COPPA School Agreement — Human Aspire

Human Aspire

Last Updated: August 12, 2026

1. Purpose

This agreement authorizes a school, school district, tutoring organization, or individual tutor ("Organization") to provide consent on behalf of parents for the collection and use of personal information from children under 13, as permitted under the Children's Online Privacy Protection Act (COPPA), 16 CFR Part 312.

2. COPPA School Consent Exception

Under COPPA, schools may consent to the collection of student information on behalf of parents when the information is used solely for educational purposes. By signing this agreement, the Organization affirms that:

The Organization operates in an educational capacity and has a direct relationship with the students' parents or guardians
The Organization has informed parents that Human Aspire will collect limited student data for educational purposes as described in our COPPA Policy
The Organization consents to such collection on behalf of parents for the sole purpose of providing the educational service
The Organization will not prevent parents from exercising their rights under COPPA (review, correction, deletion, opt-out)

3. Organization Obligations

The Organization agrees to:

Notify parents — inform parents before student accounts are created that their child will use Human Aspire and that this agreement governs data collection
Maintain records — keep a record of parental notification for the duration of this agreement
Limit access — only create accounts for students enrolled in the Organization's program
Report changes — notify Human Aspire if a student leaves the Organization so the account can be deactivated
Cooperate with parents — facilitate parental access to their child's data upon request

4. Human Aspire Obligations

Human Aspire agrees to:

Collect minimally — collect only the child's first name (or alias), educational activity records, and sign-in security records (network address, device description, and whether the sign-in succeeded), which are used solely to protect the account against unauthorized access and never to profile the student
Process audio without retaining it — where an activity asks a student to read or speak aloud, audio is converted to text and discarded immediately. No recording is kept, no voiceprint is created, and a student's voice is never used to identify them
Keep AI in-house — speech-to-text and all AI processing run on hardware Human Aspire operates. Student voices, writing, and conversations are never sent to an external AI provider
No third-party disclosure — never disclose child data to any third party for that party's own use. A small number of vendors process data solely on our instructions to host and secure the service
No advertising — never use child data for advertising, profiling, or any non-educational purpose
Secure data — maintain a written information security program with a designated coordinator, annual risk assessment, and ongoing testing of safeguards, in alignment with the CISA Secure by Design Pledge
Honor parental rights — respond to parental review, correction, deletion, and opt-out requests within 30 days, free of charge
Breach notification — notify the Organization and affected parents within 72 hours of discovering a data breach affecting child accounts
Data retention — purge child account data after 6 months of inactivity, with notice to the Organization before purging; retain sign-in and security records for 12 months; never retain audio

5. Scope of Consent

This agreement covers the following Human Aspire platforms:

Lumina — AI-powered literacy companion
Mint — gamified reading and morphology activities
Anchor It — electronics and STEM learning (when available)
PakoBots — electronics BOM builder and robotics

The Organization may create and manage student accounts through the platform's account management tools. Each student account is associated with the Organization and subject to this agreement.

6. Data Ownership and Portability

Ownership — the Organization and its students retain ownership of all student-generated data. Human Aspire acts as a service provider and does not claim ownership of student work, progress records, or any personally identifiable information.
Export — the Organization may request an export of all student data associated with its accounts at any time by contacting support@human-aspire.org. Exports will be provided in a standard, machine-readable format within 30 days.
Deletion — upon written request, Human Aspire will delete all student data associated with the Organization within 30 days and provide written confirmation of deletion.
No secondary use — student data collected under this agreement will not be retained, used, or shared by Human Aspire after deletion, except as required by law.

7. Term and Termination

This agreement is effective from the date of execution and remains in effect for one year, automatically renewing unless either party provides 30 days written notice of termination.

Upon termination:

The Organization must inform parents that the agreement has ended
Human Aspire will deactivate all student accounts associated with the Organization
Parents may individually consent to continued use by completing parental verification (knowledge-based authentication) on the platform
All child data will be purged 30 days after termination unless a parent requests continued service

8. Limitation

This agreement does not authorize the Organization to:

Consent to data collection for non-educational purposes
Share student login credentials with unauthorized persons
Create accounts for children who are not enrolled in the Organization's program
Override a parent's decision to opt out or delete their child's account

9. Governing Law

This agreement is governed by the laws of the State of Colorado and federal COPPA regulations (16 CFR Part 312).

10. Contact

To execute this agreement or ask questions:

Email: support@human-aspire.org