EdKairos, Inc. ("EdKairos," "we," "us," or "our") provides an AI-powered math intelligence platform, including a free diagnostic, adaptive instruction, and progress reporting (the "Service"), at edkairos.com and related applications. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. It applies to visitors, parents/guardians, learners (including children, through their parent or guardian), educators, and institutional users worldwide.
We use third-party artificial-intelligence providers to deliver tutoring and diagnostic features. These providers process data on our behalf under contractual protections and are not permitted to use learner data for their own purposes. They operate under no-training / zero-retention configurations and receive only the mathematics context needed to generate a response — never student names, email addresses, or other direct identifiers. Student personal information is never used to train third-party AI models.
Where the EU/UK GDPR applies, we process personal data on these bases: performance of a contract (to provide the Service you request); consent (for marketing emails/texts and non-essential cookies, which you may withdraw at any time); legitimate interests (to secure, improve, and market our Service in a balanced way); and legal obligation (to comply with law).
EdKairos is designed to be used by children only through, and under the supervision of, a parent, legal guardian, or an authorized school. We do not knowingly collect personal information directly from children under 13 without verifiable parental consent, consistent with the U.S. Children's Online Privacy Protection Act (COPPA). A parent or guardian creates and controls the account and consents to their child's use.
When EdKairos is used by a school or district (for example, in a pilot), the school may act as the parent's agent in consenting to the collection of student information for educational purposes, consistent with FERPA. In that context, we act as a school official with a legitimate educational interest, use student data only to provide the Service, and do not sell it or use it for targeted advertising.
Parents and guardians may review, correct, or request deletion of their child's information, and may withdraw consent, by contacting us (see Section 15).
When a school or district deploys EdKairos, additional protections apply:
If you provide your mobile phone number and opt in — for example, by submitting our diagnostic lead form — EdKairos may send recurring automated marketing and informational text messages, such as reminders to complete a free diagnostic, results, plan and enrollment information, checkout follow-ups, and educational tips.
We do not share or sell your mobile phone number, SMS opt-in information, or consent to any third parties or affiliates for their own marketing or promotional purposes. Mobile information is used solely to deliver the messages you opted into and to operate the Service.
Consent to receive texts is not a condition of any purchase. Message frequency varies. Message and data rates may apply. Opt out at any time by replying STOP; reply HELP or email admin@edkairos.com for help.
This applies only to adult (18+) parent, guardian, and educator accounts who opt in. It does not apply to school or district deployments: student accounts receive no marketing text messages, and we do not collect student phone numbers.
We use cookies and similar technologies to operate the site, remember preferences, and measure performance. You can control cookies through your browser settings, and where required we request consent for non-essential cookies. We may use privacy-respecting analytics to understand aggregate usage.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share personal information only as follows:
We use the following vetted providers, each bound by contract to use data only to provide services to us:
| Provider | Purpose | Security attestation |
|---|---|---|
| Railway | API & database hosting | SOC 2 Type II + SOC 3 |
| Vercel | Web app & site hosting | SOC 2 Type II |
| Cloudflare (Turnstile) | Bot/abuse protection (no PII) | SOC 2 Type II, ISO 27001 |
| Resend | Transactional email | SOC 2 Type II |
| AI tutoring provider | Math-tutoring responses (no PII; no-training) | Zero-retention / no-training mode |
No student personal information is shared with any advertising, marketing, or analytics provider.
Mobile opt-in and SMS consent data are expressly excluded from any sharing or sale (see Section 5).
We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we delete or de-identify it. Parents and users may request deletion as described below.
For school and district deployments, we apply defined windows: student personal information is deleted or de-identified within 45 days of the end of the school's contract; deletion requests are completed within 30 days; encrypted backups age out within 35 days; and operational/security logs are retained for 90 days.
We use technical and organizational measures to protect personal information, including: encryption in transit (HTTPS/TLS on all endpoints, with HTTP Strict Transport Security and automatic http→https redirection); encryption at rest for stored data; role-based, least-privilege access (students see only their own data, teachers only their rostered students, administrators only their school/district); single-use, time-limited password-reset tokens; automated bot/abuse protection on sign-in; and secrets kept out of code and logs. No method of transmission or storage is completely secure, but we maintain an incident and breach response process and will notify affected schools/users and authorities of significant breaches as required by law and any applicable Data Privacy Agreement.
We are based in the United States and may process data in the U.S. and other countries. Where we transfer personal data from the EEA, UK, or other regions, we use appropriate safeguards such as Standard Contractual Clauses where required.
Depending on where you live, you may have the right to: access the personal information we hold about you; correct or update it; delete it; port it; object to or restrict certain processing; and withdraw consent at any time. Individuals in the EEA/UK may also lodge a complaint with a supervisory authority. To exercise any right, contact us at admin@edkairos.com. We will verify your request and respond within the time required by applicable law.
If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another U.S. state with a comprehensive privacy law, you may have the right to know/access, correct, and delete your personal information, to obtain a portable copy, and to opt out of the "sale" or "sharing" of personal information and of targeted advertising. EdKairos does not sell or share personal information in this sense and does not use it for cross-context behavioral advertising. We do not use or disclose sensitive personal information beyond the purposes permitted by law. We will not discriminate against you for exercising your rights. California residents may designate an authorized agent to make a request. To exercise these rights, contact admin@edkairos.com.
Our Service may link to third-party sites and services we do not control. Their privacy practices are governed by their own policies.
We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice where required.
For privacy questions or to exercise your rights:
EdKairos, Inc.
Email: admin@edkairos.com
Conyers, GA, USA