
Pod information you create or join

AI-Generated Learning Data:

Learning Signals automatically generated from your portfolio content
Educational assessments and progress analysis
Learning mode patterns and developmental insights
AI-generated reports including transcripts, learning stories, and recommendations
Usage statistics for report generation and rate limiting

Cookies and Technical Information:

Authentication cookies to keep you logged in
Session preferences and settings
Your IP address when using Google Fonts
Device and browser information for security

Children's Privacy (COPPA Compliance)

Prism helps parents and educators document learning for children of all ages, including children under 13.

How We Collect Children's Information:

We do not collect personal information directly from children
Parents and educators provide children's information on their behalf
Children do not have independent login accounts (a future feature may change this, with appropriate parental controls)

What Information About Children Under 13 You May Choose to Provide:

When parents add a learner to their account, they may choose to provide:

Child's name and date of birth
Photographs of learning activities that they upload
Portfolio entries describing educational experiences that they write
Pod memberships when they choose to join learning communities

Parental Consent:

By adding a learner to your account, you represent and warrant that:

You are the parent or legal guardian of that child
You consent to our collection, use, and disclosure of their information as described in this Privacy Policy
You understand that educators in pods you join will be able to create portfolio entries for your child

How Children's Information Is Used:

Creating learning portfolios visible to authorized parents and educators
Generating Learning Signals through AI analysis (parent-controlled)
Sharing with educators in pods the parent chooses to join
Storing photos with AWS S3 and optimizing with Imgix
AI processing by Anthropic Claude (database IDs only, never names)

Third-Party Services That May Receive Children's Information:

AWS S3: Secure photo storage in the United States
Imgix: Image optimization for faster loading
Anthropic Claude: AI analysis of portfolio content

These services are prohibited from using children's information for any purpose other than providing services to Prism.

Parental Rights Regarding Children's Information:

Parents can at any time:

Review all information about their child in their account
Modify or correct their child's information
Delete their child's learner profile and all associated data
Control AI image analysis permissions in account settings
Refuse further collection by not adding new portfolio entries or leaving pods
Request information about what data has been collected

To exercise these rights, log into your account or contact us at privacy@prism.guide.

Special Protections for Children Under 13:

We follow additional privacy protections for children:

Database IDs are used instead of names in AI processing
Parents can disable image analysis for their child in account settings
Parents can delete individual Learning Signals generated about their child
Anthropic retains data for approximately 30 days per their policy

No Advertising or Commercial Use:

We never:

Use children's information for advertising purposes
Sell children's information to third parties
Allow third parties to collect information from children through our service
Condition a child's participation on providing more information than necessary

Questions About Your Child's Privacy?

Review what information we have about your child
Delete your child's information
Understand how we protect children's data
Report a privacy concern

Our Technology Stack (In Plain Language)

We use several trusted services to keep Prism running smoothly and securely:

For Photos:

We store your photos on Amazon S3, like a secure digital filing cabinet
We use Imgix to make your photos load quickly and look great on any device
Each photo gets a unique, private link that only works for authorized users
Photos are encrypted both during upload and while stored

For User Accounts:

Firebase Authentication keeps your login secure
Your password is never saved as plain text
Only you can reset your password through secure email links
Two-factor authentication is available for extra security

For Information Storage:

We use a secure database to organize everything
All information is encrypted
We keep track of who can see what
Regular backups protect against data loss

For AI-Powered Learning Analysis:

Anthropic Claude processes your educational content to generate Learning Signals
Your portfolio text, photos, and context are sent to Anthropic's secure servers in the United States
Anthropic analyzes content to identify learning patterns, progress, and educational insights
Only database IDs (not names) are included in AI processing for privacy protection
You can disable image analysis in your account settings
Anthropic retains data temporarily (typically 30 days) per their data retention policy

For Communication:

Resend handles our email notifications and updates
Google Fonts provides typography (your IP address may be shared with Google)
We may use these services to send you important account information

For Website Functionality:

Essential cookies for authentication and security
Session storage to remember your preferences
Local storage for user interface settings

How We Use Your Information

Legal Basis for Processing:

We process your personal information based on:

Your consent (when you sign up and use our services)
Contractual necessity (to provide our educational platform services)
Legitimate interests (to improve our service and prevent fraud)

We use your information to:

Show you the right portfolios and learning moments
Connect you with your pods and learners
Optimize photos for better viewing
Send important notifications about your account
Maintain secure user sessions with cookies
Provide consistent typography across devices
Generate Learning Signals from your educational content using AI analysis
Create educational reports and recommendations about learning progress
Track usage to enforce rate limits and prevent service abuse
Cache reports for improved performance (stored for up to 6 months)

We do NOT:

Sell your information to anyone
Share photos or learner information with unauthorized users
Use your content for advertising
Access your information unless needed for support
Send personally identifiable information (like names) to AI services
Use your content to train or improve third-party AI models
Share AI-generated insights with unauthorized users

Your Rights and Controls

You can always:

View your information
Download your data
Correct any mistakes
Delete your content
Control who sees what
Leave pods you've joined
Delete your account entirely (reach out to us at privacy@prism.guide to delete all your data)
Control privacy settings within your account
Opt out of non-essential email communications
Disable AI image analysis in your account settings
Delete individual Learning Signals generated about your learners
View all AI-generated reports created from your content

For children under 13, you can:

Review all information about your child in your account
Delete your child's learner profile completely
Control AI analysis permissions for your child's photos
Request details about how your child's data is used
Choose what photos and context to share about your child's learning

Data Retention

Active account data: Stored until you request deletion
Learning Signals: Stored indefinitely unless individually deleted
AI-generated reports: Cached for up to 6 months, then automatically deleted
Anthropic AI processing: Your data is retained by Anthropic for approximately 30 days per their policy
Usage tracking data: Stored for rate limiting and analytics purposes until account deletion

Security Measures

We protect your information through:

Encrypted connections (SSL/TLS)
Secure cloud storage
Regular security updates
Access controls and monitoring

International Data Storage

Our servers are in the United States
Anthropic Claude AI processing occurs on servers in the United States
We follow international data protection laws
We use approved data transfer methods for international data transfers
You can request data location information
AI processing is subject to Anthropic's data processing and privacy policies

Questions About Privacy?

We're here to help! Contact us at privacy@prism.guide if you:

Have questions about your data
Need to report a privacy concern
Want to understand our security better
Need help with privacy settings
Have questions about your child's information

For general support, you can reach us at help@prism.guide.

Updates to This Policy

We'll let you know when we make significant changes by:

Sending an email
Requiring acknowledgment if necessary

Consent for AI Processing

By using Prism's Learning Signals and Analytics features, you explicitly consent to:

AI analysis of your educational content by Anthropic Claude
Generation of Learning Signals from your portfolio entries
Processing of photos and documents for educational insights (unless you opt out)
Creation of AI-generated reports about learning progress and recommendations
Temporary retention of your data by our AI processing partners

You can withdraw consent at any time by:

Disabling image analysis in your account settings
Deleting individual Learning Signals
Contacting us to delete your account to remove all AI-generated insights

Last Updated: November 7, 2025