Anyone under 18 needs a parent or guardian to click a consent link before the tutor will answer them at all. Revoking that consent, or deleting the account, takes one email and happens within a business day.
Parents and educators can see whether a student showed up — days active, sessions closed, Brain score, which concepts are shaky. They cannot see what the student wrote, what the tutor replied, their recall answers, their explain-back text, or anything they uploaded. That is enforced in the database, not in the interface.
Minors’ data is never used for advertising, profiling or model training. The full table of who sees what is below.
a summary, not the agreement — the clauses below are what binds
How the consent flow works
- During sign-up, a student under 18 provides a parent’s email address.
- Brainback emails the parent a one-time consent link (30-day expiry, renewable).
- The parent clicks; we record the consent with IP and timestamp.
- The student’s account is unlocked for tutor use.
- Consent records persist for the life of the account plus 1 year (retention required by regulators).
Consent may be revoked at any time by emailing brainback@stratosync.solutions from the same address that granted it. Revocation suspends the child’s account within one business day.
What educators + parents can and cannot see
Content-blind by design, enforced in the database:
| Signal | Educator sees | Parent sees |
|---|---|---|
| Days active this month | ✓ (per group) | ✓ (per child) |
| Session counts | ✓ | ✓ |
| Brain score | ✓ | ✓ |
| Concept mastery + weak concepts | ✓ | ✓ |
| Which specific problems attempted | Assignment-tracking only | ✗ |
| Contents of student’s attempt | ✗ | ✗ |
| Tutor’s replies | ✗ | ✗ |
| Explain-back text | ✗ | ✗ |
| Recall answers | ✗ | ✗ |
| Uploaded images | ✗ | ✗ |
Data we intentionally don’t collect from minors
- Precise location.
- Persistent device identifiers beyond authentication needs.
- Advertising IDs.
- Contact lists, calendar, camera, or microphone (Permissions-Policy explicitly disables these).
- Biometric data.
- Health data.
What we do collect + why
- Email + display name — to sign in and personalize.
- Date of birth — to determine whether COPPA/GDPR-K consent is required.
- Parent’s email — to send the consent link.
- Attempts, tutor replies, recall answers — to power the learning experience (visible to the student only).
- Aggregate metrics (Brain score, concept mastery) — to power dashboards.
Model training
Brainback does not train AI models on any user’s content, and neither does our AI provider: Anthropic does not train on data submitted through its API. We do not hold a zero-retention agreement with them, so prompts and completions may be retained by Anthropic for a limited period for trust-and-safety purposes under their standard commercial terms.
Retention + deletion
- You can export all your data any time from Settings.
- You can delete your account any time from Settings. Deletion is permanent within 30 days.
- We retain the parental consent record for 1 year after account deletion as legal proof of authorization; nothing else.
Questions?
Email brainback@stratosync.solutions — a real person will respond within one business day. If you’re a parent or guardian and can’t reach someone about your child’s account, mark the email “PARENT — URGENT.”