Privacy Policy

1. Introduction

Genius Learning, Inc., doing business as Elective Genius ("we," "us," or "our"), operates the electivegenius.com website and the Elective Genius learning platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you or your student uses our Service.

We are committed to protecting student privacy and complying with applicable laws including the Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act (COPPA), and applicable state student privacy laws.

2. Information We Collect

2.1 Account Information

• Students: Name, email address, grade level, and parent/guardian contact information
• Parents/Guardians: Name, email address, and payment information (processed by Stripe; we do not store credit card numbers)
• School Administrators: Name, email address, school name, and role

2.2 Educational Records

• Course enrollment and completion data
• Lesson progress and completion status
• Quiz and assessment scores
• Assignment submissions and project work
• Learning journal entries and reflections
• AI tutor conversation transcripts (used solely to improve the learning experience)
• Portfolio content created by the student

2.3 Technical Information

• Device type and browser information
• IP address (used for security and fraud prevention only)
• Usage patterns (pages visited, time spent, features used)

2.4 Information We Do NOT Collect

• Social Security numbers or government IDs
• Biometric data
• Geolocation data beyond country/state level
• Social media profiles or contacts
• Data from other apps or services on the student's device

3. How We Use Information

We use collected information exclusively for the following educational purposes:

• Delivering instruction: Personalizing lessons, generating AI tutor responses, adapting content difficulty
• Tracking progress: Recording completion, scores, and generating transcripts and certificates
• Parent/guardian oversight: Providing progress reports and dashboards to authorized parents/guardians
• School administration: Providing aggregate and individual progress reports to authorized school officials
• Improving the Service: Analyzing usage patterns to improve course content and platform features (using aggregated, de-identified data only)
• Communication: Sending account-related notifications, progress updates, and (with consent) educational content

4. FERPA Compliance

When Elective Genius is used by a school or school district, we function as a "school official" with a "legitimate educational interest" under FERPA (34 CFR § 99.31(a)(1)). This means:

• We use student education records only for the purposes for which we were authorized by the school
• We are under the direct control of the school with respect to the use and maintenance of education records
• We comply with FERPA's requirements regarding the use and re-disclosure of personally identifiable information from education records
• Schools maintain ownership and control of all student education records

Parents and eligible students retain all rights under FERPA, including the right to inspect, review, and request amendment of education records.

5. COPPA Compliance

For students under 13 years of age:

• Parental consent is required before a child under 13 can create an account or use the Service
• We collect only the minimum information necessary to provide the educational service
• Parents can review their child's information, request deletion, and refuse further collection at any time
• We do not condition a child's participation on providing more information than is reasonably necessary
• When used through a school, the school may provide consent on behalf of parents consistent with COPPA's school consent exception, provided the school has notified parents and the data is used solely for educational purposes

6. AI Tutor (Meri) Data Practices

Our AI tutor, Meri, is powered by Anthropic's Claude API. When students interact with Meri:

• Conversation content is sent to Anthropic for processing and is subject to Anthropic's Privacy Policy
• Anthropic does not use customer inputs or outputs to train their models
• Conversations are used solely to generate educational responses
• Conversation transcripts are stored in the student's learning journal for review by the student and their parent/guardian
• We do not send any personally identifiable information beyond the student's first name to the AI service

7. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS 1.2+) and at rest
• Secure password hashing (bcrypt)
• Role-based access controls
• Regular security assessments
• Secure hosting infrastructure with automated backups

8. Data Retention and Deletion

• Active accounts: Data is retained as long as the account is active
• Account deletion: Upon request, we will delete all personal information and educational records within 30 days. Aggregated, de-identified data may be retained for service improvement.
• School contracts: Upon termination of a school agreement, all student data will be exported to the school (if requested) and deleted within 60 days
• Inactive accounts: Accounts inactive for 24 months will receive a notification before data is archived or deleted

To request data deletion, contact us at support@electivegenius.com or use the "Delete My Data" option in Account Settings.

9. Third-Party Services

We use the following third-party services to operate the platform:

• Anthropic (Claude API): AI tutor functionality
• Stripe: Payment processing
• Vercel: Application hosting
• Clerk: Authentication services

Each third-party provider is contractually obligated to protect the data they process on our behalf. We do not share student data with any third party for marketing or non-educational purposes.

10. Your Rights

Parents, guardians, eligible students, and school administrators have the right to:

• Access: View all data we hold about the student
• Correct: Request correction of inaccurate information
• Delete: Request deletion of all personal data and educational records
• Export: Download a copy of all student data in a standard format
• Restrict: Limit how we use the student's data
• Withdraw consent: Revoke consent for data collection at any time
• Opt out: Opt out of non-essential communications

11. State-Specific Provisions

We comply with all applicable state student privacy laws. Residents of states with additional privacy protections (including but not limited to California, Colorado, Connecticut, New York, and Illinois) may have additional rights. Contact us for state-specific information.

12. Changes to This Policy

We will notify all users via email and in-app notification at least 30 days before any material changes to this Privacy Policy take effect. Continued use of the Service after changes constitute acceptance.

13. Contact Us

For questions about this Privacy Policy or to exercise your rights:

• Email: support@electivegenius.com
• Website: electivegenius.com/legal/privacy