The short version
- Anyone under 18 needs a parent or guardian to click a consent link before the tutor is unlocked.
- Parents can see whether their child showed up (Brain score, days active, sessions closed). Never what they wrote.
- We don’t use minors’ data for advertising, profiling, or model training.
- You can revoke consent or delete the account any time.
How the consent flow works
- During sign-up, a student under 18 provides a parent’s email address.
- Brainback emails the parent a one-time consent link (30-day expiry, renewable).
- The parent clicks; we record the consent with IP and timestamp.
- The student’s account is unlocked for tutor use.
- Consent records persist for the life of the account plus 1 year (retention required by regulators).
Consent may be revoked at any time by emailing brainback@stratosync.solutions from the same address that granted it. Revocation suspends the child’s account within one business day.
What educators + parents can and cannot see
Content-blind by design, enforced in the database:
| Signal | Educator sees | Parent sees |
|---|---|---|
| Days active this month | ✓ (per group) | ✓ (per child) |
| Session counts | ✓ | ✓ |
| Brain score | ✓ | ✓ |
| Concept mastery + weak concepts | ✓ | ✓ |
| Which specific problems attempted | Assignment-tracking only | ✗ |
| Contents of student’s attempt | ✗ | ✗ |
| Tutor’s replies | ✗ | ✗ |
| Explain-back text | ✗ | ✗ |
| Recall answers | ✗ | ✗ |
| Uploaded images | ✗ | ✗ |
Data we intentionally don’t collect from minors
- Precise location.
- Persistent device identifiers beyond authentication needs.
- Advertising IDs.
- Contact lists, calendar, camera, or microphone (Permissions-Policy explicitly disables these).
- Biometric data.
- Health data.
What we do collect + why
- Email + display name — to sign in and personalize.
- Date of birth — to determine whether COPPA/GDPR-K consent is required.
- Parent’s email — to send the consent link.
- Attempts, tutor replies, recall answers — to power the learning experience (visible to the student only).
- Aggregate metrics (Brain score, concept mastery) — to power dashboards.
Model training
Brainback does not train AI models on any user’s content. Prompts sent to our AI provider (Anthropic) are processed under zero-retention API terms.
Retention + deletion
- You can export all your data any time from Settings.
- You can delete your account any time from Settings. Deletion is permanent within 30 days.
- We retain the parental consent record for 1 year after account deletion as legal proof of authorization; nothing else.
Questions?
Email brainback@stratosync.solutions — a real person will respond within one business day. If you’re a parent or guardian and can’t reach someone about your child’s account, mark the email “PARENT — URGENT.”