Privacy Policy

Your family's information, handled with care.

Last updated: April 10, 2026

Plain English first. We wrote this so a parent can read it in five minutes. We don't sell your data, we don't track your kid across the internet, and you can email us any time to delete everything we have on file.

Who we are

A & S Elevated Learning is a small K–5 tutoring practice run by Ms. Hutchinson and Mrs. Munoz. When this policy says "we," we mean the two of us.

What we collect

When you use our site, we collect only what we need to actually tutor your child:

  • Account info — your name and email address when you register or book.
  • Booking info — your child's first and last name, grade, the subject you want help with, and any notes you choose to share at booking time.
  • Contact details — phone number (optional) and the email address we'll use to send confirmations and reminders.
  • Payment info — handled entirely by Stripe. We never see your card number; Stripe sends us back only a payment confirmation and the amount.
  • Session notes — once we've worked with your child, the tutor may keep private notes about what you worked on. These stay between you and the tutor.

How we use it

  • To schedule and run tutoring sessions
  • To process payments through Stripe
  • To send you booking confirmations, day-before reminders, and cancellation notices via Resend (our email provider)
  • To respond when you email or text us
  • To track our own bookings, payments, and progress notes — strictly internal

We do not use your information for advertising. We don't run analytics that track individuals. We don't share with third parties beyond the two services named above (Stripe and Resend).

Children's information

Because we work with K–5 kids, we take this seriously:

  • A parent or guardian provides all of a child's information — kids never create accounts themselves.
  • We collect only what's needed to teach the child (name, grade, subject, anything you choose to share about how they learn).
  • We never market to children or send them promotional content.
  • We don't share children's information with anyone outside the tutor working with them.
  • Parents can request that we delete a child's record at any time by emailing us.

This is meant to comply with the U.S. Children's Online Privacy Protection Act (COPPA). If you have questions about how we handle a child's information, please reach out.

Cookies and tracking

We use exactly one cookie: a session cookie that keeps you logged in. It contains a random ID that points to your session in our database. We don't use Google Analytics, Facebook Pixel, or any third-party tracking. There are no ad networks here.

Where your data lives

  • Our database — hosted on Neon, encrypted at rest and in transit. Passwords are stored as Argon2id hashes (we can't read them, even ourselves).
  • Payment data — held by Stripe, a PCI-DSS Level 1 certified payment processor. We never store card numbers.
  • Email delivery — handled by Resend. They process the email content for delivery and then delete it on a short retention schedule.

Your rights

You can email us any time and ask us to:

  • Tell you exactly what we have on file for you and your child
  • Correct anything that's wrong
  • Delete your account and all associated bookings, notes, and student records
  • Stop sending you reminder emails

We'll respond within seven days, usually faster.

Data retention

We keep your account and booking history as long as you have an active relationship with us. If you ask us to delete your data, we will — though we may keep booking records as long as we're legally required to for tax purposes (typically seven years), with personal details stripped out.

Changes to this policy

If we ever make a meaningful change to this policy, we'll update the "last updated" date at the top and email everyone with an active account. The current version will always live at this URL.

Contact us

Questions about anything on this page? Email us via the contact form and we'll get back to you within a day or two.

This policy is written in plain English as a starting point. If you have specific legal requirements (e.g., your state has stricter privacy laws than COPPA), please let us know and we'll adapt.