Privacy Policy

Romeschool ("we," "us," or "our") is operated by Atheneum Academy LLC. This Privacy Policy explains how we collect, use, and protect information when you use our platform at romeschool.app.

The short version: We collect what we need to run the platform. We don't sell your data. We don't advertise to your family. We charge for software so we never have to monetize you.

Information you provide directly:

• Account registration: name, email address, password (stored hashed — we never see it)
• Family and filing information: legal name, home address, school year, school-withdrawal status, and county/district details
• Children's information: names, dates of birth, grade levels, learning notes, curricula, planner and logbook entries, and any work samples you upload. Plus course progress — which lessons were opened and completed, and selected-response assessment answers and scores. See Children & Students for exactly what we do and don't collect from a student.
• ESA Wallet receipts: photos, screenshots, or text descriptions of purchases submitted for expense tracking. Receipt images are processed by AI and then discarded — we store the extracted data (vendor, amount, date, category), not the raw image, unless you have enabled paperless storage mode.
• Education-expense records entered to track ESA and other education-related spending
• Community and messaging information: a community profile and messages sent to other families through optional community features
• Law alert subscription preferences: states, notification channel, phone number or email
• Communications you send us (e.g., support or feedback)

Information collected automatically:

• Standard technical data: IP address, device/browser type, pages viewed — used to operate, secure, and improve the Service
• Standard server logs retained for 30 days

Identity verification (optional/community). If a feature requires verifying your identity, that check is performed by Stripe Identity. We receive only a pass/fail result and a session reference — we do not receive or store your identity documents.

Payment information. Subscription payments are handled by Stripe. We do not receive or store your full card number; we receive limited transaction and subscription status data.

• To create and secure your account and provide the Service's features (planner, logbook, filings, expense tracking, curriculum tools, field-trip discovery, community)
• To process subscriptions and payments via Stripe (we never store card numbers)
• To send transactional messages (account, billing, security, and — where applicable — alerts you opt into) from noreply@romeschool.app
• To parse natural-language logbook entries, receipt descriptions, and uploaded images using AI (Anthropic Claude) and return structured data. Your content is not used to train AI models.
• To generate portfolio and transcript documents from your logbook data
• To prevent fraud and abuse, enforce our Terms, and protect users (including children)
• To maintain, troubleshoot, and improve the Service
• To comply with legal obligations

We do not sell your personal information, and we do not use your children's records to train third-party AI models. Ever.

Several features use the Anthropic Claude API to process your input:

• Activity Logbook: Natural-language descriptions are sent to Claude to extract structured fields. The raw text is optionally stored as a reference.
• ESA Wallet: Receipt photos and descriptions are sent to Claude to extract vendor, amount, date, and category. Raw images are processed in memory and discarded — only the extracted data is stored.
• Curriculum Finder: Your questionnaire responses are sent to Claude to generate ranked curriculum recommendations.
• In-app Assistant (Cicero): When you use the assistant, the text you submit for that feature is sent to Claude to generate a response.
• News & Alerts: Legislative text from public sources is sent to Claude for relevance classification and summarization before human review.

In all cases: your content is not retained by Anthropic and is not used for AI training under our service agreement. We process only what is necessary to deliver the feature, and we do not send your payment details or login credentials to AI providers.

Romeschool is designed for parents and guardians, not for children. This section explains exactly what we do and do not collect from a student.

Students never authenticate. A student has no account, no login, and no password. There is no sign-in a child can perform. Every account belongs to a parent or guardian, and everything a student does in the Service happens on the parent's account, on the parent's device.

From a student, we collect nothing that persists. There is no writing surface anywhere in our courses. A lesson's writing prompt is displayed as instruction to be answered in a notebook or the family's own word processor — it has no text box, nothing is typed into our Service, nothing is autosaved, and nothing is transmitted to us. We do not record keystrokes. Where a course exercise asks for a written answer, it is shown as a self-check whose answer key is revealed in the browser; the student's response is never sent to us and never stored.

Lesson and assessment telemetry, for students of every age. When a lesson is opened, marked as read, or an assessment is submitted, we record that event under the parent's account: which lesson, a server-generated timestamp, and — for assessments — the selected answers and the resulting score. Assessment items are selected-response only (multiple choice, true/false, matching, ordering), so these answers are bounded choices from a fixed list, never free text. This is how course progress and credit are earned, and it works identically for every student regardless of age.

Coursework reaches us only through the parent. Finished student work enters the Service only when a parent uploads it as a work sample. Uploads are made by the account holder, from the account holder's account, and this is enforced by our database's row-level security — not merely hidden in the interface. We ask that uploaded photos not contain people. We screen for faces in the browser before an image is sent, but that check is a safeguard, not a guarantee, and it does not replace your judgment about what to upload.

Information about a child that we do hold — name, date of birth, grade level, learning notes, planner and logbook entries, uploaded work samples, and course progress — is provided by you, the parent or guardian, to organize that child's education. Because it is collected from you and not from the child, and because a child cannot use the Service directly, we do not knowingly collect personal information from a child under 13 within the meaning of the Children's Online Privacy Protection Act (COPPA).

Who processes it. A student's records are stored and processed by Supabase (database and file storage, United States) and served through Vercel (application hosting). Stripe processes your subscription payment and never receives your children's records. We do not sell children's information, we do not advertise to your family, and we do not use your children's records to train AI models. We run no advertising tracker and no cross-site tracking cookie on our course pages; the only measurement there is the aggregate page-view and performance analytics described in Section 2, which is not tied to a student.

How long we keep it. We keep a student's records while your subscription is active, plus [N] days, after which they are deleted or de-identified. Work samples you delete are removed within [N] days, including from backups. If you close your account we delete the associated records within [N] days, except where we must retain something by law.

Your rights as a parent. You may at any time: review everything we hold about your child (in the Service, or by requesting an export); correct or delete any of it, including individual work samples, from your account; and stop any further collection — including course progress — by ceasing use of the courses or closing your account, without losing the ability to review or delete what is already there. To exercise any of these, use your account settings or write to privacy@romeschool.app; we act on requests within 30 days.

If you believe a child has provided personal information to us without parental consent, contact us at privacy@romeschool.app and we will delete it promptly.

We share information only as needed to run the Service, with providers acting on our behalf, or as required by law. Key providers currently include:

• Supabase — database, authentication, file storage
• Vercel — website/app hosting
• Railway — backend service hosting
• Stripe — payment processing; identity verification
• Twilio — SMS (MFA / opted-in alerts)
• Resend — transactional email
• Anthropic — AI-assisted features (feature text you submit; not retained)
• Google — optional sign-in (OAuth); basic profile, if you use it

We do not share your children's educational records with any government agency, school district, or state authority unless you explicitly direct us to (e.g., by using our Notice of Intent filing feature). We may also disclose information to comply with law, respond to lawful requests, protect rights and safety (including child safety), or in connection with a business transfer.

Your data is stored in Supabase-managed PostgreSQL databases hosted in the United States. We use industry-standard security practices including TLS encryption in transit, row-level security controls on our database, restricted service-role access for sensitive administrative functions, hashed passwords, and optional multi-factor authentication.

No method of transmission or storage is 100% secure. If we become aware of a data breach affecting your personal information, we will notify you within 72 hours.

We keep your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete content or close your account, we delete or de-identify the associated personal information within [N] days, except where we must retain it by law. Standard server logs are retained for 30 days. Retention of children's records is described in Children & Students.

• Access and correction: View and update your account and family information in the Service at any time.
• Data export: Request a full export of your personal data by emailing privacy@romeschool.app.
• Account deletion: Request deletion of your account and all associated data by emailing us. We will process requests within 30 days.
• Alert preferences: Opt out of non-essential communications (e.g., SMS alerts) at any time from your account settings.
• Additional rights: Depending on where you live, you may have additional rights (to access, correct, delete, or port your data, or to opt out of certain processing) under applicable state privacy laws. Contact us to exercise any right.

We use cookies and similar technologies that are necessary to sign you in, keep your session secure, and operate the Service. We do not use advertising cookies or third-party tracking cookies that identify you personally.

Our providers may process and store information in the United States and other locations. By using the Service, you understand your information may be processed in those locations.

We may update this Policy. If we make material changes, we will provide at least 14 days' notice (for example, by updating the date above or notifying you by email). Your continued use after changes take effect means you accept the updated Policy.

Questions or privacy requests: privacy@romeschool.app

Atheneum Academy LLC · Tennessee, USA