Privacy Notice

Who we are

EduCrush ("we", "us") is an online Canadian-curriculum learning platform for grades 1 to 12, accessible at educrush.ca. This notice describes what personal information we collect, how we use it, and the choices you have.

What we collect

• Parent / guardian account data — name, email, phone (optional), the children you enrol, and the plan you choose.
• Child account data — name, grade level, login credentials set by you, quiz attempts, lecture progress and arcade activity.
• Tutor account data — name, email, phone (optional), areas of expertise, and self-reported credentials.
• School account data — institution name, billing contact, number of students.
• Operational data — IP address (from request logs), browser user-agent, and timestamps required to operate the service and prevent abuse.
• Email subscriptions — your email if you opt in to the newsletter. You can unsubscribe at any time via the link in every email.

How we use it

• To deliver the learning experience — generating weekly quizzes, tracking mastery, and surfacing tutor matches.
• To issue invoices and reconcile payments on your account.
• To send you transactional emails (welcome, invoice, weekly progress reports, account-status changes).
• To improve the platform — aggregated, anonymised analytics on which lectures and questions are working well.
• To meet our legal obligations, including responding to lawful requests from authorities.

What we never do

• We don't sell student data. Ever.
• We don't show advertising in any part of the EduCrush product.
• We don't build behavioural profiles of children for marketing.
• We don't share account data with third parties for their own marketing purposes.

Where the data lives

EduCrush runs on private infrastructure with encrypted-at-rest databases and TLS-everywhere transit. Backups are encrypted and retained for 30 days. Email delivery is handled by our SMTP provider (Google Workspace), which sees the sender, recipient, and subject of the transactional emails it delivers on our behalf.

Your rights

Parents may request — at any time, by emailing [email protected] from the email associated with the account — to:

• See what personal data we hold for them and their children.
• Correct any inaccuracies.
• Export their (and their children's) account data in a portable format.
• Delete their (and their children's) account, subject to retention obligations for invoices and tax records (typically 7 years in Canada).

Tutors and school admins enjoy the same rights with respect to their own personal data.

Cookies

We use a single first-party cookie to keep you signed in. We do not use third-party tracking cookies, analytics cookies, or advertising pixels.

Children's privacy (COPPA / PIPEDA)

Children under 13 may only be enrolled by a verified parent or guardian. Children themselves cannot self-register. Parents are the sole account holders and can revoke access to their children's accounts at any time. We comply with the principles set out in Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and apply U.S. COPPA-style protections to all child accounts.

Changes to this notice

If we materially change how we handle personal data, we'll email account holders and refresh the "Last updated" date at the top of this page. Continued use of EduCrush after a change indicates acceptance of the revised notice.

Contact

Questions, requests, or complaints — [email protected]. You may also contact the Office of the Privacy Commissioner of Canada if you believe your rights have not been respected.