Summary โ Key Points in Plain Language
- We collect only what we need to provide your child's learning experience โ names, emails, dates of birth, grade levels, and learning progress.
- We never sell personal data. Period.
- We never show ads. There is no third-party advertising on A2 Compass.
- Children under 13 cannot create their own accounts. A parent or teacher must create the account, and we obtain verifiable parental consent before collecting any child data.
- Parents have full control. You can review, update, or delete your child's data at any time.
- Payment card data is handled by Stripe and is never stored on our servers.
- We comply with COPPA and FERPA to protect children's and students' privacy.
- Questions? Contact us at admin@allexapiegroup.com.
1. Introduction
Welcome to A2 Compass ("the Platform," "we," "us," "our"), an adaptive learning platform operated by Achievement Academy ("Achievement Academy," "the Company"). This Privacy Policy explains how we collect, use, share, and protect information when you or your child use A2 Compass at https://aaacademy.app.
We take the privacy of all our users seriously โ especially children. This policy is written in plain English so parents, guardians, and educators can clearly understand our practices.
By using A2 Compass, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.
2. Who We Are
A2 Compass is a product of Achievement Academy, operated by Sandra Brooks.
- Website: https://aaacademy.app (platform) ยท https://a2compass.org (marketing site)
- Parent company website: https://aaacademy.us
- Contact email: admin@allexapiegroup.com
- Location: United States
Achievement Academy is the "operator" under COPPA (the Children's Online Privacy Protection Act) responsible for the collection and handling of personal information through the Platform.
3. Information We Collect
We collect different types of information depending on your role in the Platform.
3.1 From Parents and Guardians
- Account information: Full name, email address, and password (authenticated via Supabase Auth)
- Payment information: Billing details processed through Stripe (we never store credit card numbers on our servers)
- Communication records: Messages or support requests you send us
- Child information: Information you provide about your child when creating their student account (see Section 3.2 and 3.3)
3.2 From Students Under 13
We collect personal information about children under 13 only with verifiable parental consent (see Section 5). Information collected includes:
- Name (first and last)
- Date of birth (to determine age-appropriate content and COPPA applicability)
- Grade level
- Learning progress and assessment data (scores, completed activities, skill mastery levels)
- Avatar preferences (chosen display images or characters)
Children under 13 do not:
- Create their own accounts (a parent or teacher does this)
- Provide an email address directly
- Make any purchases
- Communicate publicly or with other users on the Platform
3.3 From Students Ages 13โ18
For students ages 13 and older, we collect:
- Name, email address, and date of birth
- Grade level
- Learning progress and assessment data
- Avatar preferences
Accounts for students ages 13โ18 are still created by a parent or teacher, though older students may manage some aspects of their own account.
3.4 From Teachers and Administrators
- Name and email address
- Role and institutional affiliation
- Account credentials (authenticated via Supabase Auth)
- Class/group management data (student rosters, assigned content)
3.5 Automatically Collected Information
When you use the Platform, we may automatically collect:
- Device information: Browser type, operating system, screen size
- Usage data: Pages viewed, features used, session duration
- Log data: IP address, access times, error logs
We use this data to maintain, improve, and secure the Platform โ not for advertising or profiling.
4. How We Use Information
We use the information we collect to:
| Purpose | Details |
|---|---|
| Provide the learning experience | Deliver adaptive content, track progress, generate assessments, and personalize learning paths |
| Create and manage accounts | Set up parent, student, and teacher accounts |
| Process payments | Handle enrollment fees, subscriptions, and billing through Stripe |
| Communicate with parents and teachers | Send account confirmations, progress updates, and respond to inquiries |
| Improve the Platform | Analyze usage patterns to improve features, content, and performance |
| Ensure security | Detect and prevent fraud, abuse, or unauthorized access |
| Comply with legal obligations | Meet COPPA, FERPA, and other applicable legal requirements |
We do NOT use personal information to:
- Serve advertisements of any kind
- Sell or rent data to third parties
- Build marketing profiles of children
- Contact children directly for commercial purposes
5. Children's Privacy โ COPPA Compliance
This section is especially important for parents and guardians of children under 13.
5.1 Our Commitment
A2 Compass complies with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent.
5.2 Parental Consent Process
Before any personal information is collected from a child under 13:
- A parent or teacher initiates account creation for the child. Children under 13 cannot sign up on their own.
- We obtain verifiable parental consent before the child's account is activated. Our consent methods include:
- Email-based consent with a follow-up confirmation: The parent receives an email with details about what data will be collected and how it will be used. The parent must affirmatively respond (e.g., sign and return a consent form, or complete an electronic consent flow) to authorize data collection.
- Signed consent form: For school-based enrollments, parents may sign a physical or electronic consent form provided by the school or Achievement Academy.
- The child's account becomes active only after consent is verified.
5.3 What We Collect from Children Under 13
As described in Section 3.2, we collect only what is necessary for the educational service:
- Name, date of birth, grade level
- Learning progress and assessment results
- Avatar preferences
We do not collect photos, videos, voice recordings, geolocation, or contact information directly from children under 13.
5.4 How Children's Data Is Used
Children's data is used solely to:
- Deliver age-appropriate, adaptive learning content
- Track academic progress and generate reports for parents and teachers
- Allow children to personalize their avatar within the Platform
5.5 Disclosure of Children's Data
We do not disclose children's personal information to third parties except:
- To service providers who help us operate the Platform (see Section 11) and who are contractually required to protect the data
- When required by law (e.g., court order, legal process)
- To the child's parent/guardian or authorized teacher/administrator through the Platform
We never sell, lease, or trade children's personal information.
6. Parental Rights & Controls
Parents and guardians of children under 13 have the following rights under COPPA:
6.1 Review Your Child's Information
You may request to review the personal information we have collected from your child by contacting us at admin@allexapiegroup.com. We will verify your identity before providing access.
6.2 Request Deletion
You may request that we delete your child's personal information. Upon receiving a verified request, we will delete the information within 30 days, unless retention is required by law.
6.3 Refuse Further Collection
You may refuse to allow further collection or use of your child's personal information at any time. If you do so, we will deactivate the child's account. Note that this may prevent the child from continuing to use the Platform.
6.4 How to Exercise Your Rights
To exercise any of these rights, contact us at:
- Email: admin@allexapiegroup.com
- Subject line: "Parental Rights Request โ [Your Name]"
We will respond to all verified requests within 30 days.
7. Information Sharing & Disclosure
7.1 We Do Not Sell Data
We do not sell, rent, lease, or trade personal information to anyone โ ever. This applies to data from all users, including children.
7.2 We Do Not Advertise
There are no third-party advertisements on A2 Compass. We do not share data with ad networks, data brokers, or marketing companies.
7.3 Limited Sharing
We share personal information only in these circumstances:
- Service providers: Third-party services that help us operate the Platform (see Section 11). These providers are contractually obligated to use data only for the services they provide to us and to maintain appropriate security.
- Within the Platform: Teachers/administrators can view the progress of students in their classes. Parents can view their child's data.
- Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
- Safety: We may disclose information if we believe in good faith that it is necessary to protect the safety of a child, user, or the public.
8. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect personal information, including:
- Encryption in transit: All data is transmitted over HTTPS/TLS.
- Encryption at rest: Sensitive data is encrypted in our database.
- Authentication security: User passwords are hashed and salted via Supabase Auth. We never store passwords in plain text.
- Access controls: Only authorized personnel and systems can access personal data. Role-based access ensures teachers see only their students' data and parents see only their children's data.
- Regular monitoring: We monitor our systems for unauthorized access and suspicious activity.
No system is 100% secure. If we discover a data breach that affects your personal information, we will notify affected users and relevant authorities as required by law.
9. Data Retention & Deletion
| Data Type | Retention Period |
|---|---|
| Active student learning data | Retained while the account is active |
| Inactive accounts | Data is retained for up to 12 months after the last login, then flagged for deletion |
| Deleted accounts | Personal data is deleted within 30 days of a deletion request. Anonymized, aggregated data may be retained for analytics. |
| Payment records | Retained as required by tax and financial regulations (typically 7 years for transaction records). Card details are held only by Stripe. |
| Support communications | Retained for up to 24 months after resolution |
To request deletion: Email admin@allexapiegroup.com with the subject line "Data Deletion Request."
10. FERPA Compliance
For students enrolled through a school or educational program, A2 Compass may function as a "school official" under the Family Educational Rights and Privacy Act (FERPA).
10.1 Education Records
Learning progress, assessment scores, and other academic data maintained in A2 Compass may constitute "education records" under FERPA.
10.2 School Agreements
When Achievement Academy contracts with a school, we enter into agreements that:
- Limit our use of education records to the educational purposes for which we were engaged
- Prohibit re-disclosure of personally identifiable information from education records except as authorized
- Require us to return or destroy education records when no longer needed
10.3 Directory Information
We do not treat student names, grade levels, or other basic enrollment information as publicly available "directory information." All student data is treated as confidential.
10.4 Parental and Eligible Student Rights
Under FERPA, parents (or eligible students age 18+) have the right to:
- Inspect and review education records
- Request corrections to inaccurate records
- Consent to disclosures of personally identifiable information
These rights can be exercised by contacting Achievement Academy at admin@allexapiegroup.com.
11. Third-Party Services
A2 Compass uses the following third-party services to operate the Platform. These providers process data on our behalf and are bound by their own privacy policies and our contractual requirements:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase (supabase.com) | Authentication, database hosting | Account credentials, user data |
| Stripe (stripe.com) | Payment processing | Parent/guardian billing information |
| Vercel (vercel.com) | Website hosting and delivery | Usage/traffic data, IP addresses |
We evaluate all third-party services for their privacy and security practices before integration. None of these providers are authorized to use personal data for their own purposes beyond providing their services to us.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes:
- We will update the "Last Updated" date at the top of this page.
- We will notify registered users via email.
- For changes affecting children's data collection, we will obtain new parental consent where required by COPPA.
We encourage you to review this policy periodically.
13. Contact Us
If you have any questions about this Privacy Policy, your data, or your child's data, please contact us:
Achievement Academy โ A2 Compass
- Email: admin@allexapiegroup.com
- Website: https://a2compass.org
- Attention: Sandra Brooks, Privacy Inquiries
We aim to respond to all inquiries within 5 business days.
This Privacy Policy applies to A2 Compass at https://aaacademy.app and related services operated by Achievement Academy.