Privacy Policy

1. Introduction

LaunchPad SKN ("we", "our", "the Platform") is a Learning Management System operated for the benefit of secondary schools in Saint Kitts and Nevis. We are committed to protecting the privacy of all users, including students (many of whom are minors), parents, teachers, and administrators.

This policy explains what personal data we collect, why we collect it, how it is stored, who can access it, and what rights you have over your data.

2. Data We Collect

2.1 Account Information

When an account is created (by an administrator or via self-registration), we collect: full name, email address, role (student, teacher, parent, etc.), institution assignment, and date of birth (for students).

2.2 Academic Data

The Platform stores academic records including: grades, attendance, lesson participation, quiz attempts, assignment submissions, report cards, and timetable information.

2.3 Usage Data

We track interaction events for educational purposes: content viewed, quiz scores, time spent on lessons, flashcard progress, and AI tutor conversations. This data helps teachers understand student engagement.

2.4 AI-Generated Content

Teachers may use AI features to generate lesson plans, flashcards, quizzes, and other educational content. Prompts sent to AI services may include subject matter and pedagogical context but never include personally identifiable student information.

3. Third-Party Services

The Platform uses the following third-party services:

• Supabase — database hosting, user authentication, and file storage. Data is stored in secure, encrypted cloud infrastructure.
• Anthropic (Claude AI) — AI content generation for teachers. Only educational context (subject, topic, form level) is sent; no student personal data is transmitted.
• OpenRouter — alternative AI provider for content generation. Same data restrictions as Anthropic apply.
• Vercel — application hosting and content delivery.

No student personal data (names, grades, attendance records) is ever sent to AI services. AI features process only curriculum content and pedagogical parameters.

4. Data Access & Role-Based Security

Access to data is strictly controlled by role:

• Students can view only their own grades, attendance, and progress.
• Parents can view data for linked children only, after providing consent.
• Teachers can view data for students in their assigned classes only.
• School Administrators can view data for their institution only.
• System Administrators have system-wide access for operational purposes.

These restrictions are enforced at the database level using Row-Level Security policies, meaning access control cannot be bypassed by the application layer.

5. Children's Privacy

Many users of this Platform are minors (under 18). We take additional measures to protect their data:

• Student accounts are created by school administrators, not by children directly.
• Parental consent is required before parents can access their child's data.
• Student data is never used for marketing, advertising, or profiling.
• AI features do not process student personal information.

6. Data Retention & Deletion

Academic records are retained for the duration of a student's enrolment plus a period required by the Ministry of Education for record-keeping purposes.

Users (or parents on behalf of minors) may request deletion of personal data by contacting the school administrator. Upon request, personal data will be anonymised or deleted within 30 days, except where retention is required by law or Ministry regulation.

7. Cookies & Local Storage

The Platform uses only functional cookies and local storage for essential purposes:

• Authentication session tokens (required for login)
• Theme preference (light/dark mode)
• Auto-saved form drafts (e.g., lesson planner)

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Data Security

We implement industry-standard security measures including: encrypted data transmission (TLS), encrypted data at rest, secure authentication with password hashing, role-based access control, and audit logging of administrative actions.

9. Your Rights

Users and parents have the right to:

• Access all personal data held about them or their child
• Request correction of inaccurate data
• Request deletion of personal data (subject to legal retention requirements)
• Withdraw consent for data processing at any time
• Receive a copy of their data in a portable format

To exercise these rights, contact your school administrator or the system administrator at privacy@launchpad.edu.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Users will be notified of material changes via in-app notification. Continued use of the Platform after notification constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries, contact:
LaunchPad SKN Data Protection
Email: privacy@launchpad.edu