Privacy Policy

Last updated: September 8, 2026

GateBuddy is operated by Inspired Minds LLC ("GateBuddy," "we," "our," or "us") and provides parent-managed NNAT® practice for students in grades 2 through 4. This Privacy Policy explains what information we collect, why we use it, the service providers that help us operate GateBuddy, and the choices available to parents and guardians.

1. Information We Collect

When a parent or guardian creates or uses a GateBuddy account, we may collect:

• Parent account information: the parent or guardian's first name and verified email address.
• Student profile information: an optional student first name, grade level, test date, school, school district, and city and state supplied by the parent or guardian.
• Communication preferences: whether the parent or guardian chose to receive occasional preparation tips and product updates.
• Practice data: questions attempted, answer choices, accuracy, missed-question review, completed practice tests, and progress by question type.
• Purchase information: plan, purchase status, access dates, and identifiers supplied by Stripe. GateBuddy does not receive or store complete payment card numbers.
• Device information: a parent-provided device name, security token hash, pairing status, and recent access time when a parent connects a student device.
• Technical information: IP address, browser and device information, request logs, and security events that our hosting and infrastructure providers process to operate and protect the service.
• Product interaction information: privacy-limited events such as visiting a page, starting or completing a session, viewing a plan, pairing a device, or completing a purchase. These events do not include a student's name, answers, or question content. We use an anonymous identifier stored in your browser's local storage, not cookies, to connect these events to the same browser across a visit.
• Session replay: for a sample of app sessions, we may record how the interface was used (clicks, scrolling, and navigation) to find and fix usability problems. All page text and form inputs are masked before recording, no request or response content is captured, and practice questions, a student's answer history, and shareable result cards are excluded from recording entirely and are never visible in a replay.
• Website analytics (Google Analytics): aggregate traffic and usage measurement across our marketing pages and app, such as page views, plan viewed, and signup started. Google Analytics sets a first-party cookie in your browser to measure return visits; this is separate from the local-storage identifier described above.

2. How We Use Your Information

• To create and manage your account.
• To provide student profiles, practice sessions, explanations, test results, and progress summaries.
• To synchronize progress across approved devices and let parents revoke student-device access.
• To process purchases, verify access, respond to refunds or disputes, and prevent fraud.
• To maintain, secure, troubleshoot, and improve the app experience and content.
• To communicate important updates about the service.
• To send preparation tips and product updates only when a parent or guardian has opted in and verified their email address.

3. Information Sharing

We do not sell personal information, use children's information for targeted advertising, or allow students to make personal information public. We disclose information only as needed to operate GateBuddy, complete a transaction, protect the service, or comply with law. The categories of recipients include:

• Account and infrastructure providers: authentication, account data storage, website hosting, request processing, security, and operational logs.
• Stripe: checkout, payment processing, fraud prevention, receipts, refunds, and disputes.
• Google: parent authentication when the parent chooses Google sign-in.
• PostHog: anonymized product analytics and, for a sample of sessions, masked session replay, as described in Section 1, to help us understand and improve the app.
• Google Analytics: aggregate website and app usage measurement, as described in Section 1.
• Legal and safety recipients: when reasonably necessary to comply with law, respond to valid legal process, protect users, or defend our rights.

4. Parents, Students, and Children's Privacy

GateBuddy accounts are created and controlled by adults. We do not ask a child for an email address, phone number, home address, precise location, photograph, voice recording, or open-ended message. A parent or guardian chooses whether to provide an optional student first name and controls student profiles, connected devices, and practice records.

Before setup, the adult must confirm that they are the child's parent or legal guardian and consent to the storage of the student profile and practice activity described here. A parent may review the student information and progress associated with the account, stop future collection by discontinuing use, revoke a connected student device, or request deletion by contacting us.

5. Data Security

We use safeguards including encrypted connections, passwordless parent authentication, access controls, row-level database security, hashed student-device tokens, signed payment webhooks, and limited data collection. No method of transmission or storage is completely secure.

6. Data Retention and Deletion

We retain account, student, and practice information while it is needed to provide the service and for a reasonable period afterward to support account recovery, security, dispute resolution, and legal obligations. Payment and transaction records may be retained as required for tax, accounting, fraud prevention, chargeback, or other legal purposes. We do not retain personal information longer than reasonably necessary for the purpose for which it was collected.

You may request deletion of your account and associated student data at any time by contacting us. We will delete or de-identify eligible information from active systems, subject to legal retention requirements and reasonable backup cycles.

7. Service Providers

We use service providers under agreements that limit their use of information to operating and protecting GateBuddy, supporting parent-selected authentication, or processing transactions. Stripe's privacy policy applies to its payment services, Google's privacy policy applies both when a parent chooses Google sign-in and to Google Analytics website measurement, and PostHog's privacy policy applies to the anonymized analytics and masked session replay described in Section 1.

8. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of your data.
• Withdraw consent and prevent future collection of student information.
• Review or request deletion of student information associated with your parent account.
• Unsubscribe from optional marketing communications at any time.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact Us

Parents and guardians may contact us with privacy questions, requests to review or delete student information, or questions about our children's privacy practices:

Inspired Minds LLC
2108 N Street, Suite N
Sacramento, CA 95816
Email: support@gatebuddy.org