Privacy Policy
Last updated:
LegUp is a handwriting-first learning app for children, with an AI learning buddy and a dashboard for the grown-ups around them. LegUp is made and operated by Leg Up Learning LLC (“we,” “us”). This policy explains what information LegUp collects, why, who processes it for us, how long we keep it, and how a parent or guardian can get a copy of it or delete it.
It covers the LegUp app on the web (leguplearning.com/app),
the LegUp Android app (com.leguplearning.app, in closed testing), the emails and
notifications LegUp sends, and this website.
The short version
- A parent or guardian sets LegUp up and agrees to this policy before their child’s profile is made. Children do not create accounts or give us an email address.
- We collect what the learning needs: the child’s first name, grade, and interests, the handwriting and drawings made in the app, lesson and quiz activity, chats with the buddy, and check-in moods.
- The buddy is powered by AI services from Microsoft Azure and, as a fallback, Anthropic. What the child writes and says to the buddy is sent to them to produce its replies.
- We do not show ads, and we do not sell or rent anyone’s personal information.
- We keep the child’s learning record, including chat transcripts and check-in notes, until the parent deletes the child’s account.
- A parent can download everything we hold about their child, or delete the child’s account and data, from the grown-up dashboard at any time. See Delete your account.
1. Who uses LegUp
LegUp has two kinds of users:
- Grown-ups: a parent or guardian who sets LegUp up, and the other grown-ups they choose to invite (a second parent, a grandparent, a tutor or nanny, or a teacher). Grown-ups sign in with their own email address, using a six-digit code that we email to them, or with their own Google, Apple or Facebook account. There is no LegUp password.
- Children: the learners. A child uses LegUp on a device a grown-up has signed in. A child does not have their own sign-in, email address, or password.
2. Children under 13 and parental consent
LegUp is made for children, including children under 13. In the United States, the Children’s Online Privacy Protection Act (COPPA) says that before a website or app collects personal information from a child under 13, it must tell the child’s parent what it collects and get the parent’s consent. This section explains how LegUp does that.
Who is responsible. LegUp is operated by Leg Up Learning LLC, 208 Neal Dr, Liberty Hill, TX 78642, (334) 462‑8990, privacy@leguplearning.com. Contact us with any question about a child’s information.
A parent sets LegUp up and agrees first. A child cannot sign up for LegUp and never signs in with a Google, Apple or Facebook account. A parent or guardian signs in with their own email address (or their own Google, Apple or Facebook account). Before the child’s profile is created, they confirm they are the child’s parent or legal guardian and agree to this policy, including that outside AI services read and answer the child’s work. We record who agreed and when, and send the parent a copy of what they agreed to by email. We do not collect information from a child before that.
What we collect from a child, and why. Only what the learning needs: the first name and grade the parent enters, and any interests they add; the handwriting and drawings the child makes; their answers and lesson activity; their chats with the buddy; their check-in moods; and voice conversations, which are on unless the parent turns them off. We do not ask a child for an email address, phone number, location, photo or contact details, and a child cannot share personal information with other people through LegUp. Section 3 lists everything in detail, and section 4 explains how we use it.
Who we share it with. To read and answer a child’s work, LegUp sends it to the service providers in section 7, mainly the AI services that power the buddy. They may use it only to provide LegUp’s service. Grown-ups the parent adds, such as a teacher, see what section 6 describes. We do not sell a child’s information, show ads or share it for advertising.
A parent’s choices. A parent can at any time:
- review everything LegUp keeps about their child, by downloading it from the grown-up dashboard (see section 10);
- have it deleted, from the dashboard or by emailing us;
- stop further collection, by deleting the child’s profile;
- turn individual features on or off, such as voice conversations, video requests and chat, with an optional grown-up PIN that keeps those controls, the data export and deletion in the grown-up’s hands; and
- turn off the use of their child’s learning data to improve LegUp’s teaching (on during the closed beta unless the parent turns it off, see section 5), without losing access to the rest of LegUp.
We do not require a child to share more information than an activity needs.
How long we keep it. We keep a child’s information until the parent deletes the child’s profile or the account, except backups and analytics records, which expire as section 9 describes.
If a child used LegUp without permission. If you are a parent or guardian and believe your child has used LegUp without your consent, contact us at privacy@leguplearning.com and we will delete the child’s information.
3. What we collect
Information a grown-up gives us
| Information | Details |
|---|---|
| Grown-up account | Email address, and when you signed up and last signed in. If you sign in with Google, Apple or Facebook, the email address, name and profile picture link that account shares with us, and which of those you used. The names, relationship, and email addresses of the grown-ups you add to a child’s record or invite. |
| Child profile | The child’s first name, grade, and interests. The name is the one you type; we ask only for a first name. |
| Settings | The controls you choose (for example voice, video requests, rewards, play time, the day’s focus), and an optional grown-up PIN. The PIN is stored only as a salted hash. |
| Schoolwork and rewards | Schoolwork items you add (a title, a due date, an optional reward), and rewards you offer from home. |
Information created while a child uses LegUp
| Information | Details |
|---|---|
| Handwriting and drawings | The “ink” a child writes or draws in lessons, practice, and schoolwork, kept as images, including the drawing a child makes of their buddy and the buddy’s look made from it. |
| Learning activity | Lesson steps, quiz and practice answers, whether each answer was right, hints used, time taken, skills mastered, streaks, milestones, and rewards earned. |
| Buddy chat | The text of the child’s conversations with the buddy, both sides. The buddy also keeps short “memories” of what the child has learned and enjoys, and records a safety or well-being flag when a message suggests a child may need a trusted adult. |
| Check-ins | When the child does a daily check-in: the day, the mood the child picked, and any note they added. |
| Voice | We do not store recordings of a child’s voice. When voice is on, a child can speak to the buddy in two ways: (1) with the device’s built-in speech recognition, which turns speech into text on the device or through the device or browser maker’s own speech service (for example Google in Chrome), and only the text reaches LegUp; or (2) in a live voice conversation on the web app, where the audio streams directly from the device to Microsoft Azure OpenAI Service and does not pass through LegUp’s servers. The buddy’s spoken replies are made by sending the reply text to Microsoft Azure AI Speech; that audio is streamed back and not stored (a small set of fixed phrases, such as greetings, is cached, and contains nothing about a child). |
| Photos | LegUp does not currently upload photos or use the device camera. Schoolwork comes in as items a grown-up adds and as pages the child writes in the app. |
Information collected automatically
| Information | Details |
|---|---|
| Product analytics (PostHog) | When configured, the LegUp web app and grown-up dashboard record screens viewed, taps, errors, page performance, and session replays. Replays mask all screen text and inputs, including chat, the PIN, and the sign-in code, and block handwriting and tracing canvases. Tap analytics do not collect element text. Events are tied to the signed-in grown-up’s email address and name; the child’s analytics profile uses an opaque learner identifier and age band, rather than the child’s name or grade. For AI features, request analytics record which feature and model were used, token counts, timing, and error flags. Those analytics do not contain prompts, the child’s messages, the buddy’s replies, handwriting, or expected answers. AI providers still receive the relevant inputs needed to deliver the feature, as described in section 5. |
| Error reports (Sentry) | When something breaks: the error, the screen, the app build, and an internal learner number. Sentry is configured not to collect names, email addresses, ink, chat text, or replays. |
| Session recordings and heatmaps (Microsoft Clarity) | On every screen of the LegUp web app, including the child’s, and on this website: taps, scrolling, page performance, heatmaps, and session recordings of what was on screen. Anything typed into a field is masked, and the PIN, sign-in code, password, email addresses, and phone numbers are masked wherever they appear. Recording stops while the grown-up PIN pad is open. Handwriting and drawings are not recorded. Clarity is not told who you are or who your child is. In the web app it uses its own cookies to tell one session from the next; on this website it uses none. |
| App analytics (Google Analytics) | Page views and event counts from the web app, this website, and the Android app (through Google Analytics for Firebase). Google Analytics is not told who you are or who your child is, it sees page addresses without anything after the “?”, and Google signals, advertising storage, ad user data, and ad personalization are all switched off; the advertising ID is removed from the Android app. In the web app it uses its own cookies; on this website it uses none. |
| Notifications | If a grown-up turns on notifications on their phone or tablet, we store the browser’s push subscription (an address and keys issued by the browser’s push service) under their account. |
| Device and log data | As with any website, our hosting providers receive IP addresses, browser, and device type in their request logs. On the device, LegUp keeps the child’s progress in the browser’s or app’s local storage so it works offline. |
4. How we use it
- To run LegUp: to sign grown-ups in, show the child their lessons, check their handwriting, give hints, and keep their progress in sync across devices.
- To power the buddy’s conversation, its memory of what the child has learned, and its voice.
- To keep children safe: to stop the buddy giving answers to graded work, to screen what it says, and to point a child to a trusted adult when something they say suggests they need help.
- To keep the family informed: the dashboard, the Friday letter and Sunday preview emails, a note when a planned session was missed, and invitations to other grown-ups you choose.
- To keep LegUp working and make it better: fixing errors, understanding which lessons and features help, and measuring the AI’s speed, cost, and safety.
- With a grown-up’s separate consent only: to train LegUp’s own teaching models (see section 5).
We do not use children’s information for advertising, and we do not build profiles of children for any purpose other than their learning in LegUp.
5. The AI buddy
The buddy is an AI. When a child chats, writes on a page the buddy checks, asks for a hint, or draws their buddy, the relevant text and images are sent to an AI model provider to produce a response. Today that is Microsoft Azure OpenAI Service; Anthropic’s Claude is configured as the alternative provider. Live voice conversations, where available, also use Microsoft Azure OpenAI Service (see Voice). The providers process this information on our behalf to provide the service.
The buddy does not browse the web or talk to anyone other than the child. Its replies are screened against answer keys before the child sees them.
Helping improve LegUp’s teaching (on during the closed beta)
During the closed beta, LegUp uses a child’s learning traces to train LegUp’s own teaching models unless a grown-up turns this off in the dashboard, which they can do at any time. Turning it back on needs a grown-up PIN. When on, the training data contains which questions came up, whether each answer was right, how long it took, and which hints helped, filed under a pseudonym rather than a name. It never contains the child’s name, the grown-up’s name or email, handwriting or drawings, or chats with the buddy. Turning it off leaves the child out of every training set made after that; a model already trained is not changed.
6. Who in the family can see what
- Parents and guardians. Every grown-up added to a child’s record as a guardian (for example a second parent or a grandparent) has the same access as the parent who set LegUp up: the dashboard, progress, schoolwork, the weekly letter, check-in trends, any safety or well-being flag, the controls, the data export, and account deletion. Only add grown-ups you trust with all of this. The dashboard shows trends rather than chat transcripts, but the data export (section 10) contains the full record, including chat messages.
- Teachers. A grown-up added as a teacher gets a read-only view of the child’s learning (progress, schoolwork, and handwriting) and a weekly classroom note that leaves out moods, check-ins, chats, and the family letter. Teachers cannot change controls, export, or delete.
- LegUp staff with administrator access can see records to support families, investigate problems, and keep the service safe.
7. Service providers
We share information only with the companies that run parts of LegUp for us, only for that purpose, and never so they can advertise to you or your child. They are:
| Provider | What they do for LegUp | Information involved |
|---|---|---|
| Supabase | Database, sign-in, file storage, and the server functions that run LegUp | Everything in section 3 that LegUp stores, including ink images and sign-in emails |
| Vercel | Hosting for this website and the web app | Request logs (IP address, browser) |
| Microsoft (Azure OpenAI Service) | The AI model behind the buddy, checking and hints, and the buddy’s look | Chat text, ink and drawing images, lesson context |
| Anthropic | Alternative AI model provider for the buddy | The same as Azure OpenAI, when it is in use |
| Microsoft (Azure OpenAI Service) | Live voice conversations with the buddy (web app, where available) | The child’s voice audio during a live conversation |
| Microsoft (Azure AI Speech) | The buddy’s spoken voice | The text of the buddy’s replies |
| Resend | Sending LegUp’s emails (sign-in codes, letters, previews, reminders, invitations) | Recipient email, the child’s first name, the buddy’s name, the letter’s content |
| Sign in with Google, when a grown-up chooses it | Google confirms the grown-up’s identity and shares their email address, name and profile picture link with LegUp. Google learns that the grown-up signed in to LegUp. | |
| Apple | Sign in with Apple, when a grown-up chooses it | Apple confirms the grown-up’s identity and shares their email address (or a private relay address) and, the first time, their name. |
| Meta (Facebook) | Facebook Login, when a grown-up chooses it | Meta confirms the grown-up’s identity and shares their email address, name and profile picture link. Meta learns that the grown-up signed in to LegUp. |
| PostHog | Product analytics, session replay, and AI request analytics | As described in section 3: the grown-up’s email and name, an opaque learner identifier and age band, and no chat text, handwriting or child’s name |
| Sentry | Error reporting | Error details, screen, build, internal learner number |
| Microsoft (Clarity) | Session recordings and heatmaps in the web app and on this website | Taps, scrolling, page performance, and recordings of the screen, with typed text, PINs, codes, passwords, email addresses, and phone numbers masked, as described in section 3 |
| Google (Google Analytics / Firebase) | App analytics in the web app, on this website, and in the Android app | Screen and event data, without the advertising ID |
| Browser push services (Google Firebase Cloud Messaging, Mozilla, Apple, Microsoft) | Delivering notifications to a grown-up’s device | The push subscription and the short notification text |
| YouTube (Google) | Playing the short learning and reward videos shown in the app, from youtube-nocookie.com | Standard request data when a video or thumbnail loads (IP address, browser) |
We may also disclose information if the law requires it, to protect a child or anyone else from harm, or as part of a merger or sale of the business, in which case this policy continues to apply to it.
8. No ads, no sale
LegUp does not show advertising, does not use advertising identifiers, and does not sell, rent, or share anyone’s personal information for advertising. We do not sell children’s data to anyone.
9. How long we keep it
| Information | How long |
|---|---|
| Buddy chat transcripts (both sides) | Until the parent deletes the child’s account. |
| Check-in notes (the words), with the day and mood | Until the parent deletes the child’s account. |
| Everything else about the child’s learning (ink, activity, progress, memories, letters, settings) | Until the parent deletes the child’s account. |
| Grown-up sign-in | Until the family’s last child is deleted, or until you ask us to delete it. |
| Database backups | Removed as they age out of our hosting provider’s backup window. |
| Analytics, session replays, and error reports | According to each provider’s retention setting. |
10. Your choices and rights
- See and download: in the grown-up dashboard, under Your data, “Download [child]’s data” saves everything LegUp keeps about the child (the record, the buddy’s memories, letters, chat messages, drawings, and ink) as one file.
- Delete: in the same place, “Delete [child]’s account…” removes the child’s record and files at once. See Delete your account for exactly what is deleted.
- Change the controls: turn voice, video requests, and other features on or off at any time.
- Training consent: turn it on or off at any time.
- Emails and notifications: remove a grown-up from the child’s record to stop their emails, or turn notifications off on your device.
- Ask us: email privacy@leguplearning.com to access, correct, or delete information, or with any question. We may need to confirm you are the account holder before acting.
Depending on where you live, you may have further rights under local law. We will honor them; contact us to use them.
11. Security
Information travels over encrypted connections (HTTPS). Ink and drawings are kept in private storage that only LegUp’s server can read. The grown-up PIN is stored as a salted hash, and repeated wrong guesses lock it for a while. Access to administrator tools is limited to named LegUp staff. No system is perfectly secure; if we learn of a breach affecting your information we will tell you as the law requires.
12. Where data is processed
LegUp is run from the United States, and our providers process information in the United States.
13. This website
The marketing pages at leguplearning.com use PostHog web analytics in cookieless mode, Microsoft Clarity and Google Analytics with their cookies switched off, and Sentry error reports, and no advertising. They set no cookies. We count page views, how far a page is read, clicks on links and buttons, page loading speed, and errors, so we can tell which pages help families. To count visitors without a cookie, PostHog derives a daily identifier from the request (including the IP address) that cannot be linked across days, and there is no profile of you. Clarity records how a page is used (taps, scrolling, and what was on screen), with anything typed into a field masked. The demos still save nothing: a drawing or a question asked of Pip stays in the page and is forgotten when you leave.
14. Changes to this policy
If we change this policy we will update the date at the top. If a change affects how we use children’s information, we will tell the account holder by email before it takes effect and, where the law requires it, ask for consent again.
15. Contact us
Leg Up Learning LLC
208 Neal Dr, Liberty Hill, TX 78642
Phone: (334) 462‑8990
Email: privacy@leguplearning.com