Lunara Quest (“we”, “us”, or “our”) operates the Lunara Quest homeschool planning platform (the “Service”). This Privacy Policy explains how we collect, use, and protect information about you and the children in your care.
By creating an account you confirm that you are at least 18 years old and the parent or legal guardian of any children whose information you add to the Service.
1. Information We Collect
About Parents / Educators
- Email address and password (for account login)
- Display name (optional)
- Profile photo (optional, uploaded by you)
- Family and household information you choose to provide
About Children — Created and Managed Entirely by a Parent or Guardian
- First name and last initial (used for kid portal login display only)
- Grade level / grade band
- Profile photo or custom avatar (uploaded or designed by the child or parent)
- Optional profile fields the child can fill in: nickname, bio, favorite subjects, hobbies, favorite shows, movies, music, foods, favorite color, and birthday
- Journal entries and mood selections (optional, created by the child)
- Academic activity logs, lesson plans, assignments, and completion records
- External curriculum data imported by the parent (e.g., MiAcademy report cards): course names, task names, scores, and completion dates
- A numeric PIN (stored as a one-way cryptographic hash) for kid portal login
No child's email address is collected. Children do not create their own accounts — all child profiles are created and controlled by a parent or guardian.
2. How We Use Information
- To create and maintain your account and your children's profiles
- To provide homeschool planning, progress tracking, and gamification features
- To generate AI-assisted lesson suggestions and educational resources (parent-only; child data is used only as educational context provided by the parent)
- To display your child's journal entries, progress, and achievements in their portal
- To send account-related emails (password reset, email confirmation)
- To improve the Service
We do not use children's personal information for advertising, behavioral profiling, or any purpose beyond operating the Service for the family.
3. Third-Party Services
The following third-party services may receive limited data in order to operate the Service:
Supabase — database, authentication, and file storage. All account and child profile data is stored on Supabase infrastructure. Supabase acts as a data processor on our behalf.
OpenAI — AI-generated lesson plans and educational recommendations, invoked only when a parent explicitly uses the Luna AI assistant. We send the parent's message and limited educational context (grade level, subject area). We do not send children's names, journal entries, or personal profile details to OpenAI.
YouTube Data API — educational video suggestions. Only subject and grade-level search terms are sent; no child personal information is transmitted to YouTube.
Cloudflare Turnstile — bot-protection on the signup page. No personal information beyond basic browser signals is processed.
We do not sell, rent, or share children's personal information with third parties for their own marketing or advertising purposes.
4. Children's Privacy (COPPA)
Lunara Quest is a tool for parents and guardians to manage their children's homeschool education. We comply with the Children's Online Privacy Protection Act (COPPA).
- Children do not sign up directly. All child profiles are created by a parent or guardian who has agreed to this Privacy Policy.
- Parental consent. By creating a child profile, you (as parent or guardian) provide verifiable parental consent for the collection and use of your child's information as described in this Policy.
- Right to review. You may review your child's personal information at any time by logging in and navigating to their profile.
- Right to correct. You may edit or correct your child's information directly within the Service at any time.
- Right to delete. You may permanently delete your child's profile and all associated data from your account settings, or by contacting privacy@lunara.quest. Deletion is permanent and cannot be undone.
- No marketing to children. We do not use any child's personal information to contact or market to that child.
To submit a parental rights request (review, correction, or deletion), email privacy@lunara.quest with subject “COPPA Request”. We will respond within 30 days.
5. Data Retention
We retain your data for as long as your account is active. When you delete your account, all associated data — including all child profiles, journal entries, lesson records, and uploaded photos — is permanently deleted within 30 days.
6. Data Security
We protect your data with encrypted connections (TLS), signed session cookies, server-side authentication, and row-level database security policies. Child profile photos are stored in private, access-controlled storage.
7. Your Rights
Depending on your location you may have rights to access, correct, port, or delete your personal data. Contact privacy@lunara.quest to exercise any of these rights.
8. Changes to This Policy
We may update this Policy from time to time. We will notify you of material changes by posting the updated Policy here and, where required by law, by email.
9. Contact
Lunara Quest
privacy@lunara.quest · hello@lunara.quest
Internal note: This policy is a working draft and should be reviewed by a licensed attorney familiar with COPPA and applicable state privacy laws before public launch.