Privacy Policy

The short version

Children do not get their own accounts. There is no student login, email address, or password.
We do not sell personal information, we do not serve advertising, and we do not build advertising profiles.
We do not collect IP addresses or precise location.
A student profile cannot be created without an explicit parental consent step.
You can see, export, and delete your family’s information at any time.

This Privacy Policy explains how SafeStats, LLC (“SafeStats”, “we”, “us”) handles information in the Esrala service at esrala.com (the “Service”). It applies to the parent or guardian who holds the account (“you”) and to the students whose profiles you create.

1. Who is responsible for your information

SafeStats, LLC is the controller of the information described here. You can reach us at privacy@esrala.com or by mail at SafeStats, LLC, 20280 N 59th Ave, #115-141, Glendale, AZ 85308.

2. How accounts and student profiles work

Only an adult can create an Esrala account. Students do not have accounts, logins, email addresses, or passwords. Instead, the account holder creates student profiles inside their own account and picks one from a profile picker at the start of a session. A student profile is a record inside your account, not a separate account, and it cannot be accessed without your family’s sign-in.

The parent side of the app — uploads, billing, other children’s results — can be locked behind a numeric passcode you set, so a child using the family device cannot reach it.

3. Information we collect

From the account holder

Email address and a password. The password is stored only as a scrypt hash; we never store or transmit it in readable form and cannot recover it for you.
An optional display name for the account.
Billing information when you subscribe. Payments are processed by Stripe. Esrala does not receive or store your full card number.

About each student, provided by you

A display name — a first name or nickname is all the Service needs.
Optionally: grade level, state, subjects, and a short description of the student’s interests, which is used to choose examples in their lessons.
Optionally: a profile photo you upload, stored with the profile and shown only inside your account.

Created by the student as they study

Progress through a lesson, including which slide they are on and whether a lesson is finished.
Quiz attempts: the questions asked, the answers given, the score, and how long the attempt took.
Notes the student writes on a lesson.
Messages the student sends to the study helper, and any files or images they attach to those messages.
A short reflection after a quiz — how confident they felt and any comment they choose to add.

Curriculum you upload

The documents you upload, the text extracted from them, and the lessons generated from that text. These are stored so lessons can be built and re-read, and are visible only inside your account.

Technical and operational

A session cookie so you stay signed in, and a cookie recording which profile is in use. These are strictly necessary for the Service and are not used for advertising or cross-site tracking.
A record of parental consent: the version of the consent notice shown, the method of consent, the time, and the browser user-agent string.
Counts of AI usage and cost per student, used to enforce the spending limits that keep the Service affordable and to bill correctly.
Server error logs, which may incidentally contain a user identifier but are not used to profile anyone.

What we deliberately do not collect

IP addresses. The Service is written so that IP capture returns nothing, including on the parental-consent record.
Precise or approximate geolocation.
Contact details for children — no student email address, phone number, or postal address.
Microphone or camera access. Read-aloud uses your device’s built-in speech synthesis, so nothing is recorded and no audio leaves the device. There is no speech-to-text in the Service.
Biometric identifiers, advertising identifiers, or third-party analytics or advertising trackers inside the classroom.

4. Children’s privacy and COPPA

Esrala is intended to be purchased and operated by a parent, guardian, or another adult responsible for a student’s education. It is designed for students in roughly kindergarten through eighth grade, which means it is used by children under 13. We treat the information described above as personal information of a child and handle it accordingly under the Children’s Online Privacy Protection Act (COPPA).

Consent first. The Service will not create a student profile until you affirmatively confirm that you are the child’s parent or legal guardian and consent to the collection and use of their learning activity to provide the Service. This is enforced by the software, not just by a checkbox on a page.
Versioned consent. We record which version of the consent notice you agreed to. If we materially change what we collect, we ask again rather than treating an old agreement as covering new practices.
Data minimisation. We ask for the least we need. A first name is enough to create a profile.
No conditioning. We do not require a child to disclose more information than is reasonably necessary to use the Service.
No behavioural advertising. A child’s information is never used to target advertising, and we do not disclose it to advertising networks or data brokers.
Your controls. At any time you may review the information collected from your child, refuse to permit its further collection or use, and direct us to delete it. Deleting a student profile deletes their learning records with it.

To exercise any of these rights, use the controls in your account or email privacy@esrala.com. We will verify that the request comes from the account holder before acting on it.

5. How we use information

To provide the Service: turning your uploaded curriculum into lessons, quizzes, and study material; recording progress and scores; and answering a student’s questions about the chapter they are studying.
To adapt teaching to the student: a student’s interests, quiz results, and their own reflections are used to shape how later chapters are explained to them. This changes examples, pacing, and emphasis. It does not change the curriculum, the facts, or the standard the student is held to.
To keep the Service running and safe: authentication, rate limiting, abuse prevention, error diagnosis, and enforcing spending limits.
To bill you and to provide support you ask for.
To comply with law.

We do not use student work, quiz results, uploads, or chat messages to build advertising profiles, and we do not sell or rent personal information to anyone.

6. AI processing and service providers

Esrala uses third-party artificial-intelligence models to generate lesson material and to answer a student’s questions. To do this, the relevant text is sent to a model provider. That can include: passages from the curriculum you uploaded; the lesson title and summary; the student’s question and any file or image they attach to the study helper; and, so that teaching can be adapted, the student’s interests, the text of quiz questions they answered incorrectly, and any reflection they wrote.

Requests reach model providers through OpenRouter, Inc., which acts as a router: it forwards each request to an underlying provider and does not run the models itself. OpenRouter states that it does not use inputs or outputs for model training.

Every request is restricted to zero-retention providers.

Left unconstrained, a routing service picks whichever provider is cheapest or fastest at that moment. We do not allow that. Every single request Esrala sends carries two conditions, and a provider that does not meet both cannot receive it:

Zero data retention. The provider keeps nothing once it has answered. There is no copy of your child’s question sitting on their systems afterwards.
No training, no collection. The provider may not retain or use the request for its own purposes, including training or improving its models.

If no provider meeting those conditions is available for a given model, the request fails. It is never quietly downgraded to one that keeps your data.

The models themselves are chosen by us, not by the router. Written lesson material, quizzes, flashcards, and the study helper’s answers are generated by OpenAI models. Lesson infographics are drawn by a Google image model; the only thing sent for an infographic is the lesson text Esrala has already written, never anything a student typed.

Two other kinds of provider handle information, and only these two:

Hosting and database providers, which store the Service’s data and deliver it to your browser. They hold information on our behalf and do not use it for anything of their own.
Payment and email providers, which take a subscription payment and deliver transactional messages such as a password reset. Card details are handled by Stripe, Inc. and are never stored by us.

That is the complete list of categories of recipient. We do not send personal information to advertising networks, data brokers, analytics vendors, or anyone else. Every provider is bound to use information only to provide their service to us, in the ordinary course of running Esrala, and is prohibited from selling it.

We do not sell or rent personal information, and we never will. We do not share it for cross-context behavioural advertising. We do not build advertising profiles. Nothing a student writes, uploads, or answers is used to train an AI model.

7. Disclosure of information

We disclose personal information only:

To the service providers described above, to run the Service.
To you, the account holder.
When you direct us to — for example, if you ask us to send records to a scholarship or ESA program administrator.
To comply with law, a lawful request, or legal process, or to protect the rights, safety, or property of a person.
In connection with a merger, acquisition, or sale of assets — in which case we will give notice before your information becomes subject to a different privacy policy, and any successor remains bound by the commitments in this policy with respect to children’s information.

8. Education records

When you use Esrala as a private family for your own child’s instruction, the Family Educational Rights and Privacy Act (FERPA) generally does not apply, because we are not a school or an agency receiving federal education funds. If a school, district, co-op, or scholarship program contracts with us to provide the Service to its students, we will act as a school official with a legitimate educational interest under that agreement, will use education records only for the purposes the agreement sets out, and will not re-disclose them except as that agreement and applicable state student-privacy laws permit.

9. How long we keep information

Account, student profiles, lessons, uploads, notes, chats, and results: kept while your account is open, so your family can return to them.
When you delete a student profile: their profile, lessons, progress, quiz attempts, notes, chats, and reflections are deleted.
When you close your account: your account and everything belonging to it is deleted. Ask us at privacy@esrala.com if you want this done for you.
Billing records: retained as long as tax and accounting law requires, separately from learning data.
Backups: deleted content persists in encrypted backups for a short period before those backups expire.

10. Security

Passwords and any parent passcode are stored as scrypt hashes, never in readable form.
Session tokens are stored hashed, and expiry is enforced on the server rather than trusted from the browser.
Access to a course, lesson, or result is checked against the requesting account on every request, so one family cannot reach another family’s material by guessing an address.
Traffic is encrypted in transit.

No service can promise perfect security. If a breach affects your information, we will notify you and the appropriate authorities as required by law.

11. Your rights

Depending on where you live you may have rights to access, correct, delete, or receive a copy of your personal information, and to withdraw consent. Parents of children always have these rights with respect to their child’s information under COPPA, regardless of state. We do not charge for these requests and we do not discriminate against you for making one. Email privacy@esrala.com.

We do not sell or share personal information as those terms are defined by California law, and we do not process personal information for targeted advertising.

12. Where information is processed

The Service is operated in the United States, and information is processed there. If you use Esrala from outside the United States, you understand that your information will be processed in the United States.

13. Changes to this policy

If we change this policy we will update the date at the top. If a change materially affects how we handle a child’s information, we will notify account holders and, where COPPA requires it, obtain consent again before applying the change to information already collected.

14. Contact

SafeStats, LLC
20280 N 59th Ave, #115-141
Glendale, AZ 85308
privacy@esrala.com

See also our Terms of Service and our plain-language safety and privacy overview.