PRIVACY
A private study space, controlled by a parent.
Effective July 29, 2026
This Privacy Notice explains what PrepDrop collects, why it is used, who processes it, and the choices available to parents.
The short version
A parent owns the family account. Children use parent-created Kid spaces and do not provide email addresses. PrepDrop does not sell personal information, serve behavioral advertising, create public child profiles, or permit child-to-child contact.
Information we collect
- Parent account: email address, authentication records, account status, consent records, and support requests.
- Kid space: nickname or display name, protected sign-in credential, optional grade band, avatar, theme, and accessibility preferences.
- Study content: files, photos, pasted text, extracted text, proposed and confirmed study items, optional generated lessons, and saved highlights.
- Learning activity: selected method, answers, attempts, missed concepts, Run It Back rounds, readiness information, and earned Study Charms.
- Service information: device and request information, security events, processing status, errors, and limited product events needed to operate and protect PrepDrop. Study content and typed answers are not used as analytics properties.
Information we do not ask children for
PrepDrop does not ask a child for an email address, full legal name, school, precise location, social profile, contacts, advertising identifier, or exact birth date. Families should remove unnecessary sensitive information from school material before uploading it.
How information is used
We use information to authenticate parents, provide child access, create and save Study Drops, extract uploaded material, generate proposed study items and optional lessons, save progress, show Parent view, provide support, prevent abuse, maintain security, and comply with applicable legal obligations.
Service providers
PrepDrop uses Vercel for application hosting and secure model routing, Supabase for authentication and private family data, OpenAI to process the minimum study content needed for requested generation, Resend for messages submitted through the contact form, and Stripe to process payments when a parent chooses a paid plan. These providers process information to deliver their contracted service. PrepDrop does not authorize them to use child information for advertising.
Parent control
Parents can manage Kid spaces, reset child access, pause access, and review saved study activity. Requests to access, correct, export, or delete family data can be made through the contact form. We verify the requesting adult before fulfilling a sensitive request.
Retention and deletion
Account and study information is retained while the family account is active and as needed to provide requested features. When a verified parent requests deletion, active account records and associated Study Drops are removed from production systems, subject to short operational recovery periods and information we must retain for security or legal reasons. Encrypted backups may persist for up to 90 days before routine expiration.
Security
PrepDrop uses managed authentication, hashed child credentials, expiring child sessions, server-side authorization, database row-level security, private source storage, encrypted network connections, and restricted administrative access. No online service can promise absolute security. Suspected unauthorized access should be reported through the contact form promptly.
Children and parent authorization
PrepDrop is designed for family use. A parent or legal guardian creates the account and Kid spaces, controls access, and receives privacy notices. PrepDrop does not knowingly permit a child to create an independent parent account.
Changes and contact
Material changes are dated here and may also be shown to the parent account owner. Privacy questions and requests go through the private contact form.