SkillsMap

This Privacy Policy explains how Run Remy Run LLC, an Arizona limited liability company doing business as Refinery Consulting ("Refinery Consulting," "we," "us," or "our") collects, uses, and protects information when your family uses SkillsMap (the "Service"). It's written in plain English on purpose — if anything is unclear, contact us (see below).

1. Information we collect

We collect information you and your family provide directly:

Parent account: family name, email address, and a password (we store a salted, one-way PBKDF2 hash of your password — we never store or can see your actual password).
Student profiles: created by the parent, not the child — display name, a login username, and date of birth (used only to compute age for age-appropriate content; we don't ask students to provide this themselves). Parents may also optionally note a student's grade level, interests, and areas of struggle to tailor lessons.
Learning data: mastery status and scores per skill, assignments, mastery-check answers and results, lesson themes/preferences, and AI-generated lesson content created for that student.
Billing information: subscription and trial status, and identifiers Stripe gives us to manage your subscription. We do not collect or store your card number — Stripe handles that directly.
Technical data: a session cookie/token used to keep parents and students signed in, and basic operational logs generated by our hosting provider.

2. How we use information

We use the information we collect to:

Provide the Service — accounts, student profiles, adaptive placement, AI-generated lessons and mastery checks, and progress tracking;
Process payments and manage subscriptions, trials, and billing through Stripe;
Maintain and improve the Service, including diagnosing technical issues;
Communicate with you about your account, billing, or changes to our policies;
Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your family's data to serve you third-party advertising.

Our legal basis for processing this information is that it's necessary to provide the Service you've signed up for (performance of a contract), to comply with legal obligations (such as tax and billing records), and, where applicable, your consent.

3. Third-party service providers (subprocessors)

We share limited data with a small number of trusted service providers who help us run SkillsMap. We don't sell data to anyone, and these providers may only use it to provide their service to us:

Stripe — payment processing and subscription billing. Stripe receives your billing details and payment method directly; we receive back identifiers and subscription status, not your card number.
Cloudflare — hosting, our database, and image storage for the Service (Cloudflare Pages, D1, and R2).
Google (Gemini API) — some lesson and mastery-check content is generated using Google's Gemini AI models. To generate a lesson or check, relevant lesson context (such as the skill being taught, a theme, and grade-appropriate framing) is sent to Google for processing. We do not send full names, contact details, or billing information to Google as part of this process.

Each of these providers is contractually bound to appropriate confidentiality and security obligations for the data they process on our behalf.

4. Children's privacy

SkillsMap is a tool for parents and other adult guardians to manage their children's education. The parent is the account holder — student (child) profiles, including any information about a child under 13, are created and provided by the parent, under the parent's own supervision and consent, not collected by us directly from the child.

We don't knowingly collect personal information directly from children under 13 outside of this parent-supervised context. A parent may review, edit, or delete their child's profile and data at any time by managing it in their account or by contacting us (see below). If you believe a child has provided us with personal information outside of a parent-managed account, contact us and we will address it promptly.

5. Data retention

We retain account and student data for as long as your account is active, so the Service can keep tracking progress accurately over time. If you close your account, we delete or anonymize your family's personal data within a reasonable period, except where we need to keep limited records (such as billing/tax records) to comply with legal obligations.

6. Security

We use industry-standard safeguards to protect your information, including encrypted connections (HTTPS), salted PBKDF2 password hashing, and hosting infrastructure managed by Cloudflare. No method of transmission or storage is 100% secure, so we can't guarantee absolute security, but we work to protect your family's data appropriately for the type of information we hold.

7. Your rights & choices

As the parent/account holder, you can:

Access and correct your family's information directly from your account (parent and student profile settings);
Delete a student profile from your account at any time;
Request account deletion — contact us and we'll delete your account and associated personal data, subject to the retention exceptions described above;
Cancel your subscription at any time from /settings/billing.

Depending on where you live, you may have additional rights under applicable privacy law (for example, to request a copy of your data in a portable format). Contact us to exercise any of these rights.

8. Cookies & sessions

We use a single session cookie to keep you (and your student) signed in. This cookie is required for the Service to function — it's not used for advertising or cross-site tracking, and we don't currently use third-party analytics or ad-tracking cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly. Continued use of the Service after changes take effect means you accept the updated policy.

10. Contact

Questions about this Privacy Policy, or want to exercise your rights above? Contact us at wes@refinery.consulting.

See also our Terms of Service for subscription, billing, cancellation, and refund details.