Privacy Policy

1 Overview & Company Identity

This Privacy Policy describes how FIRESAIL LLC (doing business as Axiom Homeschool, "we", "us", or "our") collects, uses, stores, shares, protects, and handles personal information when you access or use our web applications, desktop views, mobile platforms, and related homeschooling services (collectively, the "Service" or "Axiom Homeschool") available at https://axiomhomeschool.com.

Axiom Homeschool is an all-in-one homeschool workspace operating system developed specifically for homeschool parents, guardians, educators, and their enrolled students. We believe that family educational records, student work, and private household rhythms belong exclusively to the family. We do not sell, rent, lease, or monetize your personal information or your children's educational records.

2 Information We Collect

We practice strict data minimization and collect only the information reasonably required to deliver our educational scheduling, curriculum tracking, student portfolio management, and state compliance reporting features:

A. Information You Provide to Us Directly

• Parent/Supervisor Account Information: When you register or sign in as a parent or educator, we collect your name, email address, password (stored in salted hashed format via Google Firebase Authentication), optional phone number, and account preferences.
• Student Profile Data (Created Exclusively by Parents): Parents create student profiles inside their isolated family workspace. This includes the student's first name or nickname, approximate age/grade level, chosen avatar, and learning color theme. We never ask children for government IDs, Social Security numbers, dates of birth, or private contact details.
• Homeschool Academic & Curriculum Records: Course names, textbook titles, lesson plans, daily completed assignments, grades, reading logs, attendance records, study hours, and academic milestone reflections entered by parents or submitted by students under parental supervision.
• Student Scrapbook & Lesson Artifacts: Optional photos or PDF uploads of student artwork, written worksheets, science experiments, or curriculum materials added to the family portfolio.
• State Compliance & EFA / ClassWallet Records (Parent-Controlled): Information entered by parents for educational freedom accounts (such as Arkansas EFA, ClassWallet receipts, or scholarship expense categorizations) to track annual educational budgets and state required hours.

B. Information Collected Automatically

• Device & Usage Information: Browser type, operating system version, device category (mobile/tablet/desktop), preferred language, session timestamps, and crash logs to ensure stable performance across wide desktop and mobile devices.
• Local Storage & Offline Cache: We utilize browser LocalStorage and IndexedDB to provide offline functionality, so students and parents can record lessons even when disconnected from the Internet.
• Cookies & Local Tokens: We use strictly essential cookies and authentication tokens (via Firebase Auth) required to authenticate sessions and keep supervisor PIN locks secure. We do not use third-party advertising or tracking cookies.

3 Google User Data & OAuth 2.0 Compliance Notice

Axiom Homeschool offers Google Sign-In as an optional, secure authentication mechanism for parent supervisors and educators.

A. Google Data Accessed & Scopes Used

When you choose to sign in with Google, our application requests access solely to the standard basic profile scopes:

B. How We Use and Store Google Data

• No Unauthorized Access: Axiom Homeschool does NOT request access to your Google Drive, Gmail messages, Google Contacts, Google Classroom, Google Photos, or any sensitive Google Workspace APIs.
• Storage: Your Google user ID and primary email address are stored securely in Google Firebase Authentication and our Firestore database under strict parental access rules.
• No Selling of Google User Data: We never sell, transfer, or disclose Google user data to third parties, advertising networks, or data brokers.
• No Use for AI Foundation Training: User data obtained through Google APIs is never used to develop, create, or train generalized artificial intelligence or machine learning models.
• Compliance with Google API Services User Data Policy: Axiom Homeschool’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

C. Non-Consensual Intimate Imagery (NCII) Prohibition

In strict compliance with the Google APIs Terms of Service and Google Generative AI Prohibited Use Policy:

4 How We Use Your Information

We use collected data solely for the following legitimate educational purposes:

1. To Provide and Maintain the Workspace: Authenticate accounts, sync schedules across family devices, and display the child's personalized Daily Flow.
2. To Power Academic Tools: Organize curriculums, calculate instructional hours, track syllabus completion, and generate audit-proof transcripts and report cards.
3. To Provide Socratic Tutoring (Axiom Tutor & Zot): Offer step-by-step guidance, decodable early-learning prompts, and encouraging hints without giving direct answers.
4. To Support State Reporting (e.g., Arkansas EFA): Formats attendance, subjects, and educational receipts for official state homeschool portfolio audits and ClassWallet DirectPay verification.
5. To Protect Account Security: Prevent unauthorized access via 4-digit Parent Supervisor PIN protection and encrypted session tokens.

5 Children's Privacy (COPPA & FERPA Compliance)

Because Axiom Homeschool is designed for families with children, protecting minors is our fundamental architectural principle. We strictly comply with the Children's Online Privacy Protection Act (COPPA) and align with the privacy principles of the Family Educational Rights and Privacy Act (FERPA):

• No Direct Child Registration: Children cannot create independent accounts. All student profiles are provisioned and managed directly by an adult parent, legal guardian, or authorized educator.
• Strict Read-Only Child Guardrails: Student profiles are restricted to viewer-only permissions. Children cannot delete schedules, edit curriculum standards, invite outside users, or access parent administrative settings.
• Sibling Data Siloing: Each child's Daily Flow is isolated to their own student ID; children cannot view other siblings' private records or modify family data.
• No Behavioral Advertising or Profiling: We never display advertisements to children, track children across third-party websites, or build commercial profiles on students.
• Parental Inspection & Deletion Rights: Parents have full authority to inspect, export, edit, or permanently erase their child’s profile, scrapbooks, and lesson logs at any time.

6 Third-Party Service Providers & Subprocessors

We do not sell personal data. We only engage reputable, enterprise-grade cloud service providers who process data strictly on our behalf under confidentiality and data protection agreements:

7 Data Storage, Retention & Security

We implement robust organizational and technological safeguards to safeguard your family's data:

• Encryption in Transit: All communications between your browser/app and our servers are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Encryption at Rest: All stored documents, curriculum files, and database records in Google Cloud Firestore are encrypted at rest using AES-256 encryption.
• Access Controls: System administrative access is restricted via multi-factor authentication, least-privilege role policies, and regular security audits.
• Retention: We retain your family records for as long as your account is active, or as required by state homeschool portfolio retention laws. Upon your request for account deletion, all account data is purged within thirty (30) days.

8 Your Rights, Data Portability & Account Deletion

You retain full ownership and control of your data. Regardless of your jurisdiction, we grant all users the following comprehensive rights:

• Right to Access & Portability: You can download a complete backup of all family schedules, curriculum files, attendance records, and student grades in standard JSON/CSV/PDF formats at any time from System Settings.
• Right to Rectification: You can edit and update any student name, course title, or grade entry directly in the app.
• Right to Erasure (Deletion): You can request permanent deletion of your account and all associated family data at any time.

How to Delete Your Account and Data:

1. In-App Deletion: In the Axiom Homeschool app, log into your Parent Supervisor account, navigate to Settings > Academy & Family Hub, scroll to the bottom, and select Delete Account & Household Data.
2. Web Deletion Portal: Visit our dedicated Account & Data Deletion Request Page at https://axiomhomeschool.com/delete-account.
3. Email Request: Send an email from your registered parent email address to privacy@axiomhomeschool.com or contact@axiomhomeschool.com with the subject line "Account Deletion Request". We will verify and process your deletion within 30 days.

9 State Compliance & Arkansas EFA / ClassWallet Disclosures

For families utilizing state educational freedom accounts or scholarship programs (such as Arkansas EFA, ClassWallet, Florida PEP/FES-UA, Arizona ESA, etc.):

• Vendor Identity: Personalized DirectPay and Odyssey invoices reference registered vendor FIRESAIL LLC (d/b/a Axiom Homeschool) and include a buyer-specific verification token.
• Student Scoping: Financial tracking records maintain strict 1-student scope per invoice and monitor the statutory 25% extracurricular/PE spending caps.
• Audit Independence: Axiom provides instant local PDF exports so parents can furnish proof of progress to state departments of education without sacrificing household privacy.

10 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect enhancements in our application, changes in applicable laws (such as COPPA or state homeschool regulations), or updates to third-party policies. When changes are made, we will update the "Effective Date" at the top of this policy and notify parents via an in-app banner or email notice prior to material changes taking effect.

11 Contact Us & Privacy Officer

If you have questions, concerns, or requests regarding this Privacy Policy, your personal information, or our children's privacy protections, please contact our dedicated Privacy Officer: