§ Legal · privacy policy
Privacy Policy.
Effective May 17, 2026
What we collect.
An account email, a username, hashed password, and the questions you answer with their timestamps. Coach accounts also store roster membership and assignment metadata. No advertising trackers, no third-party analytics, no fingerprinting.
What we don't collect.
Government identifiers, health data, biometrics, location data, contacts, calendar, browsing history outside our app, or any data from minors below the age our platform is designed for. We do not sell or share your data with advertisers.
FERPA alignment.
Lonestar Academics is built to align with the U.S. Family Educational Rights and Privacy Act. Districts purchasing a campus license sign a data processing agreement that designates Lonestar Academics as a school official with a legitimate educational interest in roster data. Coaches see only practice activity for students on their roster, no keystroke logs, no time-of-day surveillance, no data outside the practice surface.
How we use it.
Practice attempts power your spaced-repetition queue, your accuracy charts, and the coach console. Aggregate, de-identified question-bank coverage informs editorial decisions about which contests to ingest next.
Subprocessors.
We use Stripe for payment processing, Resend for transactional email (password reset, verification, scheduled engagement digests), and Sentry for error tracking with PII disabled. We do not use advertising networks, behavioral analytics vendors, or third-party data brokers. No subprocessor receives student answer content.
Your data, access and portability.
You can download a complete JSON export of your account at any time from Settings → Your data. The export includes your profile, every practice answer, every session, the spaced-review queue, your streak, and your bookmarks, everything the coach console can see plus everything the practice loop reads.
Retention and deletion.
We keep attempt logs for as long as your account is active. Deleting your account removes your personal record within 30 days; the analytics-reset snapshots written by Settings → Reset stats auto-prune after 90 days. De-identified, aggregated metrics may persist in analytics datasets.
Contact.
Email [email protected] for any data request, including export, correction, or deletion. Schools should route requests through their district's data protection officer.