Privacy Policy

1. Who We Are

Sir Isaac Newton Education Center ("SINE," "we," "us," or "our") is a private education center serving students in Trinity and Land O' Lakes, Florida. This Privacy Policy explains how we collect, use, protect, and share information when you use any SINE platform or program, including SINE Math (K–8 curriculum), SINE High School Math, the MATH 2060 supplemental program, and any future SINE programs (collectively, the "Service").

We are committed to protecting the privacy of children. We designed this policy to be direct, readable, and honest — not to bury important information in legal language.

2. Information We Collect

Account information (parents): When a parent enrolls, we collect the parent or guardian's full name, email address, phone number, mailing address, and payment information. Payment card data is processed directly by our payment processor — we store only a payment reference token, never your full card number, expiry, or CVC.

Student profile information: We collect the student's first name, last name, date of birth (for COPPA age verification), a parent-chosen username, and home address (street, city, state, and ZIP code) for billing and Florida scholarship documentation purposes. We do not collect student email addresses, phone numbers, photographs, social security numbers, or social media identifiers.

Learning activity data: As students use the platform we record drill session results, including questions answered, score, time spent per question, and advancement history. This data powers the progress reports visible to parents and is used to place students at the correct curriculum level.

Parental consent records: We retain your electronic signature, the full name you typed, consent timestamp, IP address at time of signing, and the version of the agreement you signed, as required by COPPA and the federal E-SIGN Act.

Security and access logs: We collect and store the following for security and fraud prevention purposes:

• IP address and approximate geographic region for every site visit
• Browser type, device type, and operating system
• Pages visited, HTTP method, and response status code
• Login attempt history — including timestamp, identifier used, and outcome (success or failure reason) — without storing passwords or password hashes
• Account lockout events and security alerts

This security data is used exclusively for detecting unauthorized access, preventing brute-force attacks, and investigating potential security incidents. It is never used for marketing, profiling, or advertising.

3. How We Use Information

• Deliver the curriculum. Student profiles and learning data are used to present the correct lesson, track progress, and calculate scores.
• Parent reporting. Scores, advancement, and drill history are displayed in the parent portal so parents can monitor their child's progress.
• Security. Login attempt data, IP addresses, and access logs are used to detect and prevent unauthorized access, brute-force attacks, and fraudulent activity.
• Account and billing management. Parent contact information and billing references are used to process payments, send enrollment confirmations, and communicate about subscription status.
• Legal compliance. We retain records as required by COPPA, Florida state law, and our obligations as a financial services account holder.
• Platform improvement. We may analyze aggregated, de-identified data (e.g., "students at Level D show difficulty with week 130") to improve curriculum content. Individual student records are never used for this purpose without anonymization.

We do not use student data to build behavioral profiles, target advertising, sell to third parties, or train artificial intelligence or machine learning systems.

4. Who We Share Information With

We do not sell, rent, or trade personal information. We share data only with the essential service providers that power the platform, each of which is contractually bound to protect your data and prohibited from using it for independent purposes:

We may disclose information if required by a valid legal process, court order, or government request. To the extent permitted by law, we will notify affected families before complying with any such request.

If Sir Isaac Newton Education Center is acquired, merged, or substantially all of its assets are transferred, user data may be transferred as part of that transaction. We will notify enrolled families by email at least 30 days before any such transfer and provide an opportunity to request deletion of their data before the transfer occurs.

5. Cookies and Technical Identifiers

We use a minimal set of cookies required to operate the platform. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

Because we use only essential security cookies and no tracking or advertising cookies, we do not present a cookie consent banner. These cookies are strictly necessary for the secure operation of the Service.

Our login bot-prevention service (see Section 4) may set its own cookies in the user's browser when a security challenge is presented. This occurs only after repeated failed login attempts and is governed by that provider's privacy policy.

6. Children Under 13 — COPPA Compliance

Verifiable parental consent: Before a student account is activated, a parent or legal guardian must complete our enrollment form, provide valid payment authorization (an FTC-recognized method of verifiable parental consent), and electronically sign our Parental Consent Agreement. We record the parent's name, email address, IP address, timestamp, and the version of the agreement signed. No student account is created or accessible until this consent is confirmed.

Third-party sharing limited to operational service providers only: Student data is never sold, shared with advertising networks, or used to build profiles for non-educational purposes. The service providers who store or process student data on our behalf (Google LLC and Railway Corp, as disclosed in Section 4 and the operator table above) are bound by data processing agreements that explicitly prohibit any secondary use of that data.

No behavioral advertising to children. We do not display advertising of any kind to students. Student data is never used to target or profile students for advertising purposes.

Third-party operators with access to children's personal information: As required by COPPA, we disclose that the following third-party service providers may receive or process personal information about children under 13 in the course of operating this platform. Each is bound by contract to use that data solely to provide services to Sir Isaac Newton Education Center and not for any independent purpose.

Stripe, Twilio SendGrid, and hCaptcha do not receive student personal information — they process parent billing data, parent email addresses, and anonymous IP signals only. See Section 4 for full details on all service providers.

Direct Notice: This Privacy Policy constitutes our COPPA Direct Notice. If you are a parent who did not receive or review this notice at enrollment and have questions about your child's data, please contact us at privacy@sirisaacnewtoneducationcenter.com.

7. Parental Rights & Controls

As the parent or legal guardian of an enrolled student, you have the following rights regarding your child's data:

We will verify your identity before honoring any data request. We will not discriminate against, penalize, or charge any parent who exercises these rights.

8. Data Retention

• Active accounts: Student and parent account data is retained for the duration of active enrollment.
• After cancellation: Student learning data and profiles are retained for 90 days after enrollment ends to allow for re-enrollment or data export. After 90 days they are permanently deleted.
• Parental consent records: Retained for 3 years after the consent agreement expires, as required by applicable law.
• Signed enrollment agreements: Signed tutoring and enrollment agreements are retained for up to 7 years after enrollment ends, for legal dispute resolution and financial record-keeping. These agreements contain parent and student names but no academic performance data.
• Billing records: Parent billing information and transaction records are retained for 7 years as required by IRS and Florida financial record-keeping regulations. These records contain only parent information, not student data.
• Security and access logs: Login attempt records and site access logs are retained for 90 days, then automatically deleted.
• Backup systems: Deleted data is removed from all backup systems within 60 days of the primary deletion.

9. Security

We implement reasonable and appropriate administrative, technical, and physical safeguards to protect personal information:

• Encryption in transit: All communication between your browser and our servers uses TLS 1.2 or higher (HTTPS). HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: All data is stored with a third-party cloud provider and encrypted at rest using AES-256 or equivalent industry-standard encryption.
• Access controls: Only authorized SINE staff may access student records. Admin access requires strong password authentication. All admin access is logged.
• Authentication security: Passwords are hashed using industry-standard algorithms. We never store plain-text passwords. Failed login attempts trigger rate limiting and, after repeated failures, human-verification challenges.
• Security response headers: All pages are served with security headers including Strict-Transport-Security (HSTS), Content-Security-Policy, X-Frame-Options, and others to protect against common web attacks.

Despite these measures, no internet-based system is guaranteed to be 100% secure. In the event of a data breach affecting student personal information, we will notify affected parents promptly and within the timeframes required by applicable law, including Florida's Information Protection Act (Fla. Stat. § 501.171).

10. State Privacy Rights

Florida residents: Florida's Information Protection Act (Fla. Stat. § 501.171) requires us to implement reasonable security measures and to notify you in the event of a breach of your personal information. We comply fully with these requirements. Florida residents may exercise the rights described in Section 7 at any time.

Florida Student Data Privacy Act (Fla. Stat. § 1002.222): To the extent applicable, Sir Isaac Newton Education Center commits to the following: we do not sell student data; we do not use student data for targeted advertising; we do not build student profiles for non-educational purposes; we implement and maintain reasonable security procedures; and we delete student data at the direction of a parent or upon contract termination.

California residents — CCPA / CPRA: California residents have the right to know what personal information is collected, the right to delete, the right to opt out of sale (we do not sell data), and the right to non-discrimination. To submit a California privacy request, contact privacy@sirisaacnewtoneducationcenter.com.

All residents — AI training prohibition: We do not use student data, parent data, platform content, curriculum materials, or any output generated by our platform to train, fine-tune, benchmark, or develop any artificial intelligence or machine learning model. This prohibition applies to SINE and to all of our service providers under their data processing agreements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated policy at this URL with a new "Last Updated" date
• Send an email notification to all enrolled parents at least 14 days before changes take effect
• For any changes that affect how we handle children's data under COPPA, obtain fresh parental consent before continuing to collect or use data under the new terms

Your continued use of the Service after the effective date constitutes acceptance of the revised policy. If you do not agree to material changes, you may cancel your enrollment and request deletion of your data.

12. Contact Us

For any privacy questions, data requests, COPPA concerns, or to report a potential security issue, please contact us: