Privacy notice

Operator. LeLoLa Homeschooling is a product of The Uvas AI, LLC, Davenport, FL 33896. Questions and parent-rights requests may be sent to support@lelolaschool.com.

1. Parent-managed service

LeLoLa is designed for parent-managed homeschooling. The parent or legal guardian creates and controls the family account. Children do not create separate accounts, provide payment details, or choose the service's privacy settings in V1.

2. Information we collect

Depending on how the service is used, LeLoLa processes:

• Parent and family information: parent email, authentication identifiers, family name, time zone, communications, and account preferences.
• Student profile information: first name, optional last and preferred names, date of birth, current grade, school year, and enrollment status.
• Learning records: assigned and completed lessons, progress, attendance dates, assessment attempts and responses, scores, grades, and academic summaries.
• Payment and access information: Stripe customer, Checkout, subscription, invoice, and payment-status identifiers; selected plan; policy-acceptance reference; and entitlement state. LeLoLa does not store full card numbers.
• Consent and security evidence: policy versions, exact acceptance snapshot, evidence hash, timestamp, account identifier, IP address when available, browser user agent, request reference, and later withdrawal or replacement of consent.
• Technical information: essential cookies, session information, device and browser details, IP-derived security information, and logs needed to authenticate users, prevent abuse, diagnose errors, and protect the service.
• Public website measurement: pages viewed, a random tab-session identifier, referring website or campaign parameters, enrollment-link clicks, and IP-derived country code. The marketing-events record does not store the visitor's name, email address, IP address, or browser user-agent string.
• Public LeLoLa Guide: the question and recent conversation needed to answer it. Visitors should not enter names, student records, account credentials, card information, or other sensitive personal information in the public guide.

3. How information is collected

Information comes from the parent, the student's supervised activity in the family application, service providers acting for LeLoLa, and the application's security and operational logs. LeLoLa does not ask a child to provide an email address, telephone number, payment information, precise location, photo, voice recording, biometric identifier, or government identifier.

4. Why we use information

We use information to create and secure the family account; deliver grade-appropriate lessons; separate each student's work; calculate progress, attendance, assessments, and grades; prepare family records; process and reconcile billing; control paid access; understand which public pages and campaigns lead adults toward enrollment; provide support; record policy acceptance; prevent fraud; diagnose failures; comply with legal obligations; and protect families and the service.

We do not use student information for targeted advertising, cross-site tracking, sale, data brokerage, or unrelated profiling.

5. Direct notice and parental authorization

Before a student profile is created, the authenticated parent receives a direct notice identifying the student fields and learning records to be collected, their purposes, the service providers involved, retention, and parent rights. The parent must affirm their legal authority and authorize the collection and internal use described here.

The current account acceptance is recorded as contractual and parental-authorization evidence. Before public enrollment, LeLoLa will complete the additional verification method required for its final COPPA workflow. A material change in student-data practices requires a new notice and authorization.

6. Service providers and disclosures

LeLoLa uses Supabase for authentication, database, and protected file infrastructure; Vercel for application hosting and delivery; Stripe for Checkout, subscriptions, billing, and refunds; Resend for transactional account email; and Ollama Cloud to process questions submitted voluntarily to the public LeLoLa Guide. These providers may process information only for the services they provide to LeLoLa and under their contractual and security obligations.

LeLoLa does not intentionally save public Guide conversations in its family or student database. The Guide is for general product information only and must not be used to submit private account, payment, or student information.

Information may also be disclosed when reasonably necessary to protect a person or the service, investigate fraud or abuse, comply with valid legal process, enforce our agreements, or complete a business transaction subject to appropriate protections and notice.

7. Certifying entity and academic-record transfers

LeLoLa will not send identified student records to a certifying entity or academic-record provider under the general account consent. Before any transfer, a specific parent authorization identifies the recipient, exact records, purpose, and applicable terms.

8. No sale or behavioral advertising

LeLoLa does not sell or rent parent or student personal information. It does not permit third-party behavioral advertising in the family application or lesson player and does not condition participation on providing information beyond what is reasonably necessary to deliver the service and maintain records.

9. Retention

• Waitlist emails: until 90 days after enrollment launch, unless the person unsubscribes or requests earlier deletion.
• Incomplete signup information: normally deleted after 30 days of inactivity.
• Active family and student records: while the service is active and needed to provide lessons and records.
• Canceled family learning records: normally three years after cancellation, subject to a parent's earlier valid deletion request or a longer documented legal or certification-related obligation.
• Billing records: up to seven years when needed for tax, accounting, fraud prevention, or disputes.
• Consent evidence: at least three years, or one year after termination if later, and longer only when reasonably needed for a legal claim or obligation.
• Routine failed-webhook and security logs: normally 90 days unless needed to investigate a specific incident.
• Anonymous public website measurement: normally 25 months so LeLoLa can compare school-year and enrollment periods.

When information is no longer reasonably necessary, LeLoLa deletes or de-identifies it using measures appropriate to its sensitivity.

10. Parent rights and choices

A parent may review and correct student profile information in the family application and may request a copy, correction, deletion, restriction of further collection, or withdrawal of parental authorization by emailing support@lelolaschool.com from the parent account.

Before releasing or deleting a child's information, LeLoLa will verify the requester's identity and authority. Some billing, security, consent, and academic evidence may be retained when reasonably necessary or legally required. Withdrawing authorization stops future student-data collection and may require closure of the student service.

11. Security

LeLoLa uses authenticated access, family ownership checks, row-level database controls, server-side entitlement validation, restricted administrative access, protected secrets, encrypted HTTPS connections, and limited-access service providers. No system is perfectly secure; suspected unauthorized access should be reported promptly to support@lelolaschool.com.

12. Changes and contact

We will update the date above and provide the notice required by law before a material change takes effect. A material change to child-information practices requires renewed parental authorization.

The Uvas AI, LLC, doing business as LeLoLa Homeschooling
Davenport, FL 33896
General: hello@lelolaschool.com
Privacy, support, and parent rights: support@lelolaschool.com