DRAFT FOR ATTORNEY REVIEW — NOT YET IN EFFECT
SpeedyRecord logoSpeedyRecord

SpeedyRecord Privacy Policy

Effective date: [EFFECTIVE DATE] Last updated: [DATE]

1. Who we are and what this Policy covers

SpeedyRecord ("SpeedyRecord," "we," "us," or "our") is a homeschool recordkeeping and state-compliance organizing tool operated by MyAiGuidanceCounselor LLC, a North Carolina limited liability company. This Privacy Policy explains what information is involved when you use our website at speedyrecord.com (the "Site") and our application at app.speedyrecord.com (the "App," and together with the Site, the "Service"), and — just as importantly — where that information lives and what we can and cannot see.

This Policy applies to the Service. It does not apply to third-party services you may separately choose to use, such as Google Drive or our payment processor, each of which has its own privacy policy.

By using the Service, you acknowledge you have read this Policy.

2. The short version

We built SpeedyRecord to keep your family's records on your own device, not on our servers. Your student records are encrypted on your phone using a key derived from your PIN. We do not sell your information, we do not run advertising, and we do not use third-party analytics or tracking to watch how you use the App. If you turn on optional backup, a readable copy of your records goes to your own Google Drive — not to us — so you can always get them back. The plain-language summary below is for convenience; the full sections control.

3. Information involved when you use SpeedyRecord

a. Information you enter about your household and students. The App is designed for you to record homeschool information, which may include a student's name, age or date of birth, grade level, state, subjects, instructional hours, attendance, grades, transcripts, and photographs of worksheets or other work samples ("Student Records"). Student Records are stored locally on your device in encrypted form and are not transmitted to or stored on SpeedyRecord's servers (see Section 4).

b. Account and billing information. To maintain a subscription, we (or our payment processor) may process your email address and subscription status. Payment card details are collected and processed directly by our payment processor, Stripe, and are not stored by SpeedyRecord. See Section 9.

c. Limited technical information. When you load the Site or App, standard web-server and hosting logs (for example, IP address and basic request data) may be processed by our hosting provider to deliver and secure the Service. We do not use these logs to build advertising or behavioral profiles. We do not use third-party analytics, advertising, or session-tracking tools in the App.

d. Support communications. If you contact us for support, we will receive the information you choose to send (such as your email address and message).

4. Where your information is stored, and what we can see

SpeedyRecord is designed as a local-first product:

  • Your Student Records are stored on the device you use, in your browser's local storage, in encrypted form.
  • Records are encrypted using AES-GCM encryption, with an encryption key derived from the PIN you choose (using a salt and standard key-derivation). We do not store your PIN, and we do not store a copy of your unencrypted Student Records.
  • Because encryption and decryption happen on your device and your Student Records are not transmitted to us, SpeedyRecord cannot read your Student Records and does not possess them.

This architecture is central to how the Service works and is described so you understand its benefits and its limits (see Sections 10 and 11).

5. Optional backup to your own Google Drive

You may choose to enable backup. If you do:

  • A readable copy of your records is uploaded to your own Google Drive account. This is deliberate: it is what lets you recover your records even if you forget your PIN, lose your device, or stop using SpeedyRecord. The upload uses Google's drive.file permission, which limits SpeedyRecord to files the App itself creates in your Drive; SpeedyRecord does not request access to your other Google Drive files.
  • The backup goes to your Google account and is protected by your Google sign-in. SpeedyRecord never receives or stores it.
  • Because the backup copy is readable within your Drive, protect that Google account as you would the records themselves — a strong password and two-step verification are good ideas.
  • Your use of Google Drive is governed by Google's terms and privacy policy.

Backup is optional and off unless you enable it.

6. How information is used

Information involved in the Service is used to: provide and maintain the App's features; create and maintain your subscription and process payments (through Stripe); respond to your support requests; protect the security and integrity of the Service; and comply with law. Because we do not receive your Student Records, we do not use them for any purpose — they remain under your control on your device.

7. What we do not do

  • We do not sell or rent your personal information.
  • We do not display third-party advertising in the Service, and we do not allow advertisers to target you through the Service.
  • We do not use third-party analytics, tracking pixels, or behavioral-profiling tools in the App.
  • We do not store your Student Records on our servers or use them for training, marketing, or any other purpose.
  • We do not send your information to external AI services. Any AI-assisted features in the App run as models embedded on your own device; your questions and your Student Records are not transmitted off your device to us or to any AI provider.

8. Children's information

SpeedyRecord is a tool for parents and guardians (adults) to organize records about their own children's home education. It is not directed to children and is not intended for use by children.

Any information about a child that appears in the Service is entered by the parent or guardian and is stored locally on the parent's or guardian's device in encrypted form. Because SpeedyRecord does not receive or store this information on its servers, SpeedyRecord does not collect personal information from children through the Service. The parent or guardian controls all such information and may delete it at any time (see Section 10).

[ATTORNEY NOTE: Please confirm the Service's position under the Children's Online Privacy Protection Act (COPPA) and any applicable state student-privacy or children's-privacy laws given the local-only, no-server-collection architecture, and adjust this Section as needed. If any feature ever transmits child-related data to our servers or a third party on our behalf, this Section and Section 4 must be revisited.]

9. When information is shared

We share information only as needed to run the Service or as required by law:

  • Payment processing (Stripe). Subscriptions and payments are handled by Stripe, Inc. Information you provide to pay is processed under Stripe's privacy policy.
  • Hosting and infrastructure. Our hosting/CDN provider [e.g., Netlify] processes standard technical data to serve and secure the Service.
  • Optional backup (Google). Only if you enable backup, and only to your own Google account, as described in Section 5.
  • Legal and safety. We may disclose information if required by law, subpoena, or legal process, or to protect the rights, safety, or property of users, the public, or SpeedyRecord.
  • Business transfers. If SpeedyRecord is involved in a merger, acquisition, or sale of assets, information we hold (such as account/billing data) may be transferred as part of that transaction, subject to this Policy.

We do not otherwise share your information with third parties.

10. Data retention and deletion

Because your Student Records live on your device:

  • You control retention and deletion. You can delete Student Records within the App, or remove all local data by clearing the App's data in your browser/device or uninstalling the App.
  • There is no password/PIN reset, by design. Your PIN is not stored and is not recoverable. If you forget your PIN, the encrypted records on your device cannot be recovered by you or by us. If you enabled the Google Drive backup, you can restore your records from that readable copy (see Section 5). We strongly encourage you to enable backup and to keep your PIN safe.
  • Account/billing data. We (and Stripe) retain account and billing records as needed to provide the Service, maintain business and tax records, and comply with law. You may request deletion of account/billing data we hold by contacting us (see Section 14), subject to legal retention obligations.

11. Security

We take security seriously and have designed the Service to keep your Student Records private: records are encrypted on your device, your PIN is never stored, and your records are not transmitted to or stored on our servers.

No method of storage or transmission is completely secure. In particular, a numeric PIN provides convenience but is limited protection: someone with access to your unlocked device, or to the device's stored data, may be able to attempt to access your records. Please protect your device and choose a PIN you do not share. [If a longer PIN/passphrase option is offered, describe it here.]

12. Your privacy rights

Depending on where you live, you may have rights regarding personal information, such as the right to access, correct, or delete it, or to opt out of certain processing. Because your Student Records are stored on your own device and not held by us, you can exercise access and deletion over those records directly through the App. For account/billing information we hold, you may contact us to make a request.

California residents. [If applicable, add CCPA/CPRA disclosures: categories of personal information, purposes, no "sale"/"sharing" as defined, and how to exercise rights. Given the local-only architecture, tailor accordingly.]

Other U.S. state privacy laws. [Confirm applicability of Virginia, Colorado, Connecticut, Utah, and other state privacy laws and add disclosures as counsel advises.]

We will not discriminate against you for exercising any of these rights.

13. International users

The Service is intended for users in the United States. If you access it from outside the United States, you are responsible for compliance with local laws.

14. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice. Your continued use of the Service after an update means you acknowledge the revised Policy.

15. Contact us

Questions about this Policy or your information: [CONTACT EMAIL].

MyAiGuidanceCounselor LLC, North Carolina, USA.

Items to complete before publishing

  1. [CONTACT EMAIL] — the address you'll monitor for privacy/legal inquiries.
  2. [EFFECTIVE DATE] / [DATE] — set to your publish date.
  3. No physical address is listed (home address withheld by choice). Counsel should confirm this is acceptable, or advise a PO box / registered-agent address if any law you're subject to requires a postal contact.
  4. Attorney to confirm COPPA and state children's-privacy positioning (Section 8) — the local-only, no-server-collection architecture is the key fact.
  5. Attorney to complete California and other state privacy disclosures (Section 12).
  6. Confirm whether a longer PIN/passphrase option exists (Section 11) and update.
  7. Confirm the final list of third-party processors (Stripe, Google Drive, hosting).
  8. Entity / affiliate note for counsel: SpeedyRecord is operated by MyAiGuidanceCounselor LLC. Classical Learner Homeschool Company and MyAiGuidanceCounselor LLC are sister companies under common majority ownership (Brett Pike). Counsel should (a) confirm users are clearly told which entity they are contracting with, and (b) advise whether any sharing of information between affiliated companies occurs or is planned — if so, this Policy must disclose it.
  9. AI features (company commitment): AI-assisted features (e.g., the "AI Guidance Counselor") are to be implemented as embedded, on-device models with no outbound calls. Section 7 now states this affirmatively. Guardrail: if the company ever moves any AI feature to a cloud/third-party provider, this Policy, the marketing site's "nothing leaves your device" claims, and the COPPA analysis in Section 8 must all be revisited before that feature ships. Counsel should be told of any such change in advance.