Use less data. Separate identities. Keep people in control.

Who we are and what this covers

Paschal Math Clinic ("PMC," "we," "us") provides human-led, small-group online mathematics tutoring. This policy explains what information we collect from families and students, how we use and protect it, and the choices you have. It applies to our website and to the family portal used by parents, students, tutors, and administrators.

The information we collect

From a parent or guardian: your name, email address, phone number, and the payment status and provider token needed to process tuition and the registration fee. From or about a student: a first name, a PMC-issued Student ID, date of birth (to confirm age and eligibility), grade band, program, and the learning records created as we teach — goals, assignments, practice attempts, and progress.

We collect the minimum needed to enroll and teach. We do not ask for a school-portal password, a school student ID, a teacher's name, a class schedule, unrelated grades, disability documentation, or information about other children.

How we use information

We use it to enroll students, place them and plan their learning (decisions made by a human tutor, never automatically), deliver and improve tutoring, communicate with you, process payments, keep the service secure, and meet legal obligations. A student's date of birth is kept access-controlled and is used only to confirm age and eligibility.

Children's privacy

PMC serves children, and a parent or guardian enrolls each student and controls their account. We collect a student's information from the enrolling parent. We do not require a personal email address from a student — a student signs in with a PMC Student ID. We do not use any student's image, face, voice, name, or personal story in marketing or in our teaching-resource libraries.

Any direct student use of our optional Learning Companion (an AI study aid) is turned off by default and requires separate, verified parental consent together with tutor approval before it can be enabled. You may withdraw that consent at any time.

The AI data boundary

When an AI feature is used, a request may include only a grade band, program, tutor-approved goals, approved de-identified teaching moves, and math-only text. It never includes a student's name, email, school, exact age or date of birth, address, family details, image, voice, private notes, or session recordings. We use an internal identifier, never a name. Session recordings are never used to train any AI model and are not placed in the student portal.

Payments

Payments are handled by a third-party, provider-hosted checkout. PMC stores only a payment provider's token and the transaction status; we never store or see your full card or bank-account numbers. Payment information, learning information, and marketing information are kept in separate contexts, and our payment providers do not receive schoolwork, diagnostics, notes, recordings, or assistant conversations.

Cookies and similar technologies

We use only strictly-necessary cookies: a session cookie that keeps you signed in and a security token that protects forms against cross-site request forgery. These are required for the site to work, so they are not used for advertising or cross-site tracking, and we do not sell your data or share it with advertising networks.

If we ever introduce optional analytics or other non-essential cookies, we will ask for your consent first and offer a way to decline.

How we share information

We share information only with service providers who help us run PMC under contract — such as our website host, our payment processor, and, where enabled, a restricted AI provider bound by the data boundary above — and only as needed to provide the service. We do not sell personal information. PMC tutoring data is never shared with the separate MTT Bootcamp enterprise. We may disclose information if required by law or to protect the safety of a child or other person.

Messaging and safeguarding

Portal messages are visible to the linked parent and are retained for safeguarding. Group threads are announcement-only and one-to-one threads are opened by the tutor; there is no student-to-student messaging. Messages are never sent to any AI service.

Data retention and deletion

We keep information for as long as a family is enrolled and as needed for legitimate business, safeguarding, and legal purposes, then delete or de-identify it under our retention schedule. You may request access, correction, deletion, or withdrawal of consent as described below.

Security

We protect information with access controls tied to role and family relationship, encrypted transport, prepared database queries, private file storage kept outside the public web root, rate limiting, and audit logging that does not capture raw child content. No system is perfectly secure, but we work to protect your family's data.

Your rights and choices

You may ask to access or correct your information, withdraw a consent, or request deletion, subject to our legal obligations. You control whether the Learning Companion is enabled for your student. To make a request, contact us at privacy@paschalmathclinic.com.

Applicable law

PMC is based in Maryland. Our collection and handling of personal information are subject to applicable law, including the federal Children's Online Privacy Protection Act (COPPA) and the Maryland Personal Information Protection Act, and we notify affected individuals of a data breach as required by Maryland law.

Changes and contact

PMC reserves the right to update this policy. Non-material changes take effect when posted; we will give notice of material changes. The version and effective date below indicate the current version. Questions or requests: privacy@paschalmathclinic.com.