Privacy Policy

Abovecodes is a learning platform for students ages 7–16, used by students, parents, teachers, and school administrators. This policy covers all of them.

Depending on your role, Abovecodes collects:

• Account information: your email address (used for passwordless sign-in) and the role you select.
• Profile details: display name, avatar selection, and — for students — a pathway level used to place you in age-appropriate curriculum.
• Classroom and school data: which school or classroom you belong to, teacher-created classrooms, rosters, assignments, and schedules.
• Project work: code and text you submit as classroom assignments, portfolio artifacts, and reflections.
• AI Tutor conversations: messages sent to and received from the AI Tutor. Every student message is checked against a safety filter before it ever reaches the AI model; a message that trips the filter is blocked from reaching the model and logged to a human review queue instead of being answered.
• Billing information, for parents who subscribe to a paid plan: your subscription status and plan. Card numbers are never sent to or stored by Abovecodes — checkout and card storage are handled entirely by Stripe, our payment processor.
• Messages sent between parents, teachers, and students within the platform's messaging feature.

Abovecodes is built around parents and schools, not children signing up on their own. A student account is created either through a school's invite code (issued and managed by a teacher or school administrator) or by a parent, who links the student account to their own. A parent can see their linked student's progress, portfolio, and safety-related activity at any time from their own dashboard.

If you are a parent and want to review, change, or delete your child's information, contact us at our contact page.

Every message a student sends to the AI Tutor is checked against a built-in safety floor plus rules a platform administrator can add, before the message is ever sent to the underlying AI model. If a message matches a safety rule, the student sees a fixed redirect message instead of an AI-generated reply, and the incident is automatically logged for a human (a teacher, school admin, or platform admin) to review. A serious concern can be escalated to a parent from that review queue. The AI Tutor itself is restricted to hints, guiding questions, and examples — it does not write finished project work for a student.

Abovecodes does not sell your information. We share data only with the service providers that make the platform work:

• Supabase, for account authentication and database storage.
• Anthropic, whose Claude models power the AI Tutor — tutor conversations are sent to Anthropic to generate a response.
• Stripe, for payment processing on paid plans.
• Vercel, which hosts the application.

Each of these providers has its own privacy practices governing the data Abovecodes sends them.

We keep account and classroom data for as long as the account is active. To request deletion of an account or a specific piece of information, contact us at our contact page.

If this policy changes in a way that materially affects how we handle your information, we'll update the date at the top of this page.

Questions about this policy or your data can be sent to support@abovecodes.com.