Privacy Policy

Human Aspire

Last Updated: August 12, 2026

1. Introduction

Human Aspire ("we," "us," or "our") is a nonprofit organization based in Broomfield, Colorado. This Privacy Policy describes how we collect, use, and protect information when you use Lumina, Mint, Anchor It, and PakoBots.

We do not sell advertising and we do not sell data. Our funding does not depend on knowing more about our users than teaching them requires.

This policy does not apply to users in the European Union. Access from EU countries is not permitted.

2. Who This Policy Covers

This policy applies to adults using our platforms, parents or guardians managing accounts on behalf of children, educators and organization administrators, and visitors to human-aspire.org.

Children under 13 are covered by our COPPA Policy, which describes in more detail what we collect from a child and what we do not.

3. Information We Collect and Use

• Account information — the name or alias and email address you provide when creating an account, and your password, which is stored only in hashed form and never in a form we can read.
• Learning activity — the work done on the platform: answers, progress, reading and writing activity, and stated interests used to theme lessons.
• Audio, processed and immediately discarded — some activities involve reading or speaking aloud. Short segments of audio are sent to our servers, converted to text, and discarded immediately. No recording is kept. Speech-to-text runs on our own servers; audio is never sent to an outside speech or AI service, and voices are never used to identify anyone.
• Sign-in and security records — the network address and browser or device description at sign-in, and whether the attempt succeeded, kept solely to protect accounts against unauthorized access.
• Payment information — processed by Stripe. We do not receive or store full card numbers.

We do not use tracking or advertising cookies, we do not permit third-party advertising, and we do not build advertising or marketing profiles.

4. Service Providers

Artificial intelligence runs on hardware we own and operate. Conversations, writing, and speech are not sent to any external AI provider.

We rely on a small number of vendors purely to operate the service. They process data on our instructions, may not use it for their own purposes, and receive only what their function requires:

• DigitalOcean — infrastructure hosting
• Cloudflare — website delivery, security, and access control
• Stripe — payment processing (never involves children's data)

5. Children's Privacy (COPPA)

Children under 13 cannot create their own accounts. A parent or guardian creates and manages the account, and consent is verified through a knowledge-based verification step before the child's account becomes active — a method permitted under COPPA.

Parents and guardians may exercise the following rights at any time by contacting support@human-aspire.org:

• Review — request a readable summary of the child's data
• Correction — request correction of inaccurate information
• Deletion — request deletion of the account and all associated data
• Opt-out — request that new data collection cease

We will respond to all requests within 30 days, free of charge.

For school deployments, the school may provide consent on behalf of parents under the COPPA school consent exception. Schools must inform parents that this policy applies.

Full detail is in our COPPA Policy.

6. Data Retention

Why we keep what we keep. Learning activity is retained so the platform can remember where a learner is and continue from there. Sign-in and security records are retained so we can detect and investigate attempts to access an account.

How long. Only as long as those purposes require, and never indefinitely.

• Account and learning activity — kept while the account is active. Purged after 6 months of inactivity, with notice beforehand.
• Sign-in and security records — kept for 12 months, then deleted. These are the records you can review and export yourself under "Your Rights" below.
• Operational system logs — the technical logs our servers produce while running the service. Kept for 7 days, then deleted automatically.
• Audio — never retained. Discarded immediately after conversion to text.

You may request deletion at any time by contacting support@human-aspire.org. Deletion is completed within 30 days.

7. Your Rights

You may request access, correction, deletion, or opt-out of data collection by contacting support@human-aspire.org. We will respond within 30 days.

For school and district deployments, requests are routed through the LEA.

8. Data Security

We maintain a written information security program with a designated coordinator, annual risk assessment, and ongoing testing of our safeguards. See our Information Security Program and our CISA Secure by Design commitments.

9. Cookies

We use session cookies for authentication. We do not use tracking or advertising cookies. You may disable cookies in your browser settings, which may affect your ability to log in.

10. FERPA

For school and institutional deployments, the school acts as the data controller under FERPA. Human Aspire acts as a service provider under the school's authority. Student education records are not disclosed to third parties without consent, except as permitted by FERPA and COPPA.

11. Data Breach Notification

In the event of a breach affecting personal information, we will notify affected account holders by email within 72 hours of discovery and notify relevant authorities as required by law. To report a security vulnerability, contact support@human-aspire.org or see our Vulnerability Disclosure Policy.

12. CISA Secure by Design

Human Aspire is a signatory of the CISA Secure by Design Pledge, committing to measurable progress toward seven security goals over one year. Progress is documented at human-aspire.org/security.

13. Changes to This Policy

We will notify you of material changes by email and by updating the date above. Where a change would materially expand what we collect or how we use it, we will seek fresh consent rather than rely on continued use.

14. Contact

Email: support@human-aspire.org

Human Aspire

Broomfield, CO

human-aspire.org