Privacy Policy

1. Who we are

NextStep Summer ("we," "us," "our") provides a summer learning app for rising 1st–4th graders, covering Math, Reading, and Social Studies. This policy explains what information we collect, how we use it, and the choices you have.

2. Accounts are created by parents, not children

NextStep Summer accounts are created and managed by a parent or guardian. We do not knowingly collect personal information directly from children, and children do not create their own accounts, communicate with other users, or interact with anyone outside their own family through the app.

3. Information we collect

• Parent account information: the email address and password you provide when creating an account (your password is never visible to us — it is securely handled by our authentication provider, Supabase).
• Child profile information: a first name, entering grade, language preference, and learning focus you enter to personalize your child's experience. We do not collect a child's last name, birthdate, photo, address, or precise location.
• Learning progress: which lessons, games, and stories your child has completed, so the app can track stars and unlock new content.

4. Payment information

NextStep Summer requires a paid subscription. Payments are processed by Stripe, Inc., a PCI-compliant third-party payment processor. When you subscribe, your card details are sent directly to Stripe — we never receive, see, or store your full card number, expiration date, or CVC on our own servers. We do store limited billing metadata needed to manage your subscription, such as your subscription plan, status, renewal date, and Stripe's internal customer/subscription IDs. See Stripe's own privacy policy at stripe.com/privacy for how they handle payment data.

5. What we don't do

• We do not sell or rent your information to third parties.
• We do not show advertisements to children or use their activity for ad targeting.
• We do not allow children to chat or communicate with other users through the app.
• We never see or store your full card number, expiration date, or CVC.

6. How we use information

We use the information above only to operate the app: authenticating your account, personalizing your child's grade-level content, saving progress across sessions, managing your subscription, and communicating with you about your account (such as email confirmation, password resets, or billing receipts).

7. Where information is stored

Account authentication and app data are handled by Supabase, a third-party authentication and database provider. Payment data is handled by Stripe, as described above. Some progress data may also be stored locally in your device's browser storage. We take reasonable measures to protect this information but cannot guarantee absolute security of data transmitted over the internet.

8. Your choices

You can update your child's profile information at any time from the Parent Zone in the app, and manage or cancel your subscription at any time from the "Manage billing & subscription" link. To request that we delete your account and associated data, contact us at hassan@nookrisemarketing.com.

9. Changes to this policy

We may update this policy as the app changes. We will update the "Last updated" date above when we do, and significant changes will be communicated by email.

10. Contact us

Questions about this policy or your family's data can be sent to hassan@nookrisemarketing.com.