Privacy Policy

1. Introduction

The Hive Network, LLC ("Homeschool Hive," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our software-as-a-service ("SaaS") platform, including any related services, websites, and applications (collectively, the "Platform").

By using the Platform, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect information from users in the following categories:

2.1 Information You Provide

• Account registration data (name, email, password)
• Profile information (including family member data, images, addresses)
• Event creation details
• Messages, posts, and other submitted content (including images, videos, and other media)
• Payment details (processed by third-party provider; we do not store full credit card numbers)

2.2 Information Collected Automatically

• IP address, browser type, device info
• Usage data (clicks, page views, actions)
• Cookies and tracking pixels
• Location information (via IP or browser, if permitted)

2.3 Information from Third Parties

• Payment processors (e.g., Stripe)
• Analytics platforms (e.g., PostHog)
• Authentication providers (if using SSO or OAuth)

3. How We Use Your Information

We use collected data for:

• Account creation and management
• Delivering and improving our services
• Event registration and communications
• Processing payments and sending receipts
• Sending transactional messages (RSVP confirmations, waitlist updates, etc.)
• Monitoring usage patterns and platform performance
• Investigating and preventing abuse, fraud, and violations of our Terms
• Analyzing de-identified or aggregated data for service optimization

4. Cookies and Tracking

We use cookies and other tracking technologies to:

• Keep you logged in
• Remember your preferences
• Understand how users engage with the Platform
• Support marketing and analytics through trusted tools like PostHog

You can control cookies through your browser settings. Disabling cookies may affect functionality.

5. Sharing Your Information

We do not sell your personal information. We may share data:

• With service providers under strict data processing agreements (e.g., Supabase, Stripe, PostHog)
• With group organizers (for managing RSVPs, messages, or events)
• If required by law (e.g., lawful subpoenas or court orders)
• As part of a merger, acquisition, or asset transfer
• With your explicit consent

6. Analytics

We use analytics tools (such as PostHog) to understand how users interact with the Platform and improve our services. You can control cookies through your browser settings.

If we introduce advertising in the future, we will update this Privacy Policy and provide appropriate opt-out mechanisms.

7. Data Security

We implement reasonable physical, administrative, and technical safeguards to protect your personal data. This includes:

• Encrypted HTTPS access and encryption of data at rest
• Secure database storage (e.g., Supabase policies)
• Role-based access control for staff and group leaders
• Third-party vendor policies are audited on at least an annual basis to ensure alignment with security standards and privacy regulations, including but not limited to the GDPR and CCPA

No method of data transmission is 100% secure. You use the Platform at your own risk.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Retention durations vary depending on the type of data:

• Account Information: Retained for the duration of the account’s active use and up to 12 months after deactivation.
• Analytics Data: Retained for no more than 24 months for performance monitoring and service optimization.
• Support Logs and Communications: Retained for up to 36 months to ensure quality assurance, dispute resolution, and compliance documentation.
• Children's Health and Medical Data: Retained only while the child's profile is active and parental consent is verified. Deleted within 30 days of profile removal or upon parent/guardian request. Health data submitted without completed consent verification (pending consent) is retained for the duration of any associated event registration and then deleted.
• Payment and Transaction Records: Retained for up to 7 years as required by tax and financial reporting regulations.

You may request the deletion of your account and associated data at any time by contacting support@homeschoolhive.co. We will process such requests in accordance with legal obligations and verification requirements.

9. Children's Privacy

Homeschool Hive is not directed at children under 13, and children may not create accounts. However, we recognize that parents and guardians submit information about their children as part of managing their family's homeschool activities.

9.1 Information We Collect About Children

Parents may provide the following information about their children:

• Basic profile: Name, date of birth, gender, and relationship
• Health information: Allergies (including type and severity), special needs and accommodation requirements, and general medical notes
• Emergency contact: Contact name, phone number, and relationship

9.2 Verifiable Parental Consent

When you add a child under 13 to your family profile, you represent that you are the child's parent or legal guardian. In compliance with the Children's Online Privacy Protection Act (COPPA), we use an "Email Plus" verification method for health-related information. This applies to allergies, medical notes, special needs, and emergency contact information.

From your Family Settings page:

• Step 1: You acknowledge consent by checking the parental consent checkbox when adding health information for a child under 13.
• Step 2: We send a verification email to your registered email address. You must click the confirmation link within 48 hours to complete consent verification.
• Health data is not saved to your child's profile until you complete both steps. If the verification link expires, you may re-submit the information to receive a new link.

During event registration (checkout):

• If you add an under-13 child as an attendee with health information and choose to save them to your family, a verification email is sent to your registered email address in the background. The child's family profile is created with basic information only and marked as "Pending Verification."
• Health data is held separately until you click the confirmation link. It is not written to the child's family profile or shared with Group Organizers until consent is verified.
• The event attendee record (a separate, per-event snapshot) retains the health information you provided during registration for event safety purposes, regardless of family profile verification status.

For children 13 and older, health information is stored upon submission without the email verification step. You can review the consent status of each child on your Family Settings page, where children are marked as "Verified," "Pending Verification," or "Needs Re-verification."

9.3 Consent Withdrawal

You may withdraw consent for your child's health data at any time from your Family Settings page. When you withdraw consent:

• All health information (allergies, medical notes, special needs, emergency contacts) for that child is immediately deleted from their family profile
• The withdrawal is recorded in our consent audit trail
• Your child's basic profile (name, date of birth) remains unless you delete the profile entirely
• Previously submitted event attendee records are not retroactively modified, as they serve as a safety record for past events

9.4 Parental Rights

Parents and guardians may at any time:

• Review the personal information we have about their child, including consent verification status
• Update or correct their child's information
• Delete their child's profile and all associated data
• Refuse to permit further collection of their child's information
• Withdraw previously granted consent for health data storage

To exercise these rights, visit your Family Settings page or contact us at: support@homeschoolhive.co

9.5 How Children's Information Is Used and Shared

Children's information is used solely for homeschool group management and event safety. Health information sharing requires your affirmative opt-in at the time of event registration or group membership. The following specific data fields may be shared when you opt in:

• Group Organizers: Allergy information (including severity), special needs, and accommodation requirements (for safe event planning and participant management)
• Event Hosts: Allergy information and medical notes relevant to the specific event (to accommodate medical needs during activities)

Health data on a child's family profile is not shared with Group Organizers or Event Hosts until parental consent is verified. Event attendee records (per-event snapshots submitted during registration) may be visible to the Event Host for safety and accommodation purposes, regardless of family profile consent status.

Group Organizers and Event Hosts may not download, export, or retain children's health data outside the Platform. When a family leaves a group, their children's health information is no longer accessible to that Group Organizer. You may disable health data sharing at any time in your Account settings.

We do not use children's information for advertising or share it with third parties for marketing purposes.

10. Sensitive Personal Information

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), Colorado Privacy Act, Connecticut Data Privacy Act, Virginia Consumer Data Protection Act, and other applicable state privacy laws, certain categories of personal information are classified as "sensitive personal information" (SPI) requiring enhanced protections. The following data we collect qualifies as SPI:

• Health and Medical Data: Allergies, medical conditions, disability information, special needs, and accommodation requirements
• Children's Personal Information: Data about children under 16, including names, dates of birth, and health information
• Precise Geolocation: When you enable location services for group and event discovery

10.1 Purpose Limitation

We use sensitive personal information only for the following purposes:

• Health/medical data: Event safety, accommodation planning, and emergency preparedness
• Children's data: Family profile management, group participation, and event registration
• Geolocation: Displaying nearby groups and events relevant to your location

10.2 Right to Limit Use of Sensitive Personal Information

Under CCPA/CPRA and other applicable state laws, you have the right to limit our use and disclosure of your sensitive personal information to only what is necessary to provide the services you have requested. To exercise this right:

• Adjust health data sharing in your Account settings
• Disable location services in your browser or device settings
• Email us at support@homeschoolhive.co with your specific request

We will not deny you access to the Platform for exercising this right, though certain features that depend on this data (such as health-aware event registration) may be limited.

11. Your Rights and Choices

Depending on your jurisdiction, including under laws such as the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), or the General Data Protection Regulation (GDPR), you may have the right to:

• Access or correct your personal data
• Delete your account or request data erasure
• Object to or restrict certain data uses
• Withdraw consent for optional data sharing
• Opt out of the sale or sharing of your personal information
• Opt out of targeted advertising

To exercise these rights, email us at: support@homeschoolhive.co

11.1 Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals as a valid opt-out of the sale or sharing of personal information, as required by California, Colorado, Connecticut, Texas, Oregon, Montana, Delaware, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, and other US state privacy laws. When we detect a GPC signal from your browser, we automatically disable analytics tracking, session recording, and marketing tracking, and display a visible acknowledgment.

11.2 Do Not Sell or Share My Personal Information

We do not sell your personal information in the traditional sense. However, under the broad definitions in the CCPA/CPRA and other state privacy laws, certain uses of analytics and advertising technologies may be considered "sharing" of personal information for cross-context behavioral advertising. You may opt out of such sharing by:

• Enabling Global Privacy Control (GPC) in your browser
• Clicking "Privacy Preferences" in our website footer and disabling analytics and marketing
• Emailing support@homeschoolhive.co

11.3 Privacy Preference Center

You can manage your tracking and cookie preferences at any time by clicking "Privacy Preferences" in the website footer. This allows you to control analytics, session recording, and marketing technologies independently.

12. Third-Party Links

The Platform may contain links to third-party websites. These links may open in a new browser tab or window and are not governed by this Privacy Policy. We are not responsible for the content or privacy practices of those external sites, and we encourage you to review their privacy policies before providing any personal information.

13. International Users

Homeschool Hive is operated in the United States. If you are located outside the U.S. and choose to use the Platform, your personal data may be transferred to and processed in the U.S. In such cases, the legal basis for processing your personal data may include your explicit consent, performance of a contract, or legitimate interest, in accordance with applicable data protection laws such as the GDPR. If you access the Platform from outside the U.S., you consent to the transfer and storage of your information in the U.S.

14. Updates to This Policy

We may update this Privacy Policy periodically. When material changes occur, we will notify users through in-app banners, login alerts, or direct email communication, as appropriate. When we do, we will revise the “Last Updated” date above. Material changes will be communicated through the Platform.

15. Contact Us

If you have questions or concerns regarding this Privacy Policy, or if you wish to exercise your data rights, please contact us. We will respond within the timeframes required by your applicable jurisdiction: 30 days for GDPR requests (extendable by 60 days for complex requests), 45 days for CCPA/CPRA requests (extendable by an additional 45 days with notice), and 45 days for VCDPA and CPA requests.

The Hive Network, LLC
Email: support@homeschoolhive.co
Jurisdiction: Lee County, Florida, USA