Privacy Policy

Overview

Today In ("we," "us," or "our") is a daily educational content platform for teachers and students. We are committed to protecting your privacy and handling your data responsibly. This policy explains what data we collect, how we use it, and your rights regarding that data.

What we collect

We collect only the information necessary to provide and improve our service:

• Account information: Email address, name, and grade level preference when you create an account.
• Usage data: Pages visited, features used, grade band selections, and subject preferences. This helps us understand which content is most useful.
• Payment information: Handled entirely by Stripe, our PCI-compliant payment processor. We never store credit card numbers, CVVs, or full card details on our servers.
• Device information: Browser type, operating system, and screen size for optimizing the reading experience.

How we use your data

• To deliver bell ringer content at your preferred grade band and subject.
• To process payments and manage your subscription.
• To improve our content and platform based on aggregate usage patterns.
• To send account-related communications (password resets, subscription updates).

What we do NOT do

• We do not sell your data to third parties. Ever.
• We do not display advertising or share data with advertisers.
• We do not use tracking pixels or third-party ad trackers.
• We do not profile individual students.

Student data and COPPA

Today In is designed as a teacher-mediated platform. Students access content through their teacher's classroom -- they do not create individual accounts or provide personal information directly to us. No student data is collected without teacher mediation. We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under 13 without verifiable parental or teacher consent.

Analytics

We use basic analytics to understand how teachers use our platform (which subjects are popular, which grade bands are most used, peak usage times). This data is aggregated and anonymized. We do not use analytics to build individual behavioral profiles.

Payment processing

All payment processing is handled by Stripe, which is PCI DSS Level 1 compliant -- the highest level of certification in the payments industry. We never see or store your full credit card number.

Data retention and deletion

We retain your account data for as long as your account is active. If you cancel your subscription, your account data is retained for 90 days in case you wish to reactivate, then permanently deleted. You may request deletion of your data at any time by emailing [email protected]. We will process deletion requests within 30 days.

Third-party services

We use a limited number of third-party services to operate the platform:

• Stripe -- payment processing
• PostHog -- privacy-focused product analytics
• Sentry -- error monitoring (no personal data)

We do not use Google Analytics, Facebook Pixel, or any advertising-related tracking services.

Data security

We use industry-standard security measures including encrypted connections (TLS/SSL), secure password hashing, and access controls. Our infrastructure is hosted on Railway with encrypted storage and automated backups.

Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you by email or by placing a prominent notice on our website. Your continued use of Today In after changes are posted constitutes your acceptance of the updated policy.

Contact

If you have questions about this privacy policy or how we handle your data, contact us at [email protected].