Privacy commitments

These are concrete commitments — separate from the legal privacy policy and written in plain English. The policy is the binding document; this page is the short version that says what we'll do and what we won't.

• No ads, ever. No behavioural profiling. No third-party tracking.
• The parent is the account holder and the only one who can set billing.
• A child's writing is theirs. They can lock it out of the weekly digest themselves, from a single switch on their own page.
• Quote consent starts OFF by default. A parent has to opt in before any verbatim child writing appears in a parent digest.
• We retain child writing for at most 180 days. Automated purges run daily.
• We publish the full list of every third-party that receives any family data. It lives in the privacy policy.
• We publish an incident response runbook and a Data Protection Impact Assessment. Most companies don't.
• We sign a Data Processing Addendum for schools and institutions that ask.
• We don't sell data. There's no version of this business where selling data makes sense.
• You can export everything we have or delete it all, from a single page in the app.
• We email you 14 days before any material policy change, and ask you to re-consent.
• Our data-protection contact: team@riverschool.app. Reply within 5 business days.
• Security issues: team@riverschool.app. Acknowledged within 2 business days.

For the binding language, see the full privacy policy and the security page.