Privacy Policy

LightMySky (“we”, “us”) is a free place to learn. This policy explains what we collect, why, and the choices you have. We do not sell your data, and we never show ads to a child. Questions? Write to us at the address on our contact page.

What we collect

• Account details. When an adult signs up: a name, an email, and a password (stored only as a secure hash, never in plain text). An avatar is optional.
• Learner details. An adult who sets up a learner gives a display name and a birth year, so the app knows roughly where learning should start. That is all we ask for a child.
• Learning activity. The topics shown, the answers given, and the resulting memory model (what a learner knows and what is fading). This is the heart of the service.
• Guest use. If you start without an account, a random id is kept in your browser so your progress stays on that device. No name or email is collected until you choose to add one.
• Messages. When you use the contact form or email us, we keep your name, email, message, and the sending IP address (the last only to keep out spam).
• Basic usage. Standard server logs and Google Analytics, which tells us, in aggregate, how the site is used.

Why we use it

• To run the service: track progress, choose the next topic, and send the weekly review email you opted into.
• To keep accounts secure and to prevent abuse and spam.
• To understand and improve the product, using aggregate analytics.

We do not sell or rent your information, and we do not use a learner’s data for advertising.

Children’s privacy

LightMySky is used by children, always set up and managed by an adult (a parent, guardian, or tutor). The adult creates the learner and stays in control of that learner’s data. For a child we store only what the learning model needs: a display name, a birth year, and their learning activity. We do not ask a child for an email, a photo is optional, and we never show ads to a child or use their data for marketing. A parent or guardian can view, correct, or delete a learner’s data at any time from their account, or by contacting us.

Cookies

• A sign-in cookie (httpOnly) that keeps you logged in.
• A guest cookie that holds anonymous progress before an account is made.
• Google Analytics cookies for aggregate usage statistics.

You can block or clear cookies in your browser. Blocking the sign-in cookie will stop you from staying signed in.

Who we share it with

We use a small number of providers that process data on our behalf: an email provider (Resend) to send and receive mail, Google Analytics for usage statistics, and a cloud host to run the service. We do not sell or rent personal information. We may disclose information if the law requires it.

How we store and protect it

Data is held on our server. Passwords are stored as a secure hash, access is limited, and we take reasonable measures to protect information. No system is perfectly secure, so we cannot promise absolute security.

Your choices and rights

Under Canadian privacy law (PIPEDA) you can ask to see the personal information we hold about you, correct it, or have it deleted, and you can withdraw consent or close your account. Deleting an account or a learner removes the associated personal data, though limited records may remain briefly in backups or where the law requires. To make a request, use our contact page.

Changes

We may update this policy as the product changes. The date at the top always reflects the current version.

Contact

For any privacy question or request, reach us through our contact page.