Privacy policy

Effective October 14, 2026 · Last updated October 14, 2026

This policy is new. We're having it reviewed by legal counsel, and we'll post any changes here with a new date.

The short version

Only parents and guardians have accounts. Children never sign in. Each child is a profile with a first name and a grade, inside a parent’s family.
We collect what Arrowstead needs to work: your name and email, your children’s first names and grades, the work you photograph, and how it was marked.
We don’t sell your data, show ads, or track you across other apps or websites. This website uses no cookies and no analytics.
We don’t use your children’s work to train AI models. Pages are sent to AI models only to read and mark them, with logging turned off and zero data retention.
You’re in control. Download everything, choose how long photos are kept, or delete your account at any time.

Who we are

Arrowstead helps families see how their children are learning. Parents photograph their children’s math and spelling work, Arrowstead checks it, keeps a learning record for each child, and makes practice sheets for the skills that need more work.

This policy covers:

this website, arrowstead.app;
the Arrowstead Check app for iPhone and Android;
the Arrowstead Dashboard at app.arrowstead.app.

Together we call these “Arrowstead”. “We” and “us” means Arrowstead. “You” means the parent or guardian using it.

Arrowstead is in a private beta. Some of what’s described here applies once your family has an account.

Children’s privacy

Arrowstead is made for parents and guardians, not for children. Children don’t create accounts, sign in, or use the app, and we don’t knowingly collect personal information directly from a child. If you think a child has given us information directly, email us and we’ll delete it.

A parent or guardian decides what goes into Arrowstead about their child, and only that parent’s family can see it. For each child we keep:

a first name and a grade, never a last name or birthdate;
the pages you photograph and what’s on them: the answers we read, how they were marked, your decisions on those marks, the skills involved, practice sheets, time you log, notes, goals, and the samples you choose for a portfolio.

As the parent you can, at any time:

review everything we hold about your child in the app or the dashboard;
download it (Settings → Privacy & data → Download everything);
delete photos or your whole account;
ask us to stop collecting anything further, by deleting the child’s profile or your account.

We use children’s information only to provide Arrowstead to their family. We never use it for advertising, never sell it, and never build profiles of children for marketing.

What we collect

On this website

No cookies and no analytics. We don’t use tracking pixels, advertising tags or third-party scripts. Fonts and images are served from our own site.
Server logs. Our host, Cloudflare, processes each request’s technical details (such as your IP address, browser type and the page requested) to deliver the site, keep it secure and stop abuse.
When you email us to join the beta or ask a question, we keep your email address and message so we can reply and send your invitation.
If we add a sign-up form, it will ask only for your email address, used only for beta invitations and launch news.

In the Arrowstead app and dashboard

What	Why
Your name and email address, and the email of anyone you invite as a guardian	Your account, sign-in codes, invitations and account emails (for example, confirming a deletion or that an export is ready)
If you choose Sign in with Apple or Google, the name and email the provider gives us	Signing you in
Your children’s first names and grades	Each child’s record and practice at the right level
Photos of your children’s work, the answers read from them, marks, your decisions, skills, practice sheets, time logs, notes, goals and portfolio choices	Grading, the learning record, practice sheets and homeschool records
Your plan, renewals, scan top-ups and refunds	Plans and scans. Card details go to Apple, Google or Stripe; we never receive them
A description of each signed-in device (for example, “iPhone”) with its session	Showing which phones are signed in, so you can sign them out
Your IP address, briefly	Limiting sign-in attempts. It isn’t saved with your account, and it’s deleted within 20 minutes

What we don’t collect: your location, contacts, browsing or search history, advertising identifiers, health information, audio, or crash and usage analytics. If we ever add crash reporting or product analytics, we’ll update this policy first, and we’ll never include children’s names or work in them.

How we use information

To provide Arrowstead: read and mark pages, keep each child’s record, build practice sheets, and keep homeschool records if you turn them on.
To sign you in and keep accounts secure.
To send account emails you need, such as sign-in codes, invitations, and notices about your plan, exports or deletion.
To manage plans and purchases.
To answer your questions and send beta invitations you asked for.
To keep Arrowstead working and safe, and to find and fix problems.

We don’t use your information for advertising, and we don’t sell or rent it to anyone.

How AI is used

When you photograph a page, Arrowstead sends the image to AI models that read the answers and suggest marks. These models run through Cloudflare: Cloudflare’s own Workers AI models, and OpenAI models reached through Cloudflare’s AI Gateway.

Logging is turned off for these requests, and zero data retention is on for OpenAI models, so the providers don’t keep the pages or the results.
We don’t use your children’s work to train AI models, and our account is set up so the providers don’t either. Cloudflare states that it doesn’t use customer content to train its models.
A mark is a suggestion. When Arrowstead isn’t sure, it asks you, and you can change any mark. Your decision is what goes in the record.

We share information only as needed to run Arrowstead, with service providers who process it for us under contract:

Cloudflare: hosting, storage, email and AI models.
OpenAI: reading and marking pages, through Cloudflare, with zero data retention.
RevenueCat: managing subscriptions across the App Store, Google Play and the web.
Apple, Google and Stripe: taking payment. They handle your card details.

We also share information:

within your family, with the other parents and guardians you invite. They see the same children and records;
when the law requires it, for example to answer a valid legal request, or to protect someone’s safety;
if Arrowstead is sold or merged, in which case this policy keeps applying to your information, and we’ll tell you before anything changes.

How long we keep information

Your account and your children’s records: for as long as you have an account.
Page photos: you choose in Settings → Privacy & data. Keep them (the default), delete them after 1 year, or keep grades only, with no photos. Photos you’ve chosen for a portfolio are kept until you take them out. If your plan ends, photos are deleted a year later. Grades, marks and your decisions are always kept while your account exists.
Exports (“Download everything”): deleted 7 days after they’re made.
Sign-in data: expired sessions and sign-in codes are deleted within minutes. Invitations are deleted 30 days after they’re answered, or once they expire.
IP addresses used to limit sign-in attempts: deleted within 20 minutes.
Beta emails: until Arrowstead launches and your invitation is sent, or sooner if you ask us to remove you.

Deleting your account

You can delete your account at any time: in the app (Family → Delete account) or on the web (Settings → Account). If you can’t sign in, email us from your account’s email address.

If you own the family, deleting your account deletes the family: children, checks, photos, practice sheets, time records, settings, and plan and scan history. Access ends at once, and the records and photos are then erased from our systems.
If you’re a guardian in someone else’s family, only your own account is deleted. The family’s records stay with its owner.
Deleting your account doesn’t cancel a subscription bought through the App Store or Google Play. Cancel it there first.
We keep a record that a deletion happened, with no personal information in it.
RevenueCat keeps your purchase history after deletion. It’s linked only to a random family ID, never to your name or the app’s email, and nothing on our side can link that ID back to you afterwards. If you bought a plan on the web, RevenueCat and Stripe also hold the email you typed at checkout, under their own policies.

Your rights and choices

Wherever you live, you can ask us to:

tell you what we hold about you and your children, and give you a copy;
correct anything that’s wrong;
delete your information.

Most of this you can do yourself in Arrowstead. Otherwise, email us. We’ll confirm the request comes from the account holder, and we’ll reply within 30 days. We won’t treat you differently for asking.

We don’t sell personal information, and we don’t share it for targeted advertising.

Security

All traffic to Arrowstead is encrypted with HTTPS.
Each family’s records are kept separately, and every request is checked so one family can never see or change another’s.
We don’t record images of children’s work, or what AI models return about them, in our logs.
Only the few people who run Arrowstead can reach its systems, and only to keep it working or to help you when you ask.

No system is perfectly secure. If a breach affects your information, we’ll tell you as the law requires.

Where information is processed

Arrowstead is run from the United States. Our service providers may process information in other countries where they operate, with protections required by law.

Changes to this policy

When we change this policy, we’ll post the new version here and update the date at the top. If a change affects how we use information you’ve already given us, we’ll email account holders before it takes effect.

Contact us

Email hello@arrowstead.app with any question or request about privacy, including a request to see, correct or delete your information.