Privacy Policy

NudgeLearn is a parent-facing service. Parents and legal guardians create accounts and enroll their children. Children do not create accounts — they interact only via SMS or WhatsApp on their phones.

We also offer a Grader, which parents and teachers use to grade a photo of a student's handwritten work. When a teacher or school uses it, we process that student work on their behalf, as their service provider, for the educational purpose of grading. Sections 2, 3, and 5 below cover what the grader collects, how it is used, and the providers involved.

• Deliver daily math questions to the child's phone at the chosen time
• Grade answers and provide hints using AI (Anthropic Claude)
• Grade a photo of a student's handwritten work and place marks on it, using AI (Anthropic Claude) with text recognition (Google Cloud Vision)
• Adapt question difficulty based on performance
• Generate weekly progress reports sent to the parent
• Process subscription payments (via Stripe)
• Send magic-link sign-in emails (via Resend)

We do not sell data, use it for advertising, or share it with third parties beyond the service providers listed in Section 5. We do not load advertising or analytics trackers on Grader pages or any page that displays student work.

Our full written Data Retention Policy details the business justification for each retention period and the deletion mechanisms used.

We share data only with the following providers, solely to operate the service:

• Anthropic — AI grading and tutoring. Receives tutoring answer text, and — for the Grader — the uploaded image of the student's work. Per Anthropic's commercial terms, this data is not used to train its models.
• Google Cloud Vision — Text recognition for the Grader (receives the uploaded image of the student's work to locate the handwriting)
• Twilio — SMS and WhatsApp message delivery (phone number and message text)
• Resend — Transactional email (parent email address)
• Stripe — Payment processing (billing info only; we never see card numbers)
• Neon — Database hosting (all structured data, stored in the US)
• Railway — Application hosting (processes data in the US)

NudgeLearn delivers daily practice questions and tutor replies to enrolled children via SMS, WhatsApp, or Telegram, depending on the channel selected by the parent at signup. The following terms apply to all SMS communications under our A2P 10DLC registered campaign.

• Consent: The parent or legal guardian provides verifiable consent on behalf of their minor child during the signup flow at nudgelearn.app, by reading and checking the consent disclosure displayed directly above the phone-number field, then completing checkout. No SMS is sent until consent is captured.
• Message frequency: Message frequency varies, typically 5 to 30 messages per day during the daily practice session, plus weekly summary messages. Frequency depends on the subjects and tier the parent selects.
• Carrier rates: Message and data rates may apply.
• Opt-out: Reply STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT to any message to immediately unsubscribe the number. A confirmation message will be sent and no further messages will be sent until START is received. Replying HELP or INFO returns support contact information.
• Resubscribe: Reply START to a previously opted-out number to resubscribe.
• No third-party sharing: Mobile information and SMS opt-in consent will not be shared with third parties or affiliates for marketing or promotional purposes. Phone numbers are shared only with our messaging service provider (Twilio) for the sole purpose of delivering enrolled practice messages, as listed in Section 7.
• Support: Questions or problems with SMS delivery can be sent to support@nudgelearn.app.

• Children under 13 may only use SMS. WhatsApp requires age 13+ with parental attestation.
• All enrollment is done by the parent — children never provide us information directly.
• We obtain verifiable parental consent via Stripe checkout before any messages are sent.
• Parents can review, update, or delete their child's data at any time from the dashboard.
• We do not condition participation on disclosure of more information than necessary.

• Access — request a copy of data we hold about you or your child
• Deletion — delete your account and all associated data from the dashboard, or email us
• Correction — update your child's profile from the dashboard at any time
• Portability — request an export of your data
• Withdraw consent — remove a child at any time; messaging stops immediately

All data is transmitted over TLS (HTTPS). Database credentials are stored as environment secrets and never committed to code. Raw answer text is automatically purged after 30 days. We use JWT-based sessions with no persistent session storage.

Information security responsibility: Our designated information security contact can be reached at hello@nudgelearn.app.

We will notify parents by email before making material changes to this policy. Continued use after notice constitutes acceptance.

Questions or requests: hello@nudgelearn.app