Privacy Policy

IREAD Lab ("IREAD Lab," "we," "us") provides online reading practice for Indiana's IREAD-3 third-grade reading assessment at ireadlab.com. This policy explains what information we collect, how we use it, and the choices you have — especially as they relate to children under 13.

Who uses IREAD Lab

IREAD Lab is used by three kinds of accounts:

• Adults (parents, tutors, teachers, and school administrators) who create an account, manage billing, and oversee the children linked to them.
• Students, whose accounts are created by an adult (a teacher or school provisioning a roster, or a parent adding a child).
• Visitors browsing our public pages (like the blog) without an account.

Information we collect

From adults: name, email address, and — if you subscribe — billing information, which is processed directly by our payment processor, Stripe. We never see or store your full card number.

From students: a first name or nickname, a grade level, a login (which may be a real email you provide, or a school-provided identifier for teacher- or school-managed accounts), and their practice activity — answers, scores, mastery progress, and reading fluency data. Where a student has an accommodation enabled (like text-to-speech), we store that preference.

Automatically: basic technical information needed to operate the site (like error logs, captured through our monitoring tool Sentry, so we can find and fix bugs). We do not run advertising trackers in the learning application, including student sessions, practice, assessments, dashboards, account access, and checkout. Optional adult marketing measurement is described below.

Optional adult marketing and advertising choices

The separate adult marketing page at adult.ireadlab.com may offer optional Meta Pixel measurement. It is disabled until activated and requires an adult visitor to choose to allow it. Declining does not limit access to IREAD Lab. We do not load Meta advertising scripts on the learning application or use student information for advertising.

When activated and allowed, the adult marketing page may send Meta a page-view event and technical information such as IP address, browser information, and advertising identifiers or cookies. Meta may match this activity to a Meta account for advertising measurement and, if separately enabled, re-engagement. We do not send names, emails, account identifiers, student details, answers, scores, accommodations, payment details, or learning activity. Automatic advanced matching, automatic event collection, and Conversions API are excluded from this setup.

The page offers equally available Allow and Decline controls and a way to withdraw permission. A Global Privacy Control signal prevents optional measurement. Choices apply only to the current page visit in that browser and are not saved across visits; withdrawal stops future collection but does not undo information already sent to Meta. Meta processes information it receives under its own privacy policy. You can also review advertising preferences and privacy choices in your Meta account.

We may also create audiences from engagement with our adult-facing Facebook Page and Instagram profile within Meta. This does not upload student or customer lists. Any resulting ad delivery must be restricted to adults. Meta engagement alone does not verify that every audience member is an adult.

Children under 13 and COPPA

IREAD Lab is built to be used by children under the direction of a parent, teacher, or school — not signed up independently by a child. Teacher- and school-provisioned student accounts are created and controlled by the educator or school. Schools must determine and authorize the permitted educational use and the applicable notices, agreements, and consent process. Creating a teacher account alone does not establish school authorization. For accounts a parent creates directly for their child, the parent controls the account and can review, correct, or delete their child's information at any time by contacting support@ireadlab.com.

We do not knowingly collect personal information directly from a child under 13 outside of an account set up and controlled by their parent, teacher, or school.

How we use information

We use the information we collect to operate the practice platform: providing practice questions at the right level, tracking mastery and fluency progress, showing that progress to the parent, teacher, or school linked to a student, processing subscriptions, and providing customer support. We do not use student data to build advertising profiles, and we do not sell personal information.

Who we share information with

The following providers support operation of the learning application:

• Supabase — hosts our database and manages account authentication.
• Stripe — processes subscription payments.
• Namecheap Private Email — handles support email and school inquiry notifications. School inquiry messages include the adult contact details supplied in the form. Please do not include student records in an inquiry or support email.
• Lovable — hosts and helps us build the application.
• Sentry — receives minimized application error reports to help us identify software failures. Error reporting is separate from advertising.
• Lovable AI gateway, OpenAI, and Google — support generated read-aloud audio and translation of instructional content. These services are separate from advertising; the speech endpoint accepts text to read aloud.

The separate adult marketing page is hosted through OpenAI Sites infrastructure. Its host processes the technical requests needed to serve that page. The private review version requires owner sign-in; student accounts and learning records are not connected to the marketing host. Meta is an optional advertising recipient, not an operational provider for the learning application.

We do not sell student information or disclose student information for targeted advertising. Optional adult marketing disclosures to Meta, if activated and permitted, are separate from these operational services. Advertising disclosures may be treated as sharing or targeted advertising under applicable privacy laws; adult visitors can decline them.

Adult account activity

We record limited first-party activity for signed-in adult accounts to understand and improve the product: page openings for adult dashboards and getting started, Practice categories and skills, item and written lesson openings, explanation reveals, classroom presentation entry, sign-in observations, and successful account linking. Linking events contain no student identity. These records identify the adult account and time, but contain no student names, answers, scores, accommodations, item content, full browsing URLs, IP addresses, device fingerprints or session recordings. They are not shared with advertising platforms. Account-level reports are restricted to authorized superadmins with two-factor verification. An opening or click does not establish that teaching or learning occurred. Repeated identical actions may be combined.

Detailed adult activity is available for up to 90 days; older events are removed on the next recorded event or activity-report refresh. Account creation and last-sign-in dates remain part of the account record. Deleting the account also deletes its detailed activity. Contact support@ireadlab.com with questions or deletion requests.

Data retention and deletion

We retain account information for as long as the account is active. You can request that we delete an account and its associated data at any time by emailing support@ireadlab.com; we'll confirm once it's done.

Security

We use industry-standard practices to protect your information, including encrypted connections (HTTPS) and database-level access controls that restrict each account to only the data it's permitted to see. Linked parents can access their children's information. Teachers can access linked students and, where school connections establish access, students in their linked school. Linked school administrators can access students connected through their teachers. Privileged support access uses separate permissions and logging.

Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, notify account holders directly.

Contact us

Questions about this policy or your data? Email support@ireadlab.com.