Privacy Policy

• Account information — your name, email address, and household name. If you sign in with Google or Apple, we receive your name and email from that provider.
• Your content — the photos you upload, the captions and subjects on each record, child profiles you create, and any context notes you add.
• Usage and billing — your record and storage balances, and (if you buy a bundle) payment confirmation from our payment processor. We never see or store your full card details.

We use your information only to provide the service:

• To create educational records from the photos you choose to upload.
• To organize your timeline and generate portfolio PDFs you request.
• To maintain your account, household sharing, and record/storage balances.
• To process bundle purchases and prevent abuse.

We do not sell your data, show you third-party ads, or use your photos or records to train artificial-intelligence models.

We rely on a small number of trusted providers to run Homeschoolfolio. They process data on our behalf and only as needed:

• Anthropic — generates the educational caption for a photo when you ask it to. Photos sent for processing are not used to train their models.
• Amazon Web Services (EU — Frankfurt) — stores your photos in a private, encrypted bucket and runs our servers and database, hosted in the European Union.
• Stripe — processes bundle payments. Card details go directly to Stripe.

• Photos are stored in a private bucket and are never publicly accessible.
• Images are shown to you through secure links that expire, so they can't be shared or indexed.
• Data is encrypted in transit and at rest.
• Records are visible only to caregivers you invite to your household.
• Passwords are stored only as a secure one-way hash — never in plain text.
• If a security breach ever affects your personal information, we will notify the relevant regulator and affected users as soon as reasonably possible.

Homeschoolfolio is hosted in the European Union (Frankfurt, Germany). Your account data, photos, and records are stored and processed there, and we handle personal information in line with the EU General Data Protection Regulation (GDPR).

For families in South Africa, this is a cross-border transfer under the Protection of Personal Information Act (POPIA). We rely on the EU's substantially similar level of data protection, your consent, and the transfer being necessary to provide the service — the grounds permitted by Section 72 of POPIA.

Under the GDPR and POPIA you have rights over your personal information. You can exercise any of these in the app or by emailing us:

• Access & portability — see the data we hold and download a portfolio PDF of your records at any time.
• Correction — edit your account details, child profiles, captions, and subjects directly in the app.
• Deletion — deleting a record permanently removes its photo from storage, and you can delete your entire account and associated data at any time.
• Objection & withdrawal of consent — you can stop using AI processing or close your account whenever you choose.
• Complain — you may lodge a complaint with a supervisory authority: the South African Information Regulator (POPIA) or your local EU data-protection authority (GDPR).

Homeschoolfolio is intended for use by parents and caregivers, not by children. Records and photos of children are created and controlled by the adult who owns the household account.

Because these records concern children, we treat them as sensitive personal information (special personal information under POPIA, and a special category under the GDPR). By uploading a photo of a child, you confirm you are that child's parent or guardian, or have their consent, and that you consent to it being processed to create the educational record you request.

We may update this policy from time to time. When we do, we'll revise the "last updated" date above and, for material changes, notify you in the app.

Questions about your privacy? Email us at privacy@homeschoolfolio.com.