Children's privacy: notice to parents

This is our direct notice to parents under the Children's Online Privacy Protection Act (COPPA). It applies whenever a child under 13 uses the practice-test site.

Who we are

U Tutors LLC, doing business as U Tutors Academy, 5915 Ponce de Leon Blvd, Coral Gables, FL. Phone 772-279-7864. Email privacy@ututorsacademy.com. We are the only operator collecting information through this site.

How a child's account is created

A child under 13 cannot register alone. A parent creates their own account, then adds the child as a profile with a username and password the parent chooses. We do not ask for the child's email address. We then email the parent a link; the child cannot start practicing until the parent opens that link and confirms consent.

What we collect from a child, and why

• A username and display name chosen by the parent: to sign in and to label the child's results.
• Birth year and age band (not the full date of birth): to apply the right protections.
• Answers, scores and the dates of practice sessions: to run the practice and show progress to the child and parent.
• Optional notes in "Report a problem with this question": to fix the question.

We collect no more than is reasonably necessary for the child to practice. We do not ask a child for a phone number, address, photo, or any government identifier.

Disclosure

We do not sell, rent, or disclose a child's personal information to third parties, and we do not show ads. Service providers who host and run the site (Supabase, Vercel, and our email provider) process data only on our behalf under contract. A child cannot make payments; subscriptions are purchased by the parent through Stripe. If we ever wanted to disclose a child's information to a third party for any other purpose, we would ask for your separate consent first.

Your rights as a parent

• Review your child's information at any time: the parent dashboard shows every session and score, and has a Download my child's data button.
• Revoke consent: the child is blocked immediately and a deletion of the child's information is scheduled.
• Delete the child's profile and all of its practice records at any time.
• Contact us at the address above with any request or question; we respond within 10 business days.

Security and retention

We keep a written information-security program: encrypted connections, row-level access controls so each account can only read its own records, multi-factor authentication for staff, and access logs. How long we keep each record, and when we delete it, is set out in our retention policy. We do not keep children's information indefinitely.