DRAFT - PENDING LEGAL REVIEW
Privacy Policy
Last updated October 7, 2026 (version 2026-10-07-draft)
Progress Bridge ("we", "us") is an adaptive practice app for children in kindergarten through grade 2, used with a parent or teacher account. Our users are young children, so we collect as little as we can, never show ads, never sell data, and follow the Children's Online Privacy Protection Act (COPPA). This policy explains what we collect, why, who can see it, and the choices you have.
Who we are
Gulbrandsen & Co., LLC d/b/a The Progress Bridge, 6601 Hillcrest Ave, Suite E PMB 2010, Dallas, TX 75205. Phone (682) 503-9018. Email privacy@theprogressbridge.com. We are the only operator collecting personal information through Progress Bridge.
Information about children
We collect information from or about a child only after the child's parent has given verifiable consent. Children cannot create their own accounts: a parent adds them and gives them a login code.
- Profile: first name or nickname and grade, entered by the parent. We also generate the child's login code.
- Learning activity: the answers your child gives, whether they were right, how long they took, hints used, and the skill levels, progress, and practice settings that come from them.
- Homework photos, only if a parent or linked teacher chooses to upload one. A photo may show a child's name or handwriting. We read it once to identify what concept was taught, keep only our own short summary (subject, grade, skill, difficulty), and then delete the photo -- right away once it's been read, and within 7 days if it can't be read. Only the person who uploaded a photo can view it before then; children never see uploads.
- Device and technical information: a cookie that keeps the child logged in on their device, and the standard information every web request includes (IP address, browser type), which our hosting provider uses to deliver and secure the service. We use this only to support the internal operation of the service, never to profile or advertise to a child.
Children never enter an email address, last name, phone number, address, photo, or location, and there is no chat, messaging, public profile, or sharing between children.
Information about parents and teachers
- Email address and password (stored securely by our authentication provider) to run your account, get parental consent, and contact you about your account.
- Records of your consent: when you gave or withdrew it, which version of this policy applied, and the IP address used.
- For paid seats: billing is handled by Stripe. We store your Stripe customer and subscription IDs and seat count, never your card number.
- Invite codes you redeem.
How we use information
- To choose lessons at the right level and adapt as your child practices.
- To show parents (and a teacher, only if the parent chooses) how a child is progressing.
- To check the quality of our questions (for example, flagging a question that strong students keep missing).
- To operate, secure, and troubleshoot the service, and to meet legal obligations.
We do not show advertising of any kind, use ad or analytics trackers, sell or rent personal information, build marketing profiles, or use children's information to train artificial-intelligence models (and our providers' contracts prohibit them from doing so).
Who we share it with
Teachers, only with the parent's separate permission. A parent can link a child to a teacher using the teacher's code. We ask for that permission on its own, separately from consent to use Progress Bridge, and a parent can use Progress Bridge without ever agreeing to it. A linked teacher can see the child's first name, grade, practice results, levels, and our summaries of homework uploads (never the photos themselves), and can upload homework for that child. The parent can stop sharing at any time.
Service providers that process information only on our behalf, under contracts that limit their use of it:
- Supabase: database, authentication, and file storage (all child data is stored here).
- Vercel: hosts the website and API; processes requests in transit and keeps short-lived request logs.
- Anthropic: when a homework photo is uploaded, the image is sent once to Anthropic's Claude AI to identify which skill it covers, and to help write new practice questions from our own summary. Anthropic's commercial terms prohibit training its models on our data. Anthropic keeps this data for up to 30 days for safety and security purposes, then deletes it.
- Stripe: payment processing for parents who buy seats. Stripe never receives children's information.
We may also disclose information if required by law, or to protect the safety of a child or the security of the service. If Progress Bridge is ever sold or merged, children's information would remain subject to this policy, and we would notify parents first.
Parental consent
Before a child's profile is created, we show the parent a notice describing our practices and email a consent link to the parent's account address. The parent confirms by opening the link. About a day later we send a second email confirming the consent, with a link to withdraw it. If consent isn't completed, the request expires and no child profile is created.
Your rights as a parent
At any time, from your parent account or by contacting us, you can:
- Review everything we have about your child, and download it as a file.
- Delete your child's profile and all of their information. This is permanent.
- Stop sharing with a teacher.
- Withdraw consent. Your child's account is paused right away and we stop collecting information; we then delete it at your request.
- Delete your entire account.
You can find these on the Privacy & your data page of your parent account.
How long we keep information
We keep a child's information only while it's needed to provide the service. If a child profile has no activity for 18 months, we email the parent; if it's still inactive 30 days later, we permanently delete it and everything linked to it. Deleted information is removed from our live database immediately and from our providers' backups as those backups expire. We keep a minimal record that a deletion happened (dates and internal IDs, no names or learning data). Homework photos are deleted as described above, long before any of this. Practice questions we wrote after an upload are our own original questions (never copies of the uploaded page) and may be kept as general curriculum, with no link to the child.
How we protect information
Data is encrypted in transit and at rest by our providers. Access to children's data is limited to the parent, a teacher the parent chose, and a small number of our staff who need it to run the service. Homework photos are stored privately, shown only to the person who uploaded them through short-lived links, and deleted after processing. We maintain a written information security program and review it at least once a year.
Changes to this policy
If we make a material change to how we collect, use, or share children's information, we will notify parents by email and ask for new consent where the law requires it.
Contact
Questions or requests: privacy@theprogressbridge.com, (682) 503-9018, or Gulbrandsen & Co., LLC d/b/a The Progress Bridge, 6601 Hillcrest Ave, Suite E PMB 2010, Dallas, TX 75205.