Effective September 3, 2026 | Last updated November 7, 2026
This policy was written against what the software actually does, rather than assembled from a template. Every statement in it is verifiable against the running system, and where something is planned rather than built, it says so in the same sentence.
Your child's privacy matters to us. This policy was written against what the software actually does. Where something is planned rather than built, it says so.
The short version:
• We do not sell your information. Not yours, not your child's, not to anyone, ever.
• We collect only what the product needs to help a student stay organized, plus usage analytics to improve it.
• We never use student data for advertising. The app shows no ads. We advertise Clarity Space to parents on other sites, using tracking only on our public website.
• A small number of service providers help us run the product. They may only use data to provide that service to us.Analytics on our marketing website are used for advertising.
• Analytics in the app are used only internally, to understand how people use it and improve it, and never include a student's name, notes, grades, or coursework.
• We delete a student's data 60 days after the account's last paid period ends, or sooner if you ask.
• If under 18, a parent or guardian controls the account and can see, correct, export, or delete their child's data at any time.
1. Who we are and how to reach us
Clarity Space is operated by Clarity Space LLC, a Florida limited liability company registered August 29, 2026.
• Mailing address: 3734 5th Ave N, St. Petersburg, FL 33713, USA
• Phone: 727-275-0516
• Privacy Email: privacy@getclarityspace.com
Contact us at any of these to ask about this policy, to see, correct, export, or delete a student's information, or, if you are a school district, to send a disenrollment notice. We do not require a form, a reason, or a phone call.
2. Who this policy covers
Clarity Space is an organization tool for students who need executive-function support. It reads a student's coursework from their school's learning management system (LMS) and presents it in a form that is easier to act on.
This policy covers the app at app.getclarityspace.com and the website at getclarityspace.com.
Who can create an account. A parent or guardian can create a family account and add a login for each student inside it. College students 18 years of age or older can create their own account. Students under 18 cannot create accounts on their own; a parent or guardian must create the account for them. Some students using Clarity Space may be under 13, so this policy is also our notice to parents under the Children's Online Privacy Protection Act (COPPA).
Adult students. When a college student 18 or older holds their own account, the rights this policy gives a parent or guardian, such as reviewing, correcting, exporting, and deleting data, belong to the student.
3. What we collect
From your school's LMS, when you connect it. Access is read-only; we never write anything back.
• Class names, and the teacher name and email address the LMS attaches to a course
• Assignment titles, descriptions, due dates, and whether an assignment is missing
• Scores and course grades
• Announcements and course pages
From you
• The student's first name, and a profile photo if one is uploaded
• Grade level, if entered
• The student's own notes and any files attached to them
• Name and email address for each login
• Accessibility and display preferences (dyslexia-friendly mode, reduced motion, theme)
• Billing details, entered directly with PayPal. We do not see or store full card numbers.
• An email address, if you sign up for updates on our website. Signups are stored and sent through Brevo.
Automatically
• An error log recording the account, page, and browser when something breaks
• An audit log recording actions taken on an account
• App analytics: which pages and features are used, how long pages take to load, device and browser type, and a random identifier for the session. This never includes names, notes, files, grades, or coursework.
• Website analytics and advertising: pages visited on getclarityspace.com, how you arrived (for example, from an ad), device and browser type, approximate location from your IP address, and cookie identifiers. See Section 12.
• If you signed up for our update emails: whether you opened each email and which links you clicked
What we do not collect: home address, date of birth, government ID numbers, location or GPS data, disciplinary, behavioral, health, or attendance records, biometric data, advertising identifiers, or browsing activity outside the product.
We ask only for information reasonably necessary for the product to work. We never require a student to share more than that to use any feature.
4. How we use information
We use student information only to provide Clarity Space to the family that signed up:
• Showing the student their coursework, due dates, and grades in an organized view
• Saving the student's notes, files, and display preferences
• Signing in, keeping accounts secure, and fixing errors
• Sending account emails, such as password resets and notices about this policy
• Billing the parent or guardian for the subscription
We do not use student information for any other purpose.
App analytics (internal only)
In the app, we study usage behavior, such as which features are used, in what order, and where people get stuck, so we can make Clarity Space easier to use. We look at these patterns to improve the product, not to judge or score individual students. App analytics are never used for advertising, never shared with advertisers, and never used to build profiles of students.
Website analytics (advertising)
On our marketing website, analytics measure how visitors find and use the site, and that information is used for advertising, as described below.
Advertising
We advertise Clarity Space to parents on other websites and social media. Advertising tools on our public website measure whether our ads work and let us show ads to people who visited the site. Advertising tools are never placed in the app, and student information is never used for advertising.
5. What we never do
These are firm commitments. Several are also required by Florida's Student Online Personal Information Protection Act (Section 1006.1494, Florida Statutes) and by COPPA.
• We do not sell your information. We never sell, rent, or trade any personal information, whether a parent's or a student's, to anyone, for any reason.
• We never share student data with outside parties for their own use. The only organizations that handle it are the service providers listed in Section 6, and they may use it only to run Clarity Space for us.
• We never use student data for advertising. The app shows no ads and contains no advertising tools. Our ads for Clarity Space run on other sites and are aimed at parents.
• We never build profiles of students except to provide the educational service the family is using.
• We never use student data to train artificial-intelligence models. There is no AI in the product.
• We never share student data with a school or district unless that district has an agreement with us and the family knows about it.
• We never send student information to analytics tools. App analytics record how features are used, not who the student is or what they are working on.
6. Service providers that process data for us
We do not share student data with outside parties. To run the product, we use the contracted service providers below. Each acts only on our instructions, may use data only to provide its service to us, and is required to keep it confidential and secure. We review this list whenever we add or change a provider.
Service providers:
• ScopeForged LLC: builds and administers the system under contract. Handles any account data, only as needed for maintenance.
• Supabase: provides our database, sign-in, and file storage (U.S.). Handles all account and student data.
• Brevo: sends account emails, and stores and sends website update emails. Handles email addresses, names if given, and email content.
• Resend: sends payment and billing notices, and internal reports to Clarity Space. Handles email addresses and email content.
• PayPal: processes subscription payments. Handles the parent's name, email, and billing details.
• Amazon: Web Services provides the infrastructure beneath Supabase and email delivery. Handles data stored and sent through those services.
• Cloudflare: delivers stored files quickly; files may be cached worldwide. Handles stored files, such as photos and attachments.
Four features that reach other services:
• Voice dictation (optional). On Chrome and Chromium browsers, the browser's built-in speech recognition sends recorded audio to Google for transcription. We did not choose Google and have no agreement with them for this. Dictation sits behind a switch and can be turned off entirely.
• Dictionary and thesaurus. Word lookups go from our servers to api.dictionaryapi.dev and api.datamuse.com. Only the word being looked up is sent, never the student's identity or IP address.
• Google Fonts (website). Our website at getclarityspace.com loads its fonts from Google's servers. When you visit, your browser sends Google your IP address and basic browser details so it can deliver the fonts. Google Fonts sets no cookies, and we send Google no account or student information. Google's use of this data is covered by Google's Privacy Policy and the Google Fonts privacy FAQ. [CONFIRM with your developer: whether the app at app.getclarityspace.com also loads Google Fonts. If it does, change "website" to "website and app".]
• Email tracking (update emails). The update emails we send to people who sign up on our website go through Brevo, which tracks whether each email was opened and which links were clicked. It does this with a small invisible image and with links that pass through Brevo before reaching their destination. We use this only to see whether our emails are useful. We never use it for advertising, never combine it with student information, and never sell or share it. To stop it, unsubscribe using the link in any update email, or turn off image loading in your email app to block open tracking. [CONFIRM: whether account emails such as password resets also have tracking on. If they do, say so here; if possible, turn it off for them.]
Analytics and advertising tools:
• Google Analytics (app) measures usage behavior and errors for internal improvement. It may not use data for its own purposes; it is configured as a service provider only, with data sharing and advertising features off.
• Google Analytics (marketing website only) measures visits and how people find us, and is used for advertising. It may use data for its own purposes under its own privacy policy.
• Meta and/or Google Ads (marketing website only) measures ad results and shows ads to past site visitors. It may use data for its own purposes under its own privacy policy.
Advertising platforms receive information about visits to our public website only, never from the app and never about students. They may combine it with what they already know about you under their own privacy policies. Section 12 explains how to opt out.
We may disclose information if required by law, such as a valid court order, and will notify the parent unless the law forbids it.
7. Where data is stored
All data is stored in the United States, in Supabase's Northern Virginia (us-east-1) region, and the application runs in the same region. Files may be cached at Cloudflare locations worldwide for faster delivery.
Until September 3, 2026, data was stored in Canada. We moved it because some school districts require student records to stay on U.S. infrastructure. The Canadian copies were permanently deleted in early October 2026.
8. How long we keep data, and how we delete it
We keep a student's information only while the account is paid, plus 60 days. If a subscription is canceled or a payment is not renewed, we permanently delete the account's data 60 days after the last paid period ends. The 60 days give a family time to renew or export their information.
When data is deleted:
• Subscription ends or is not renewed: 60 days after the last paid period ends
• Parent or guardian asks us to delete: within 30 days of the request
• School district sends a disenrollment notice: within 90 days, with written confirmation and the date
• LMS connection is disconnected: the stored LMS login credential is deleted immediately
We will email the account holder before the 60-day deletion takes place. Error log entries are kept for 90 days and then deleted.
Deletion covers four places: the database, stored files, the file cache in front of those files, and the sign-in record. We check the cache separately, because a deleted file can otherwise still be served from it.
One exception: the audit log. It cannot be edited by design, so on deletion we keep the entry but remove who it refers to. What remains shows that an action happened, not who it happened to.
9. Your rights as a parent or guardian
You can, at any time:
• Review everything we hold about your child. It is all visible in the product.
• Correct it, directly in the product.
• Export it. Ask us and we will send you the file. A self-service export is planned but not yet built.
• Delete it, including the entire account.
• Disconnect the LMS connection, which deletes the stored credential immediately.
• Withdraw consent and stop any further collection. This is the same as deleting the account.
Use the product or contact us using Section 1. We do not require a form, a reason, or a phone call.
Children under 13. We get consent from the parent who creates the account before collecting any information from a child. We do not ask children for consent. Because we do not disclose children's information to outside parties beyond the service providers in Section 6, there is no separate third-party sharing to consent to. If that ever changes, we will ask for your separate consent first.
10. Schools and districts
Where a school district has a signed agreement with us, that agreement governs. If it conflicts with this policy, the agreement wins.
Records that come from a district's own systems remain the district's education records under the Family Educational Rights and Privacy Act (FERPA). We handle them on the district's behalf and under its direction. We do not own them.
A district may tell us that a student has left. We delete that student's records within 90 days and confirm in writing with the date. We also delete a student's information within a reasonable time whenever the school or district asks, as Florida law requires.
11. Security
We maintain a written information security program, reviewed at least once a year, with these protections:
• Every database table enforces row-level access control, so one family cannot read another's records. This is tested automatically on every code change.
• A student cannot see a sibling's records, even in the same family account.
• LMS credentials are encrypted with AES-256-GCM, and the key is never stored in the database.
• Files are private and served only through short-lived signed links.
• All connections are encrypted, and the app uses a content security policy and related browser protections.
No system is unbreachable. If student data is exposed, we will notify affected families and any district's named contact within 72 hours of confirming it, and follow up with a written report.
12. Cookies and similar technologies
The app uses only essential cookies and internal analytics. Our public website also uses analytics and advertising cookies.
Cookies are small files a website saves in your browser. Browser storage works the same way but stays on your device. We use them for these purposes:
• Sign-in (app): keeps you signed in and confirms each request comes from your account. Lasts until you sign out, or 2 days.
• Preferences (app): remembers display settings like theme, reduced motion, and dyslexia-friendly mode. Lasts until you clear your browser data.
• Security (app and website): lets Cloudflare block automated attacks. Lasts 30 minutes.
• App analytics (app): records usage behavior so we can improve the product; internal only. Lasts up to 13 months.
• Website analytics (marketing website): measures visits and how people find us; used for advertising. Lasts up to 13 months.
• Advertising (marketing website): measures our ads and shows ads to past visitors. Lasts up to 13 months.
Cookies in the app are never used for advertising, never follow students across other websites, and never build a profile of a student.
Our website loads fonts from Google Fonts. Google Fonts sets no cookies, but your browser does share your IP address with Google when the fonts load. Section 6 explains this.
Your choices. On our website, a cookie banner lets you accept or decline analytics and advertising cookies, and you can change your choice anytime through the www.getclarityspace.com/cookie-policy link in the footer. We honor Global Privacy Control signals by turning off advertising cookies. You can also opt out of personalized ads through Google Ad Settings, Meta Ad Preferences, or the Digital Advertising Alliance. You can block or delete cookies in your browser settings, but you will not be able to stay signed in to the app without the sign-in cookie.
If we add a new analytics or advertising tool, we will update this section and the list in Section 6 before it goes live.
13. Changes to this policy
If we change this policy in a way that materially affects how student data is handled, we will email account holders before the change takes effect. If a change would let us collect or use a child's information in a new way, we will ask for your consent first.
Past versions of this policy are available on request.
