Privacy Policy

Last updated: February 28, 2026

1. Introduction

Project Clarity, operated by Lepa K12 (“we,” “us,” or “our”), provides the website at lepak12.com and related services (collectively, the “Service”). This Privacy Policy explains how we collect, use, and protect your information — including information about children — when you use our Service.

We built Project Clarity with a privacy-first approach. We collect the absolute minimum data needed to generate a Learning Identity profile, we do not store sensitive personal information about children, and we never send identifying data to AI systems.

2. What We Collect About Your Child

We intentionally collect as little information as possible about your child. Here is the complete list of child data we store:

Student data we store:

  • First name only — we do not collect or store last names, full names, or family names
  • Grade level — a single number (3 through 8) used to show age-appropriate question language
  • Assessment responses — simple A/B behavioral preference selections (e.g., “I prefer working alone” vs. “I prefer working with others”). These are not test scores, grades, or performance data

What we do NOT collect about children:

  • Last names or full names
  • Email addresses
  • Physical addresses or location data
  • Social Security numbers or government IDs
  • Photographs, videos, or biometric data
  • Health records, diagnoses, or disability information
  • Academic grades, test scores, or school records
  • Behavioral incident reports or disciplinary records

3. What We Collect About Parents and Teachers

3.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (stored in hashed form — we never see or store your plain-text password)
  • Account role (parent or teacher)

3.2 Teacher Validation

If a parent invites a teacher to validate a child's profile, we collect the teacher's email address and their validation responses (the same A/B preference format as the student assessment). Teachers can only access the specific child they were invited to validate.

3.3 Payment Information

Payments are processed entirely by Stripe. We never see, handle, or store your credit card number or full payment details. Stripe's handling of payment data is governed by their Privacy Policy.

4. How We Use AI — and What We Never Share

Project Clarity uses AI to generate personalized Learning Identity reports and to power our Learning Coach chat feature. This section explains exactly what data the AI sees and does not see.

What the AI receives:

  • Child's first name — used only so the report can address the child personally (e.g., “Maya tends to...”)
  • Grade band — either “grades 3–5” or “grades 6–8” so language is age-appropriate
  • Computed learning scores — categorical labels and percentages derived from assessment answers (e.g., “Exploring: 28%”, “Visual-Spatial input preference”). These are statistical summaries, not raw answers
  • Whether parent/teacher validation was completed — a simple yes/no flag, not the identity of the parent or teacher

What the AI never receives:

  • Last names or full names of any person
  • Parent or teacher email addresses
  • Payment or financial information
  • School names, addresses, or identifying information
  • Health, medical, or disability information
  • Raw assessment question-and-answer pairs
  • Any data from other children or families

Additionally, all AI-generated content passes through safety filters that automatically remove clinical terminology (such as diagnostic labels), medical recommendations, and comparative language. The AI is instructed to frame all findings as learning preferences and strengths — never as deficits or disorders.

5. Children's Privacy (COPPA)

Project Clarity is designed for use by parents and teachers on behalf of children in Grades 3–8 (approximately ages 8–14). Children do not create accounts or directly interact with the Service.

  • All child data is entered and managed by a parent or teacher with a verified account
  • The only child-specific data stored is a first name, grade level, and A/B assessment responses
  • Child data is never used for advertising, marketing, or behavioral targeting
  • Child data is never sold, rented, or shared with third parties for their purposes
  • Parents can request access to, correction of, or deletion of their child's data at any time

If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly.

6. How We Use Your Information

We use the information we collect to:

  • Generate personalized Learning Identity profiles
  • Authenticate your account and maintain security
  • Process payments and deliver purchased reports
  • Send transactional emails (account verification, password resets, teacher invitations)
  • Power the Learning Coach chat feature
  • Improve the Service through aggregated, anonymized analytics

We do not sell, rent, or share personal information with third parties for advertising or marketing. We do not use child data for any purpose beyond generating their Learning Identity profile and related features.

7. Data Storage and Security

Your data is protected by multiple layers of security:

  • Encryption in transit: all data transmitted using TLS 1.2+ encryption
  • Encryption at rest: database stored on encrypted infrastructure
  • Hashed passwords: passwords are cryptographically hashed and never stored in readable form
  • Row-level security: database policies ensure each user can only access their own data — a parent cannot see another family's records
  • Secure authentication: we use industry-standard PKCE authentication flow
  • No sensitive data stored: we do not store Social Security numbers, health records, credit card numbers, or other high-risk data on our servers

8. Third-Party Services

We use the following third-party services, each governed by their own privacy policies:

  • Supabase — database hosting and authentication
  • Stripe — payment processing (we never see your card details)
  • Resend — transactional email delivery
  • Vercel — application hosting
  • Anthropic (Claude AI) — report generation and Learning Coach (receives only first name, grade band, and computed learning scores — no emails, last names, or sensitive data)

9. Cookies and Tracking

We use only essential cookies required for authentication and maintaining your session. We use a temporary cookie to track assessment progress so your child's answers are not lost if you refresh the page.

We do not use third-party advertising cookies, cross-site tracking pixels, or analytics services that track individual users across websites.

10. Data Retention and Deletion

  • Account data: retained while your account is active
  • Assessment and profile data: retained while the parent account is active
  • Payment records: retained as required by tax and financial regulations

You may request deletion of your account and all associated data at any time by emailing us. Upon deletion, we remove your personal data within 30 days, except where retention is required by law.

11. Your Rights

Depending on your jurisdiction, you have the right to:

  • Access the personal information we hold about you or your child
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing of your data
  • Request a portable copy of your data

To exercise any of these rights, contact us at hello@lepalearning.com. We will respond within 30 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email.

13. Contact Us

If you have questions about this Privacy Policy or our data practices:

Project Clarity by Lepa K12
Email: hello@lepalearning.com