Last updated · 5 May 2026
Privacy Policy
What we collect, why we collect it, and what we will never do with it. We follow the principles of leading privacy frameworks applicable in Canada and the United States — including PIPEDA, COPPA, and CCPA: collect the minimum needed, be transparent about why, never sell, and give you control.
1. What we collect
- From the parent or guardian: name, email address, billing address (via Stripe), and the answers given during the assessment.
- About the child: first name, the grade level, and the work the child returns (photographs of completed worksheets).
- From your device: standard web logs (IP address, browser, pages viewed) when you visit our site. Used for security and aggregate analytics only.
2. Why we collect it
- To deliver the service: send worksheets, mark returned work, adapt the next week.
- To process payment: Stripe handles billing; we never see or store your card number.
- To communicate with you: receipts, weekly letters, occasional product updates.
- To meet our legal obligations (e.g. tax records).
3. Consent, age, and children
The service is never sold to or directly used by children. Account creation, payment, support, and all correspondence are with the adult account holder only. The account holder must be at least 18 (or the age of majority in their province or state of residence, whichever is higher).
Children under 13 (COPPA, US). We do not knowingly collect personal information directly from any child under 13. The only information we ever receive about a child under 13 is what the parent or legal guardian voluntarily provides on the child's behalf (the child's first name and grade level) and photographs of completed worksheets the parent chooses to submit. By starting a subscription, the parent provides verifiable consent under COPPA for us to receive that limited information for the sole purpose of delivering the service. Parents may review the information we hold about their child, request deletion of it, and refuse any further collection at any time by emailing admin@papersheets.academy.
Photograph safety. Parents are strongly advised not to include identifying information in submitted photographs — last names, the child's face, home addresses, school names or logos visible on the page, or any other child not enrolled in this subscription. We mark whatever is legible in the photograph; we do not need a photo of the child to mark the work.
Direct child contact. If we ever learn that a child has somehow created an account or submitted information directly without parental involvement, we will promptly delete that account and any associated data, and notify the parent at the email on file (if known).
You can withdraw consent at any time by emailing admin@papersheets.academy. We will then stop new collection and delete or anonymise prior records on the schedule below.
4. Who we share it with
We share the minimum amount of data needed with these processors:
- Stripe, for payment processing.
- Email delivery provider, for sending worksheets, receipts, and letters.
- Cloud hosting, for running the website and storing returned work.
We do not sell, rent, or trade your data to anyone. We do not run advertising trackers on this site.
5. Where data is stored
Data is stored on servers operated by our cloud providers, which may be located in Canada or the United States. Where data crosses borders, we rely on the providers' standard contractual protections.
6. How long we keep it
- Active accounts: for as long as the subscription is active, plus 24 months for support purposes.
- Cancelled accounts: anonymised within 90 days of the final billing period, except where retention is required by law (typically tax records, kept 7 years).
- Returned worksheets: retained while the subscription is active and deleted within 90 days of cancellation unless you ask us to delete them sooner.
7. Your rights
You can, at any time:
- Ask for a copy of the data we hold about you or your child.
- Ask us to correct anything that is wrong.
- Ask us to delete what we hold (subject to legal retention requirements).
- Withdraw your consent and end the service.
Email admin@papersheets.academy to make any of these requests. We respond within 30 days.
8. Security
We use industry-standard encryption for data in transit (HTTPS) and at rest. Access is limited to staff who need it to deliver the service. If a breach occurs that creates a real risk of significant harm, we will notify you and the appropriate regulators promptly, in line with applicable Canadian and US data-protection laws (including PIPEDA and applicable US state breach-notification laws).
9. Cookies
We use a small number of strictly-necessary cookies to keep your session working. We do not use advertising or third-party tracking cookies on this site.
10. Privacy contact
For any privacy question, request, or complaint — including a COPPA request from a parent or legal guardian — email admin@papersheets.academy with the subject line "Privacy request". We respond within 30 days.
11. Changes to this policy
If we make a material change we will email you. The "Last updated" date at the top of this page always reflects the most recent version.