Overview

This Privacy Policy explains how BAMS Academy collects, uses, and protects information when you use the Learning Hub practice platform at academy.bamstech.com (the "Service"). It applies only to the Service. It is separate from, and does not incorporate, the privacy policy published at bamstech.com, which covers BAMS Technology Group's other websites and products.

A Note for Parents (COPPA)

The Service is used by children, so the Children's Online Privacy Protection Act (COPPA) applies to us. A child cannot create their own account on BAMS Academy. Only a parent or legal guardian can create one, and before they do we show them a notice describing exactly what we collect and why, and ask them to agree to it. We record that agreement — what was shown, when, and how we confirmed it was really the parent — and we keep that record.

After an account is created we email the parent to confirm it was genuinely them. If it was not, replying to that email has us delete the account and everything in it.

The AI tutor is switched off by default for a child under 13. It works by sending what the child types to our AI provider, and sharing a child's words with another company needs its own, separate permission from the parent — it is never bundled into agreeing to the account. The rest of BAMS Academy works normally whether it is on or off.

A parent can, at any time, from Privacy & Consent in their dashboard: see every category of information we hold about their child and who it goes to; download a copy of it; correct it; turn the AI tutor off; or withdraw consent altogether. To have the account and its data permanently deleted, email support@academy.bamstech.com and we complete it within 30 days.

We never condition a child's participation on disclosing more information than is reasonably necessary, we do not use children's data for advertising, and we do not allow our providers to use it to train AI models.

Your California Privacy Rights (CPRA)

This section is our notice at collection for California residents, and it applies to everyone else too — we did not want two standards.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by the California Consumer Privacy Act as amended by the CPRA. We never have. Because we do not, there is no "Do Not Sell or Share My Personal Information" opt-out to complete — there is nothing to opt out of. You may still ask us to confirm this in writing and we will.

Sensitive personal information. We use it only to provide the service you asked for and to keep accounts secure. We do not use it to infer characteristics about anyone, so the right to limit its use does not restrict anything we do.

Your rights. You can ask us to tell you what we collect and who receives it, give you a copy, correct it, or delete it. Parents exercise these rights on behalf of their children. We verify that a request really comes from you before acting on it, and we will never discriminate against you for exercising any of these rights — your price and your features stay exactly the same.

How to make a request: use Privacy & Consent in your dashboard, or email support@academy.bamstech.com. We respond within 45 days.

Who receives personal information, and why. These companies process it strictly on our instructions, under contract, as service providers:

Amazon Web Services — hosting, storage, and email delivery.
Anthropic — powers the AI tutor, and only when it is switched on. Receives the question and what the student types. Contractually barred from training models on it.
Stripe — processes parent subscription payments. Never receives a child's information.

Information We Collect

We collect the following categories of information:

Account information: name, email address, password (stored securely, hashed), role (student or parent), and grade level for student accounts.
Practice activity: questions answered, selected answers, correctness, time spent, subject/topic progress, streaks, and other learning-progress data generated as a student uses the Service.
Parent-child links: the email address a parent uses to link to a student account, and invitation status.
Billing information: subscription plan and status. Payment card details are collected and processed directly by our payment processor (Stripe) — we do not store full card numbers on our servers.
AI tutor interactions: questions asked to and responses from the AI tutor, used to provide the tutoring feature and to monitor for misuse.
Technical information: device type, browser, and usage logs, used for security and to keep the Service running reliably.

How We Use Information

We use the information above to: provide and operate the Service (accounts, practice sessions, progress tracking); show a linked parent their child's read-only progress; process subscription payments and manage billing; personalize practice recommendations and the AI tutor; maintain the security of accounts and the Service; and communicate with you about your account, trial, or subscription. We do not sell student personal information, and we do not use it to serve targeted third-party advertising.

Who We Share Information With

We share information only as needed to run the Service: with our payment processor (Stripe) to process subscriptions; with infrastructure and hosting providers who store and process data on our behalf under confidentiality obligations; with a linked parent account (limited to their own child's progress data); and when required by law or to protect the rights, safety, or property of BAMS Academy, our users, or others. We do not share student data with advertisers or data brokers.

Data Retention

We retain account and practice-activity data for as long as the account remains active, and for a reasonable period afterward to allow reactivation and to meet legal, billing, and record-keeping obligations. You (or, for a minor, their parent/guardian) may request deletion of an account and its associated data at any time, subject to any records we are legally required to retain.

Security

We use industry-standard safeguards, including encryption in transit, hashed passwords, and access controls, to protect information on the Service. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Cookies

We use essential cookies to keep you signed in and to remember basic preferences. We do not use cookies on the Service for third-party advertising or cross-site tracking.

Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to certain uses of it. Parents have these rights on behalf of their linked child accounts. To exercise any of these rights, contact support@academy.bamstech.com.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we will notify account holders (and, for accounts belonging to a child under 13, their linked parent) by email or an in-app notice before the change takes effect.

Contact Us

Questions about this policy or your data? Contact us at support@academy.bamstech.com.

BAMS Academy Privacy Policy