Privacy Policy
Draft — not yet reviewed by a lawyer. This page describes what Sophoz actually collects and does today, written to satisfy COPPA and India's DPDP Act disclosure requirements before any real (non-test) student uses the product. Have this reviewed by counsel before relying on it for a live launch.
Who this applies to
Sophoz ("we", "us") is a K-12 practice platform. This policy explains what we collect from learners, parents/guardians, and teachers who use the product, and applies regardless of the learner's age.
What we collect
- Account info: name, email address, and (after sign-in) a phone number, used to secure your account and let you sign back in.
- Date of birth: collected once at sign-up, used only to determine whether parental/guardian consent is required before the account can be used.
- Guardian info (minors only): if the account belongs to someone under 18, we collect a parent/guardian's email (and optionally name) to obtain their consent.
- Learning activity: which skills you practise, your answers, whether they were correct, and a mastery score per skill — used to power the practice experience and show progress.
- Usage analytics (Google Analytics): page views and clicks, on every page including while signed in, to help us understand how the product is used and fix problems. We do not send it your name or email address.
- Ad-conversion measurement (Google Ads and Meta), public pages only: when a parent or guardian reaches us from an advert, Google Ads and Meta may set cookies on our public pages — the homepage, product pages, blog and the parent sign-up pages — so they can tell us whether the advert led to a sign-up. This runs only when no one is signed in, never on the sign-in page, and never on any page a learner uses. It is used only to count conversions: ad personalisation and remarketing are switched off, and we do not send either company your name, email address or phone number.
- Session recording (Microsoft Clarity), only if you opt in: if you choose "Allow session recording" in the banner, Clarity records how you use our public pages, such as the homepage, product pages and blog: your clicks, scrolling, and the page as it appears on your screen. It never runs on the sign-in or sign-up pages, on any page while you are signed in, or on a learner's practice or test pages. Under Clarity's default settings, text typed into input boxes, drop-down menus, numbers and email addresses are masked and not sent to Clarity. To withdraw, choose "Session recording settings" at the bottom of any public page and then "No thanks"; this stops the recording and erases Clarity's cookies from your browser.
What we do not do
- We do not show ads, and we do not use Google's or Meta's advertising to follow you around the web (remarketing is switched off).
- We do not sell personal data to third parties.
- We do not use a learner's activity to build an advertising profile.
Parental/guardian consent for accounts under 18
If you sign up and are under 18, your account is held inactive until a parent or guardian confirms a consent link we email them. Once confirmed, your account can be used normally. A parent/guardian can withdraw consent at any time by contacting us (see below), which deletes the account per the section below.
Your rights
- Access: contact us to request a copy of the data linked to an account.
- Deletion: any account holder (or a minor's guardian) can request deletion from within the app or by emailing us. We confirm the request by email, and the account and its learning data are permanently deleted 30 days after it; signing back in before then cancels the request. When a parent is the only adult on a family account, their children's profiles are deleted with it. Requesting deletion signs you out on every device.
- What we keep after deletion: records of actions our staff took on an account (for example, who viewed or changed it, and when) are kept after the account is deleted, for security and legal purposes. We also keep records we are required to keep, such as purchase records, and records other people depend on, such as contest rankings, with your name and contact details removed.
- Correction: contact us to correct inaccurate account information.
Where this applies
We aim to meet the United States' Children's Online Privacy Protection Act (COPPA) for learners under 13, and India's Digital Personal Data Protection Act, 2023 for learners under 18, whichever is stricter for a given user.
Contact
Questions about this policy or your data: [email protected].
Frequently asked questions
Do you sell my data?
No. We do not sell personal data to third parties, and we do not show ads. On our public pages only, Google Ads and Meta measure whether an advert led a parent to sign up, with ad personalisation and remarketing switched off.
Do you use my child's activity to show them ads?
No. Learning activity — skills practised, answers, mastery scores — is used only to power the practice experience and progress tracking. It is never used to build an advertising profile.
What analytics do you actually run?
Three. Google Analytics counts page views and clicks. Google Ads and Meta measure ad conversions — whether an advert led a parent to sign up — only on public pages such as the homepage, product pages, blog and parent sign-up, only when no one is signed in, and with ad personalisation and remarketing switched off. Microsoft Clarity records sessions, but only if you opt in, only on public pages such as the homepage, product pages and blog, and never on sign-in, sign-up or any page used while signed in. We send none of them your name or your email address. You can change your session recording choice at any time from "Session recording settings" at the bottom of any public page.
Do you record my child's screen?
Not while anyone is signed in, so a learner's practice and test pages are never recorded. Session recording is opt-in: it runs only on public pages such as the homepage, product pages and blog, and only after someone on that device chooses "Allow session recording". See Session recording.
My child is under 13 (or under 18 in India) — is that allowed?
Yes, with consent. If the account holder is under 18, the account stays inactive until a parent or guardian confirms a consent link sent by email. See Parental/guardian consent above.
How do I delete my account and data?
Use "Delete my account" under Account & data in the app or on the website, or contact us (see Contact above). The account and its learning data are permanently deleted 30 days after the request, and signing back in before then cancels it. Records of actions our staff took on the account are kept for security and legal purposes.
Can I see what data you have on my account?
Yes — contact us to request a copy of the data linked to your account.