Trust

Privacy Policy

Last updated 6 August 2026

Who we are

Kigrove Beta is a homeschool planning tool operated by Kigrove. You can reach a human at support@kigrove.com.

What we collect

Information you give us

• Your account. Your name, your email address, and a password that is stored only as a salted hash — we never see or store the password itself.
• Your homeschool. The name you give your family or school, your state, time zone, school year, and preferences such as which day your week starts on.
• Your learners.For each child, whatever you choose to enter — typically a first name and a grade level. We do not ask for a child’s last name, birthdate, address, photo, or any government identifier, and you should not enter one.
• Your lessons and records. Lesson titles, subjects, dates, times, learning goals, notes, materials, learning goals you write, and the standards you link lessons to.
• Resources and evidence of learning. Links you save, and files you upload — worksheets, photographs of work, scans, PDFs, audio and video — together with any observation you write about them.

Information we collect automatically

• Sign-in sessions. A cookie that keeps you signed in, and basic session records so you can be signed out safely.
• Server logs.Our hosting provider records ordinary request information — timestamps, paths, error codes. We do not write your lesson content, your children’s names, your file names or your file contents into application logs.

What we do not collect

We do not run advertising or third-party analytics trackers. We do not collect location data. We never receive your full card number: payments are handled entirely by Stripe, and what comes back to us is a customer reference, a subscription status and a renewal date.

Children’s information

Kigrove Beta is a tool for parents and guardians. Children do not have accounts, cannot sign in, and are never asked for information directly. Everything recorded about a child is entered by the adult who is responsible for them, and is visible only to the adults in that family.

Because we are not directed to children and collect nothing from them directly, we ask that you keep it that way: record what you need for your own records and no more. If you believe a child’s information has been entered by someone without the right to do so, write to us and we will remove it.

How your records are kept separate

Every record in the system belongs to exactly one family, and every read and write is scoped to the family of the person making the request. A family identifier is never accepted from a URL, a form, or a request body — it is always derived from your signed-in session on the server. This is enforced in the data layer rather than in individual screens, so a mistake in one screen cannot expose another family’s records.

Uploaded files are stored privately. They are never served from a public or guessable address; every download goes through an endpoint that re-checks, on that request, that you are signed in to the family the file belongs to.

Who we share it with

We do not sell personal information, and we do not share it for advertising. We use a small number of service providers to run the product, and they only receive what they need to do their job:

• Vercel — hosting the application and storing uploaded files.
• Neon — the database that holds your records.
• Stripe — subscription payments. Stripe receives your email address and payment details directly; we do not.
• Resend — sending account emails such as verification and password resets. Resend receives your email address.

We may also disclose information if we are legally required to, or to protect someone’s safety. If we are ever compelled to hand over a family’s records, we will tell that family unless we are prohibited from doing so.

Where your data is held

Our providers store data in the United States. If you use Kigrove Beta from outside the United States, your information will be transferred to and stored there.

How long we keep it

For as long as your family account exists. Cancelling a subscription does not delete anything: your records stay, and you keep read access to them so you can still consult and export a school year you have already finished. See Refunds & cancellation.

If you want your family’s account and all of its records permanently deleted, write to support@kigrove.com from the email address on the account. We will confirm it is really you, tell you what will be destroyed, and complete the deletion within 30 days. Deletion is permanent and cannot be undone. During the beta this is a manual process handled by a person, not a button in the app — we would rather be slow and certain than fast and wrong about destroying a year of a family’s records.

Some records survive deletion because we are required to keep them: Stripe retains payment and invoice records for tax and anti-fraud purposes under its own retention rules, and our providers’ backups may hold a copy for a short period before they expire.

Your choices

• See your data. It is all visible to you in the app while you are signed in.
• Correct it. Anything you entered, you can edit.
• Take it with you. You can export your calendar as a standard .ics file and download any file you have uploaded, at any time, including after cancelling. A full one-click account export is not built yet; if you want a complete copy, ask us and we will produce one.
• Delete it. Individual lessons, learners, resources and evidence can be deleted in the app. For the whole account, see above.

Depending on where you live you may have further rights over your personal information. Write to us and we will honour them.

Security, honestly stated

Connections use HTTPS. Passwords are hashed. Records are separated by family at the data layer. Uploaded files are private and access-checked on every request. Our database and file-storage providers encrypt data at rest.

We hold no security certification, and we are a small product in beta. No system is perfectly secure. If you find a vulnerability, please tell us at support@kigrove.com before disclosing it publicly — we will respond, and we will not threaten you for reporting it.

Changes to this policy

If we change it in a way that materially affects you, we will email the address on your account before the change takes effect. The date at the top of this page always reflects the last real change.