InternationalSchoolK12

1. Who we are

InternationalSchoolK12 ("the School", "we") runs this online school. A technology provider operates the platform for the School and handles information only on the School's instructions. This notice explains what information we collect about parents and children, why, who we share it with, how long we keep it, and the choices parents have. It is also our notice to parents under the U.S. Children's Online Privacy Protection Act (COPPA).

Questions or requests: privacy@isk12.com.

2. Information we collect

From parents: your name, email address and password (stored only as a secure hash by our sign-in provider), your region (for example "North America"; never your precise location), the consents you give, and your billing status. Card details and your billing address go directly to our payment provider, which uses the address to work out any tax due; we never see or store card details.

About your child, from you: first name, birth year (not the full date of birth), school grade, and the username and password you set for your child's sign-in. Children do not need an email address.

From your child's school work: courses and lessons taken, answers to practice and tests, marks and feedback, progress, appeals, and course completions, grades and credits; and how many minutes a day your child spends on lesson pages, which decides whether a grade year can still be refunded (no more than 5 hours of study in the first 14 days); and quick-check results (whether each practice question was answered right and when it comes back), which never count toward marks; your end-of-grade review of your child's results and any note you send with it; when access to each paid grade ends and any extensions you pay for; and whether you want progress emails weekly, monthly or not at all.

Home-learning grade terms (only if you accept enrolment terms v4): the start of each grade term and its 12- and 18-month dates, coursework completion and average score, the letter result, how the term ended (early, regular or late promotion), any extension, and your choices (approving early promotion, or accepting a result and moving on).

Lesson-correction requests: the lesson, the reason you give, the AI reviewer's recommendation and its citations, and the decision and explanation of the person who decided it.

Lesson chat: when your child asks the lesson helper a question, the question is sent to our AI provider to write an answer. The conversation is kept only in your child's browser for one hour; the School does not store it. If a message suggests your child may be unsafe, we record a short, neutral note for the School's safeguarding lead. If a Health-lesson answer is held back by our checks, we record that it was held back, not the question.

What we do not collect: precise location, photos, voice or video of your child, contacts, advertising identifiers or browsing on other sites. There are no ads, no third-party trackers or analytics, and no private messaging between users.

Project work: predictions, observations, explanations, revisions and optional photos, screenshots, short videos, PDFs or text/CSV files submitted privately for assessment. Keep faces, names, addresses, contact details and device notifications out of these files. We store private attachments in Supabase; authorised staff and your linked family can access them. Pilot invitations, starting grade and acceptance/access dates are also recorded. Deleted pilot seats retain only an anonymous count so the ten-place limit cannot be reset by deleting accounts.

3. How we use it

To teach and mark your child's work, show progress to you and to School staff, send you a weekly progress email (you can turn it off), keep children safe, run billing, keep the service secure, and fix faults. We do not sell personal information, use it for advertising, or build profiles of children for any purpose other than their school work.

4. AI in the School

Lessons are written in advance and checked before children see them. The School is taught and marked with AI, so enrolling a child includes your consent for our AI provider (Anthropic) to mark practice work and answer lesson-chat questions; if you withdraw it, new work is no longer marked and the course cannot continue, while every record already made stays yours. Which provider serves your child depends on the grade. Children in Grades 1 to 7 are taught, marked and answered by Anthropic only. Children in Grades 8 to 12 are taught, marked and answered by a second provider, OpenAI, under a second, separate consent (ticked by default when you enrol); without that consent AI marking and the lesson chat are not available in those grades, and you can withdraw it on its own at any time. A child in Grade 8 or above who may still be under 13 stays with Anthropic until OpenAI has approved zero data retention for the School. The School does not switch a child between the two providers within a task. For a child who may be under 13, U.S. law also asks us to verify that the consenting adult is the parent: your card payment for the child's grade term is that verification (recorded once), or School staff can record another method with you. We send the AI only what the task needs: never your child's name, email, exact age, address or contact details, and we keep no copy of the request with the provider. Each provider's commercial terms do not allow it to train its models on what we send. A person can review every AI mark, and final assessments are always decided by a person. Under enrolment terms v3 and earlier, course completions and grade changes are decided by a person; under terms v4, results and grade changes are calculated by fixed rules from released marks, never by AI, and you can ask for a review. A first appeal is reviewed by AI; you can then ask for a person to review it. To check our reviewers' work, AI (OpenAI) also re-marks a random sample of work a reviewer has checked; it sees the answers and marks, never names. Lessons, pictures and the School's other materials are drafted and checked with OpenAI before people review them; no child's data is involved. The provider used for each task is recorded so we can account for it. You can withdraw AI consent at any time; your child's work is then not sent to AI, including for these checks.

Project media processing needs separate, optional parental permission as well as Anthropic consent. Only then do we send metadata-free image previews, selected silent video frames and bounded text/CSV excerpts to Anthropic for preliminary feedback. PDFs stay for human review. Frames cannot establish a complete experiment or its audio. A person checks all project marks before release; revisions and the existing appeal process remain available. Without media-AI permission, attachments are reviewed by a person. Submitted code is never executed. Do not include identifying details in the text or visible content of an attachment; removing file metadata cannot remove names or faces visible inside a picture.

When you send a lesson-correction request, your reason and the lesson are sent to Anthropic to produce a recommendation with citations. Please do not put your child's name or other personal details in your reason. A person decides every request the AI recommends and any request you ask a person to look at.

Mail you send the School. Messages to the School's addresses (support, privacy, safeguarding, security, billing, info, admin) are summarised a few times a day by AI (OpenAI) for the School's owner, so nothing urgent waits. The AI sees the subject and an excerpt of the text with email addresses and phone numbers removed, never the sender's name or address, and is told to name no person; the summary goes to the owner's mailbox. Marketing and spam may be moved to the mailbox's trash by that process; messages from people are never deleted by it.

Your child's work. Work your child makes on the platform belongs to the School under the family agreement (sections 1.4 to 1.6), as a condition of enrolment. It remains personal information: you can see, export, correct and delete it as described in section 6, and the School never publishes it to promote itself without your written permission and never uses it to train an AI model.

5. Who we share it with

Only service providers that run the School for us, under contracts that limit their use to that purpose:

Supabase — database, sign-in and file storage (United States)
Google Cloud — hosting for the website and background jobs (United States)
Anthropic — AI marking and lesson chat, with your consent
Stripe — payments and tax calculation (parents only)
Resend — emails to parents and staff
Sentry — error reports, with names, emails and other personal details removed before sending

Qualified reviewers. Marks, appeals and lessons are checked by independent contractors who hold a teaching licence or a bachelor's or higher degree; for Grades 7–12 it is in the subject they review. They work from the United States, Bangladesh or Pakistan, on our platform only. They see your child's answers, marks and appeals, but the review pages do not show your child's name or your contact details. A written agreement requires them to keep this confidential, never to copy it or put it into other AI tools, and never to contact families.

We may also disclose information when the law requires it or to protect a child's safety. We do not share children's information with anyone else, and we will ask for your separate consent before we ever would.

6. Your choices and rights as a parent

From the Privacy page of your family account you can:

Review everything we hold about you and your children by downloading it.
Delete a child's account and records, or your whole family account. Deletion starts after a 7-day period in which you can cancel; we then email you to confirm it is done.
Stop further collection by withdrawing AI consent or deleting the account.

You can also ask us at privacy@isk12.com. You may have further rights under the law where you live; we will honour them.

7. How long we keep information

We keep information while your family account is open. When you delete a child or your family account, we remove it from our live systems as soon as the 7-day cancellation period ends. Backups are overwritten on a rolling schedule, and deleted information is gone from them within 30 days. Two things are kept: our security log keeps internal reference numbers only (never names or contact details), and our payment provider keeps payment records for as long as tax law requires.

Home-learning grade-term records and lesson-correction requests are kept with your child's record and deleted with it.

Unused draft project uploads are removed after one day by the worker. Submitted evidence stays with the learning record and is included in family export as an authenticated download manifest. Account deletion removes the stored file bytes before deleting their database records. Project portfolios are private: participation in a free pilot does not require publicity, testimonials or permission to publish a child's work.

8. Security

Information is encrypted in transit and at rest. Each school's and each family's records are separated in the database, staff must use two-step verification, staff see only what their role needs, and important actions are recorded in a log that cannot be changed.

9. Changes to this notice

We will email parents before any change that affects children's information takes effect, and ask for your consent again where the law requires it.