Privacy Policy for WorksheetPal

Last Updated: September 13, 2026

Introduction

Welcome to WorksheetPal ("we," "our," or "us"). We are committed to protecting the privacy of children and their families. This Privacy Policy explains how we collect, use, disclose, and safeguard information from users of our website worksheetpal.com (the "Site") and our educational services (the "Services").

We aim to comply with the Children's Online Privacy Protection Act ("COPPA") and other applicable privacy laws. Parents and guardians should review this Privacy Policy with their children.

Privacy-by-Design Access Model

WorksheetPal enforces a separation between general exploration and child-specific personalization:

• General exploration: Visitors and parent-account holders may explore eligible games, worksheets, and other freemium content without creating a kid profile. This mode does not require a child's name, grade, birthday, country, learning difficulties, or learning topics.
• Personalization: A kid profile is required before WorksheetPal saves child-specific progress, points, recommendations, assessments, preferences, or other personalized learning history.
• Premium personalized features: Active verified parental consent is required before a kid profile can be created or restored. An eligible paid subscription is additionally required for premium product entitlements.

Payment is not itself consent. Our verification flow combines a versioned direct parental notice, an email confirmation step, and server-side confirmation of a qualifying Stripe monetary transaction. A parent may complete that transaction either through a subscription purchase or through a clearly disclosed one-time EUR €0.50 verification payment that is automatically refunded and does not purchase a plan. Consent, the verification transaction, and subscription entitlement remain separate records. A browser redirect, checkbox, saved card, ordinary account-email verification, or payment alone is not treated as verified parental consent.

This production control is enforced before kid-profile creation or restoration and before covered child-specific progress, recommendations, assessments, points, or other personalised processing can be saved. Existing profiles remain preserved but covered processing is paused whenever current verified consent is absent, expired, or withdrawn.

Information We Collect

1. Information Provided by Parents/Guardians

When creating an account, we collect:

• Parent/Guardian Information: Email address, name
• Child Information: Child's first name, grade level, birth month/year, subjects of difficulty
• Payment Information: Processed securely through Stripe (we do not store credit card numbers)

2. Automatically Collected Information

When you use our Services, we automatically collect:

• Usage Data: Pages viewed, worksheets completed, time spent, scores
• Device Information: Browser type, operating system, and general region. Service providers may process an IP address to deliver and secure the site or derive general location; WorksheetPal does not use it for behavioural advertising.
• Cookies: Session cookies for authentication and functionality (required for service operation)
• Parent Campaign Analytics: After a visitor accepts analytics cookies, Microsoft Clarity records clicks, taps, scrolling, page rendering, and session behaviour only on specifically designated campaign landing pages directed to parents. The signup area is masked, no account identifier is sent, and Clarity tracking is disabled on child-facing, authenticated, game, worksheet, or learning routes.

3. User-Generated Content

• Worksheet Completions: Exercise responses, scores, progress data
• Profile Information: Selected avatar, preferences
• Chat Interactions: Conversations with Smarky (our AI assistant) for educational purposes

How We Use Information

We use collected information to:

1. Provide Educational Services
   • Generate personalized worksheets based on grade level and difficulty
   • Track learning progress and achievements
   • Provide AI-powered educational assistance through Smarky

• Display leaderboards using a stable fictional nickname by default; a real profile name and country are each shown only when the parent separately enables that specific public disclosure

2. Account Management

   • Authenticate users and maintain account security
   • Process subscription payments through Stripe
   • Send account-related emails (receipts, subscription updates)
   • Provide customer support

3. Service Improvement

   • Analyze usage patterns to improve content quality
   • Fix bugs and optimize performance
   • Develop new features and educational content

4. Communication

   • Send weekly worksheet plans (Pro/Elite subscribers only)
   • Respond to customer inquiries
   • Send important service updates (rare, non-marketing)

We DO NOT:

• Show targeted advertising to children
• Sell or rent personal information to third parties
• Use information for behavioral advertising
• Share information with third parties for their marketing purposes

COPPA Compliance

Parental Consent

WorksheetPal is designed for children under 13 with parental supervision. We require verifiable parental consent before collecting personal information from children.

How We Obtain Consent:

• Creating an account, accepting Terms, verifying an ordinary account email, saving a card, or making a payment does not by itself constitute verified parental consent
• We enforce a separate, auditable consent process before persistent kid-profile creation and personalization
• The process combines a versioned direct notice, an email confirmation, and server-side verification of a qualifying Stripe monetary transaction; the transaction may be a subscription purchase or a disclosed, automatically refunded EUR €0.50 verification payment that does not unlock a plan
• Parents control kid-profile settings and can review, withdraw consent for, or request deletion of their child's information

Parental Rights

Parents have the right to:

• Review the personal information we have collected from their child
• Request deletion of their child's personal information
• Refuse further collection or use of their child's information
• Change consent decisions at any time

To exercise these rights, contact us at: [email protected]

Information Collection from Children

We only collect the following from children:

• First name (for personalization)
• Grade level and birth month/year (for age-appropriate content)
• Worksheet completion data (for progress tracking)
• Selected avatar (for profile display)

We do NOT collect:

• Full names, addresses, or phone numbers from children
• Photos or videos of children
• Social media information
• Location data beyond general IP-based region
• Any information unnecessary for educational purposes

Information Sharing and Disclosure

Service Providers

We disclose information to service providers only as needed to operate the Services:

• Supabase: Database, authentication, and file storage; this provider hosts parent-account and child-profile data
• Stripe: Subscription, verification-payment, refund, invoice, and fraud-prevention processing; Stripe receives parent and transaction information but WorksheetPal does not store complete card numbers
• Render: Website hosting and delivery of technical web requests
• Resend: Transactional and, where selected, promotional email delivery using parent contact information
• Sentry: Error and performance monitoring using scrubbed technical diagnostics; default personal information and child-facing session replay are disabled
• Microsoft Clarity: Consent-based heatmaps and session recordings limited to specifically designated parent-directed campaign landing pages; signup forms are masked and tracking is disabled before child-facing or authenticated routes
• Google Gemini and OpenAI: Educational text generation using the interaction and minimised learning context needed to produce a response
• Google Imagen, GPT-Image, and Replicate: Illustrative worksheet image generation
• Google Cloud Text-to-Speech: Conversion of worksheet and game text into spoken audio
• Anthropic: Selected internal administrative-assistant functions; it is not used to process child or parent account content
• Meta / WhatsApp Cloud API: Delivery of messages a user voluntarily sends to the optional WorksheetPal WhatsApp chatbot

For educational AI requests, we do not intentionally send a child's name, email address, country, precise location, or parent-account identifier. We may send the answer or interaction requiring processing together with minimised learning context such as grade, subject, topic, difficulty, or learning preference. Hosting, payment, email, and messaging providers necessarily process the account or technical information required to provide their specific service. We assess and configure providers to limit processing to the applicable operational purpose and do not permit use of child information for behavioural advertising.

Legal Requirements

We may disclose information if required by law:

• To comply with legal process (subpoena, court order)
• To protect rights, property, or safety of WorksheetPal, users, or others
• To investigate fraud or security issues
• In connection with business transfers (merger, acquisition)

Aggregate Data

We may share anonymous, aggregate statistics that cannot identify individuals (e.g., "80% of 3rd graders completed math worksheets").

Data Security

We implement industry-standard security measures:

• Encryption: All data transmitted over HTTPS/TLS
• Authentication: Secure password hashing and session management
• Access Controls: Role-based permissions and database security
• Regular Audits: Security reviews and vulnerability scanning
• Data Minimization: We collect only necessary information

However, no internet transmission is 100% secure. We cannot guarantee absolute security.

Data Retention

• Active Accounts: We retain information while your account is active
• Deleted Accounts: Kid profiles and child-specific activity are deleted from active application systems through the account-deletion process; residual copies in protected backups or operational logs are deleted or overwritten according to our retention cycle, normally within 30 days
• Legal Requirements: Limited billing, transaction, tax, fraud-prevention, security, dispute, and consent evidence may be retained longer where reasonably necessary or legally required. Stripe may retain payment and invoice records under its own legal obligations
• Aggregate Data: Anonymous usage statistics may be retained indefinitely

Your Rights and Choices

Account Management

• Update profile information in Account Settings
• Download your data (contact [email protected])
• Delete your account (removes the account and child data from active application systems, cancels an active Stripe subscription, and deletes the associated Stripe customer where supported; legally required financial, security, dispute, and consent evidence may be retained)

Communication Preferences

• Unsubscribe from marketing emails (we send very few)
• Control weekly worksheet emails in Account Settings
• Essential service emails cannot be disabled (receipts, security alerts)

Cookie Management

• Essential cookies required for service functionality
• Optional analytics cookies can be accepted or rejected through the cookie-preference banner
• Microsoft Clarity is loaded only after analytics consent on a designated parent-directed campaign landing page; withdrawing analytics consent clears its first-party cookies and ends the tracked session
• You can also disable cookies in browser settings, but this may limit functionality

Third-Party Links

Our Services may contain links to third-party websites (e.g., educational resources). We are not responsible for privacy practices of external sites. Parents should review privacy policies of any linked sites.

International Users

WorksheetPal is operated by Andre Antunes Ferreira, a sole trader based in Portugal. Our hosting and data-processing infrastructure is located in the United States, so if you access our Services from outside the U.S. — including from the EU or UK — your information will be transferred to and processed in the United States.

For EU Users (GDPR):

• You have rights to access, correct, delete, and port your data
• You can object to processing or request restriction
• You can lodge complaints with your local data protection authority
• Contact our Data Protection Officer at: [email protected]

Changes to Privacy Policy

We may update this Privacy Policy periodically. Changes become effective when posted. We will notify users of material changes via:

• Email notification
• Prominent notice on our website
• Updated "Last Updated" date at the top

Where a material change affects practices covered by an existing parental-consent decision, we will provide a new direct notice and obtain new consent when required. Continued use alone is not treated as parental consent.

Contact Us

For privacy questions, concerns, or to exercise your rights:

Email: [email protected]
Mail: WorksheetPal Privacy Team, Rua Fernando Mauricio 21 - 7B, 1950-477 Lisboa, Portugal
Response Time: We respond to privacy requests within 30 days

Parental Consent Withdrawal, Export, and Deletion

An authenticated parent can review the current consent status and withdraw consent from the Preferences section of the parent dashboard. Withdrawal immediately stops future covered personalised processing but does not erase the historical consent evidence required to document the decision.

Parents can export child data or delete an individual kid profile through the available parent-account controls. Account deletion is available in Security settings and removes the family account and associated child data from active application systems. These rights remain available even when consent is pending, expired, or withdrawn. A parent who cannot access the account may contact [email protected]; do not send a child's name or other child information unless our privacy team asks for the minimum information needed to verify and complete the request.

Additional Resources

• Terms of Service
• COPPA Information
• Contact Support

---

We take children's privacy seriously. If you have concerns about how we handle information, please contact us immediately at [email protected].