Privacy policy

Last updated 15 October 2026

in4me-tutor is made by Gabe Consulting Inc. (British Columbia, Canada). It is used by young children, so this policy is written to be read rather than to cover us. It says exactly what is stored, because that is the only form of this document that is any use to you.

The service is offered to families in the United States and Canada, except Quebec. We do not offer it in Quebec, the European Economic Area, the United Kingdom or Switzerland, and we do not knowingly sign up families there — an account cannot be created from any of those places, Quebec included. Quebec is excluded because its law has particular requirements for children under fourteen, which is everyone who uses this, and we would rather say so than serve them badly.

The short version

• The account is yours. Your child is a profile on it, not a user, and has no login.
• About your child we keep a first name, a year of birth, and what they answered.
• There is no advertising, no behavioural tracking and no analytics anywhere in this service — not in the child’s app, not on your dashboard, not on these pages.
• We never sell or rent your family’s information. We share it only with the handful of companies that run the service for us, listed below.
• You can download everything we hold, or have a child’s record erased, at any time — and we delete records that go unused, on a schedule set out below.

What we store about you, the parent

• Your email address, so you can sign in and so we can send the weekly report.
• Your time zone, captured from your browser when you sign in. Days and streaks are counted in your local day, and a server that does not know your zone gets them wrong by up to a day.
• When you gave consent for your child’s profile, recorded on our clock.
• Your subscription state — which plan, when access runs to, whether it is set to end, and if you cancel, the reason you chose.
• How you found us, if we know. The sign-in screen asks, and answering is optional. And if you arrived by a link that names where it was posted — a newsletter or a forum, say — or from another website, your browser notes that place the first time and sends it once, when you create your account: the name of the place or the website, and never which page of it, which pages of ours you read, or anything you did on them. We use it to know which places are worth telling parents about us, and for nothing else.

We never see or store your card. Payments are handled by Stripe, and what we keep is an identifier that lets us ask Stripe about your subscription.

What we store about your child

• A first name or a nickname, whichever you prefer — we ask for one name and never a last name, and the screen says so. It appears on their screen and in your weekly email.
• A year of birth. Only the year, never the full date. It suggests a starting grade and nothing else.
• Every answer they give: which skill and level, what they answered, whether it was right, how long it took, and whether they used a touch screen, a mouse, a trackpad or a keyboard. The problem itself is not stored — a number that regenerates it is, which is how a year of practice stays small.
• Their sessions and placement results, and the progress estimate worked out from them.
• A record of alerts we sent you about them, so we never send more than one a week.

Technical records kept by the companies that host us

Our own code stores no network address and no device fingerprint. But the services that host this site, its database and its audio keep ordinary server logs, and those logs contain IP addresses and browser user-agent strings. We cannot switch that off, so we tell you instead.

Those logs exist for security, fraud prevention and diagnosing faults — and for nothing else. We do not use them to build a profile of anybody, we do not join them to a child’s practice record, and nothing in the child’s app reports to any third party. Collecting a persistent identifier for those purposes alone is what the children’s privacy rules call support for the internal operations of the service, which is why it does not need separate consent.

Each provider keeps those logs for its own fixed period and then discards them. These are the longest they are kept:

• Vercel (hosting) — no more than 30 days.
• Supabase (database and sign-in codes) — no more than 7 days.
• Resend (email) — 30 days, and everything is deleted within 90 days if we close our Resend account.
• Stripe (payments) — 6 months for technical request logs. The record that a payment happened is kept far longer, because financial law requires it, and it holds nothing about a child.
• Cloudflare (the spoken audio) — we have switched on no logging that reaches us, and we hold none. Cloudflare keeps its own network logs briefly, for its own security, as it does for every site it serves. There is nothing to sign in to and the audio is identical for every child, so a request for it says nothing about yours.

We do not receive, download or keep a copy of any of these. They sit with the provider, expire on the schedule above, and none of them is ever joined to a child’s practice record.

The one thing we check about where you are

When you create an account we look at the country and province our host has resolved from the connection — a two-letter code, worked out by Vercel before the request reaches us — because we only offer the service in some places, as the top of this page says. We compare it, we allow or refuse the signup, and we do not write it down: it is in no database of ours and it is attached to no account. It is read at signup and never again, so using the service does not report where you are.

What we deliberately do not collect

• No full date of birth.
• No photographs, video or voice recordings.
• No free text written by a child. There is nowhere in the child’s app to type anything but a number or tap an answer, which is a design decision rather than an oversight.
• No email address, password or login for a child.
• No precise or device location. We ask your browser only for its time zone, and never for geolocation.
• No advertising identifiers, no behavioural profiles, and no third-party analytics or advertising code anywhere in the service.

Cookies

One, and it is essential: a sign-in cookie that keeps you logged in, which the browser will not let any page script read. There are no analytics, advertising or tracking cookies on the child’s app, on your dashboard, or on these public pages. The app also stores your child’s practice on their own device so it works without a connection; that stays on the device and is cleared if you erase the profile. Before you have an account, these pages may also note in your browser where you first arrived from, as described above; it is not a cookie, it is sent to us only if you create an account, and it never changes after it is first written.

Consent, and how we verify it

Before a child’s profile can exist you confirm that you are their parent or guardian and agree to what is kept. You do that inside an account you reached by entering a one-time code we emailed you, so the consent is given by someone who has shown they control that address, and we record the moment it happened on our own clock. Children never create accounts themselves and cannot agree to anything here.

Then we email you again to confirm it. That second message names the child, repeats what we keep, and tells you how to have it all removed. It exists for the case that matters most: if it was not you who agreed, replying to it is enough to undo the whole thing.

We collect a child’s information only to run their practice and report on it to you. We do not disclose it to anyone beyond the service providers listed below, and we never condition a child’s participation on giving us more than we need.

You can withdraw consent at any time by erasing the child’s profile in your account, or by writing to us. Withdrawing consent means the child’s record is deleted; it is not something we can keep a copy of. You can review everything we hold at any time, and download a copy of it.

You can also refuse any further collection at any time. We have to be straight with you about what that means here: the practice record is the service. Every question a child sees is chosen from what they have already answered, so a profile that collects nothing further is a profile that cannot work. Asking us to stop therefore ends that child’s profile and we delete it — download a copy first if you want to keep it. That is the same right, and it is the only honest way we can offer it.

Where it is kept, and who else touches it

Our database is hosted in the United States. We are a Canadian company, so information about your family is stored and processed outside Canada and may be accessible to United States authorities under United States law.

We never sell or rent your information. We share it only in these three situations: with the companies below, which run parts of the service for us and may use it only for that; where the law compels us, such as a valid court order; and if the business is ever sold or merged, with the buyer, who would be bound by this policy or would have to obtain your consent afresh.

• Supabase — the database and sign-in codes. United States.
• Vercel — hosting for the website and the app.
• Stripe — payments. They hold your card details; we do not.
• Resend — delivering the sign-in code, the weekly report and the occasional alert.
• Cloudflare — serving the spoken audio. The audio is identical for every child and carries nothing about yours.

Each of them is bound by a data processing agreement that limits them to running this service for us, and requires them to keep what they hold confidential and secure. None of them may use anything about your family for their own purposes.

The spoken prompts are recorded in advance, in batches, from sentences the app generates. Nothing a child does is ever sent to a speech service.

How long we keep it, and when we delete it

We keep a child’s practice history for one reason: the whole product is built on it. Their level, their review schedule and every figure in your weekly email are worked out afresh from every answer they have ever given, so the history is the service rather than a record of it. When that purpose ends, so does our reason to hold it, and we delete it:

• On an account with no subscription, a child profile with no practice for 12 months is deleted automatically, with everything beneath it. While you are subscribed this does not apply: a child may take a year off for illness or a move and come back to their history intact.
• An account whose free trial ended without a subscription is deleted after 6 months, with every child profile on it.
• A subscription that ends keeps its data for 6 months so a family who comes back finds their child where they left off, and is then deleted.
• Erase a child yourself and their answers, sessions, placements and progress go at once. So does an account you ask us to close, within 30 days of asking.
• We will email you before an automatic deletion, so it is never a surprise and you can keep the record by using the service or by asking us.
• Records we must keep for tax or accounting — that a payment happened, and for how much — are kept as long as the law requires, and hold nothing about a child.
• One thing survives a deletion, for three years: proof that consent was given. It is not your account and holds no name, no email address and nothing a child typed or answered. What it holds is a one-way fingerprint of the email address, a one-way fingerprint of the profile the consent was for, the method used, the date, and which version of this policy and the terms was in force at the time. We keep it because we may have to show consent was obtained — for which profile, and to what — and we cannot show that with something we have deleted. The fingerprints are keyed with a secret that is held outside the database, so they confirm an address or a profile somebody puts to us and cannot be turned back into either, or tested against a guess by anyone who only had a copy of the table.

Deletion removes the records from our live systems immediately. Backups are purged within 30 days, after which no copy remains anywhere we control.

Your rights

You can ask us for a copy of everything we hold about your family, have anything corrected, have a child’s record erased, or withdraw consent — which, as the consent section above explains, deletes that child’s profile. Downloading a copy, erasing a child and closing the account are all things you can do yourself; anything else, write to us and we will answer within 30 days.

Security, and what happens if we get it wrong

Every request runs as you and the database itself enforces that one family cannot read another’s records — not merely the application asking nicely. Sign-in is by a code emailed to you rather than a password, so there is no password of yours for us to lose.

If information about your family is lost or exposed and there is a real risk of significant harm to anyone, we will report it to the Office of the Privacy Commissioner of Canada, and to any other regulator we are required to notify where you live, as soon as feasible — and tell the families affected directly, without waiting to finish investigating. We keep a record of every such breach for at least two years, as the law requires.

Complaints

Write to our privacy officer first — the address is below, and we would rather fix it. If you are not satisfied you may complain to the Office of the Privacy Commissioner of Canada, to the Information and Privacy Commissioner for British Columbia, or to the privacy regulator of your state or province.

Changes

If we change anything that matters we will move the date at the top and email you before it takes effect. We will not quietly start using a child’s information for something new, and we will not make a material change retroactive without asking you again.

Contact

Gabe Consulting Inc. is a company registered in British Columbia, Canada. Our privacy officer is reachable at support@in4me.app — mark it for the attention of the Privacy Officer. Ask for a copy of your data, a correction, an erasure, or to complain, and we will answer within 30 days.

Back to in4me-tutor · Terms