Privacy Policy

What We Collect

Sure Footing collects minimal data to provide curriculum matching and planning:

• Survey answers. Your preferences for curriculum matching (worldview, teaching style, grade level, learning differences, goals, etc.). These are not linked to your identity unless you save your results.
• Email address and name. If you choose to save your results or create an account.
• Child profile data. Name, grade level, subjects, school year dates, school days per week, and daily hours. Provided by the parent, not the child.
• Planning data. Weekly plans, task completions, skip days, skip day patterns, and calendar data for each child.
• Curriculum assignments. Which curricula and resources are assigned to each child, including reviews and ratings.
• Feedback submissions. Star ratings and optional comments you submit.
• Curriculum suggestions and flags. If you suggest a new curriculum or flag an issue.

How We Use Your Data

• To match you with curriculum recommendations based on your survey answers
• To generate and manage weekly learning plans for your children
• To email you your results (only if you provide your email)
• To improve our matching algorithm and curriculum database
• To respond to your feedback

We do not sell or rent your personal data. We do not run ads. We share data only with the service providers listed below under written agreements.

Service Providers (Sub-Processors)

We use a small set of trusted services to run Sure Footing. The table below shows what each one does and exactly what information reaches it. Services you can already see in your browser (payment, email delivery, security, analytics) are named directly; behind-the-scenes infrastructure is described by its role, and we'll send you the full named list on request.

A complete list of named sub-processors, including the infrastructure providers above, is available on request. Email privacy@surefooting.net. We'll notify registered users by email at least 30 days before adding or replacing any sub-processor that handles your data.

How we count searches per account

The Sure Footing chooser requires a registered account. Each account receives 5 free curriculum searches; after that you can subscribe for unlimited searches.

How the counter works.Every completed chooser submission is stored against your account in our database with a school-year tag (so you can find it later). The counter for free-tier searches is simply the number of those rows. We don't use any tracking cookies for this; the count lives in the same database row as your account.

Default limit.5 free searches per account. Subscribers get unlimited searches. If your subscription lapses, you keep access to all your saved searches but the free-tier limit applies again. Your prior counter value is preserved (subscriber-period searches don't count toward it).

Retention.Saved searches are retained for the life of your account. Delete your account (under Settings → Data & Privacy) to remove them.

Marketing email opt-in.When you registered we asked whether you'd like occasional product update emails. You can change your preference any time on the Settings page; this is separate from transactional emails (verification, password reset, billing receipts) which are required for the service.

Performance & Errors (telemetry)

We use a service called Sentry to catch and diagnose bugs in the app. It runs only when you opt in. The cookie banner has three categories: Functional (always on), Social login (Facebook sign-in), and Performance & errors. The third one controls this.

What it captures, with your consent:

• JavaScript errors (the exception, where it happened in the code, browser type)
• Anonymous click and scroll positions on the page leading up to a crash, so we can reproduce the bug
• Network request timings (page load, route changes)

What it never captures:

• Form data: every input, text area, and select is masked before transmission
• Passwords or authentication tokens: masked at the network layer too
• Images, video, or other media on the page: replaced with placeholders
• Child names, parent email addresses, or any other personally identifying info: scrubbed by our error filter before the event leaves your browser

Where the data goes. Sentry (sentry.io), based in the United States. Sentry retains event data for up to 90 days by default. We have not opted into any longer retention.

Storage on your device. Sentry uses browser localStorage to buffer the click and scroll trail before sending. This is treated as a tracking technology under EU ePrivacy rules, which is why it lives behind the consent toggle. If you decline, nothing is written to localStorage and Sentry never initializes.

Changing your mind.You can toggle Performance & errors at any time from Settings → Cookie Preferences. Changes take effect on your next page load (the error monitor is started once when the page loads; flipping the toggle doesn't start or stop a running monitor mid-session). If you have multiple Sure Footing tabs open, the change takes effect per-tab as each tab reloads.

If you decline: the app works exactly the same. You won't see any difference. We just won't see error reports from your sessions, which means we may not catch bugs that affect you specifically. That's a deliberate trade-off. Your privacy choice is more important than our crash reports.

Children's Privacy (COPPA)

Sure Footing is designed for parents, not children. We collect information about children only from their parent or legal guardian. We do not collect information directly from children under 13.

Child names are optional.You may use pseudonyms (e.g., "Child 1", "Child 2") instead of real names. The app functions identically with pseudonyms.

Data we collect about children (from parents): name (or pseudonym), grade level, subjects, school year dates, daily schedule, weekly plans, task completions, skip days, and calendar data.

What we never share with AI services: Child names are never sent to Anthropic or any third-party AI provider. Only anonymous identifiers (UUIDs) are used when generating personalized content.

Error monitoring: We use Sentry for error monitoring to improve app reliability. Error reports only run when you opt in via the cookie banner's "Performance & errors" toggle (see the dedicated section below). When enabled, all error reports are anonymized before transmission. No child names, email addresses, or personally identifiable information is included.

Your rights as a parent:

• Review all data collected about your children (via data export in Settings)
• Delete all your children's data at any time (via Settings)
• Revoke your consent and stop further collection (via Settings)
• Delete your entire account and all associated data (via Settings)

Data Storage and Security

Your data is stored in encrypted databases hosted in the United States. We use industry-standard security practices including HTTPS encryption, secure authentication with optional two-factor authentication, and access controls. Sensitive authentication data is encrypted at the application layer.

Data Retention

We retain your data only as long as your account is active or as needed to provide services. Saved results from unauthenticated users are automatically deleted after 30 days. When you delete your account, all data is permanently removed.

Your Rights

• Access. Export all your data from the Settings page.
• Delete child data. Delete all your children's data from the Settings page.
• Delete account. Permanently delete your account and all data from the Settings page.
• Revoke consent. Withdraw your parental consent from the Settings page.
• Correction. Update your information through your account settings.
• Do Not Sell. We do not sell your personal information. No opt-out is needed because no sale occurs.

Contact

Questions about this privacy policy? Email us at privacy@surefooting.net.