Privacy Policy

1. Introduction

Blair Stewart ("we," "us," or "our") operates Speddy, a special education scheduling and management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Speddy, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you directly provide, including:

• Account Information: Name, email address, password, role, school district, and school site
• Profile Information: Professional credentials and contact information
• Student Information: Student initials, grade levels, IEP data, session notes, and educational records
• Usage Data: Schedules, session logs, and platform interactions
• Payment Information: Billing details processed securely through Stripe

2.2 Automatically Collected Information

When you use Speddy, we automatically collect:

• Device information (browser type, operating system)
• IP address
• Access times and dates
• Pages viewed

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Process transactions and send billing information
• Send administrative information (updates, security alerts)
• Respond to inquiries and provide support
• Improve and personalize the Service
• Monitor and analyze usage patterns
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in applicable jurisdictions, we process personal data based on:

• Contract: To fulfill our service agreement with you
• Consent: Where you have given explicit consent
• Legitimate Interests: To operate and improve our Service
• Legal Obligations: To comply with applicable laws

5. Information Sharing and Disclosure

5.1 We DO NOT sell your personal information

5.2 We may share information with:

• Service Providers:
  • Supabase (database and authentication)
  • Stripe (payment processing)
  • Anthropic (AI features for lesson planning)
• Legal Requirements: When required by law or to protect rights
• Business Transfers: In connection with mergers or acquisitions
• Consent: With your explicit consent

5.3 Educational Records

We handle student data in compliance with FERPA. We do not disclose educational records without appropriate consent except as permitted by law.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Secure data storage through Supabase

However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your information for as long as:

• Your account is active
• Necessary to provide services
• Required for legal obligations
• Needed to resolve disputes

You may request deletion of your account and associated data at any time.

8. Your Rights and Choices

8.1 Access and Portability

You can access and export your data through your account settings.

8.2 Correction

You can update information through your account or contact us.

8.3 Deletion

You may request account and data deletion by contacting us.

8.4 California Privacy Rights

California residents have additional rights under CCPA, including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we do not sell personal information)
• Right to non-discrimination

8.5 Canadian Privacy Rights

Canadian users have rights under PIPEDA, including:

• Access to personal information
• Challenge accuracy and completeness
• Know how information is used

9. Children's Privacy

Speddy is not intended for users under 18. We do not knowingly collect information from children under 18. While we process student data as part of our Service, this data is provided by authorized educators, not directly from students.

10. International Data Transfers

If you access Speddy from outside the United States, your information may be transferred to and processed in the United States. By using Speddy, you consent to this transfer.

11. Cookies and Tracking

We currently do not use cookies or tracking technologies. If this changes, we will update this policy and obtain appropriate consents.

12. Third-Party Links

Speddy may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

13. Changes to This Policy

We may update this Privacy Policy periodically. Changes become effective immediately upon posting. We will notify you of material changes via email or Service notification.

14. Contact Information

For privacy-related questions or to exercise your rights, contact:

For privacy complaints, you may also contact your local data protection authority.

15. Specific Provisions for Educational Data

15.1 FERPA Compliance

We acknowledge our responsibilities under FERPA when handling educational records and will:

• Use educational records only for providing the Service
• Not disclose records without appropriate consent
• Maintain appropriate security measures
• Allow school officials to review records

15.2 School Official Designation

When providing services, we may be designated as a "school official" under FERPA with legitimate educational interests.

15.3 Data Ownership

Schools and districts retain ownership of all student data. We claim no ownership rights to educational records.

16. Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or banking information on our servers. Please review Stripe's privacy policy for information about their data practices.

17. AI Features

When you use AI-powered features (lesson planning), prompts and generated content are processed by Anthropic. We do not use student data to train AI models. Generated content is stored in your account for your use.