Privacy Policy

1. Introduction

This Privacy Policy describes how B. Stewart ("we," "us," or "our") collects, uses, and protects information when you use Speddy ("Service"). This policy is designed for individual education professionals who use Speddy in their work with students in school settings.

2. Information We Collect

2.1 Provider Account Information

When you create an account, we collect:

• Your name and professional contact information
• School district email address
• Professional role and credentials
• School district and work location
• Login credentials (encrypted)
• Payment information (processed by Stripe)

2.2 Student Educational Data

As an authorized education professional, you may input student data including:

• Student identifiers (typically initials or student IDs)
• Grade level and program information
• Service schedules and appointments
• IEP goals and progress data (when authorized)
• Session notes and service documentation
• Assessment data (when authorized)

Important: You are responsible for ensuring you are authorized to access and input all student data you enter into Speddy.

2.3 Usage Information

We automatically collect:

• Log data (IP address, browser type, pages visited)
• Device information
• Usage patterns and feature utilization
• Error reports and performance data

3. How We Use Information

3.1 Provider Account Data

We use your professional information to:

• Provide and maintain your Speddy account
• Process subscription payments
• Verify your authorization to access the Service
• Provide customer support
• Send important service updates and notifications
• Ensure compliance with professional and legal requirements

3.2 Student Educational Data

Student data is used solely to:

• Provide the scheduling and management tools you need
• Generate reports and documentation for your professional use
• Facilitate your authorized educational services
• Maintain accurate records as required by law

We never use student data for marketing, advertising, or any commercial purposes beyond providing the Service.

4. Information Sharing and Disclosure

4.1 Student Data Sharing

We do not sell, rent, or share student educational data with third parties except:

• With other authorized providers at the same school who need access for legitimate educational purposes
• When required by law or court order
• To protect the safety of students or others
• With your explicit consent for specific purposes

4.2 Provider Data Sharing

We may share your professional information:

• With other providers at your school for coordination purposes
• When required by law or professional regulations
• With service providers who assist in operating Speddy (under strict confidentiality agreements)

4.3 Service Providers

We work with trusted service providers:

• Supabase: Secure database hosting (FERPA-compliant infrastructure)
• Stripe: Payment processing (does not access educational data)
• Anthropic: AI assistance (receives only anonymized, non-identifiable prompts)

5. Data Security

We implement comprehensive security measures:

• End-to-end encryption for all data transmission
• Encrypted data storage with regular security audits
• Multi-factor authentication options
• Role-based access controls
• Regular security updates and monitoring
• Incident response procedures

6. Data Retention

6.1 Student Data

Student educational data is retained:

• While you maintain an active account and continue serving the student
• According to your school district's data retention policies
• As required by applicable education laws
• Until you or your school district requests deletion

6.2 Provider Data

Your professional account data is retained:

• While your subscription is active
• For up to 90 days after account cancellation for reactivation purposes
• As required by applicable laws and professional regulations

7. Your Rights and Controls

7.1 Access and Portability

You have the right to access, export, and port your professional data. For student data, access rights are governed by FERPA and your school district's policies.

7.2 Correction and Updates

You can update your professional information through your account settings. You are responsible for maintaining accurate student data according to your professional obligations.

7.3 Data Deletion

You may request deletion of your account and associated data. Student data deletion requests must comply with FERPA, school district policies, and applicable record retention requirements.

7.4 California Privacy Rights

California residents have additional rights under CCPA, including:

• Right to know what personal information is collected
• Right to delete personal information (subject to FERPA and retention requirements)
• Right to opt-out of sale (we do not sell personal information)
• Right to non-discrimination

8. Professional Responsibilities

As a provider using Speddy, you acknowledge:

• You are bound by professional codes of ethics regarding confidentiality
• You must comply with FERPA and other applicable privacy laws
• You are responsible for ensuring authorized access to student data
• You must follow your school district's data handling policies
• You should not access student data outside your professional responsibilities

9. Children's Privacy

Speddy is designed for use by adult education professionals. We do not knowingly collect information directly from children under 18. Student data is provided by authorized education professionals, not directly from students. All student data handling complies with FERPA and applicable children's privacy laws.

10. International Data Transfers

If you access Speddy from outside the United States, your information may be transferred to and processed in the United States. By using Speddy, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.

11. Cookies and Tracking

We currently use minimal tracking technologies for essential service functionality only. We do not use cookies for advertising or non-essential tracking. If this changes, we will update this policy and obtain appropriate consents.

12. Third-Party Links

Speddy may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services you access.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes become effective 30 days after posting. We will notify you of significant changes via email or Service notification.

14. Contact Information

For privacy-related questions or to exercise your rights, contact:

For privacy complaints, you may also contact your local data protection authority.

15. FERPA-Specific Provisions

15.1 Educational Records

When handling student educational records, we acknowledge our responsibilities under FERPA and will:

• Use educational records only for authorized educational purposes
• Not disclose records without appropriate consent or legal authority
• Maintain appropriate security measures
• Allow authorized school officials and parents to review records as required by law
• Comply with record retention and destruction requirements

15.2 Provider as School Official

When using Speddy, you may be designated as a "school official" under FERPA with legitimate educational interests. As such, you agree to:

• Use student data only for authorized educational purposes
• Protect the confidentiality of educational records
• Not re-disclose information except as permitted by FERPA
• Comply with your school district's FERPA policies

15.3 Data Ownership

School districts retain ownership of all student educational records. We claim no ownership rights to educational records and acknowledge that districts have the right to control access, use, and disclosure of student data.