1. Data controller[COMPANY NAME TO BE DEFINED] ("BELUGA", "we") is responsible for processing the personal data described in this notice. Privacy contact: eralph.arq@gmail.com.
2. Who this notice applies toThis notice applies to the parent or legal guardian who creates and manages the family account (the account holder), and to the learner (usually a minor) whose academic data is processed inside the family account, under the parent/guardian's consent. If you are the parent/guardian, by accepting parental consent during sign-up you confirm that you have the legal authority to authorize the processing of your child's or ward's data within BELUGA.
3. What data we collectFrom the parent/guardian: email address and password (encrypted, never stored in plain text) and the billing data needed to process payments, handled directly by Stripe (BELUGA does not store the full card number). From the learner: a name or nickname visible inside the account, date of birth, language of instruction; academic data (enrolled subjects, school and grade, calendar, notebooks and notes generated in the app, messages exchanged with the artificial intelligence tutor, including images of homework or notes the learner uploads to ask for help); learning progress estimated per concept, generated automatically from the learner's interaction with the tutor, never from official school grades; the PIN for accessing the learner space, stored as a cryptographic hash, never in plain text, with an attempt limit; and usage activity to calculate metrics such as the streak of days with activity. BELUGA does not knowingly request or store official grades, disciplinary records, health information, or sensitive learner data beyond what is strictly necessary for academic support.
4. What we use the data forTo provide the Service (an AI tutor with the learner's real academic context, calendar, notebooks and progress); to personalize support according to the learner's actual mastery level per concept, without using grades or comparing learners with each other; billing and family account administration; security (PIN attempt limits, strict data isolation between different families); communicating with the parent/guardian about the account; and complying with legal obligations where applicable. We do not use learner data for advertising, we do not sell it to third parties, and we do not train third-party artificial intelligence models on families' private content.
5. Who we share data withTo operate BELUGA we use the following processors: Supabase (database, authentication and storage, protected by per-family access rules); Anthropic (Claude model, to generate the AI tutor's answers and process the content the learner shares with it); Vercel (application hosting); Stripe (payment processing; BELUGA never sees or stores the full card number); Resend (transactional email delivery); and, optionally when the family enables voice conversation, OpenAI (processes the audio of that conversation; the academic content of the answers is still generated by Anthropic). We do not share learner data with advertisers, with the school directly unless the family expressly requests it, or with any third party other than those listed above, except under a valid legal requirement.
6. Isolation between familiesEach family and each learner has its own data context, technically isolated from that of any other family through database-level security rules verified in periodic internal audits. No family can see, accidentally or intentionally, another family's academic data.
7. Parental consentBefore a learner profile is created, the parent/guardian who holds the account must expressly confirm, through a specific consent checklist during sign-up: that they hold parental authority or legal guardianship of the learner and the authority to give this consent; that they authorize the processing of the learner's academic data described in this notice, for the purpose of providing the Service; and that they have read and accept this Privacy Notice and the Terms of Service. The parent/guardian may withdraw this consent at any time by requesting deletion of the account.
8. How long we keep dataWe keep data while the family account remains active. If the account is cancelled, we keep data only for the period needed to meet pending legal or billing obligations, and we delete it completely when permanent removal is requested, unless the law requires a longer retention period for certain records (for example, tax receipts).
9. Your rights (Access, Rectification, Cancellation, Objection and Portability)As the family account holder, you may at any time access a copy of all the data associated with your family and each learner, request correction of inaccurate data, request complete deletion of your account and all data associated with it and with your learners, and object to a specific use of your data to the extent the operation of the Service allows. These requests are already technically supported by BELUGA (full data export and deletion per family). To exercise them, write to eralph.arq@gmail.com. We will handle your request within the deadlines set by the applicable legislation in Mexico (LFPDPPP).
10. SecurityWe apply reasonable technical measures: encryption in transit (HTTPS) across the whole application, passwords and learner PINs stored as cryptographic hashes (never in plain text), per-family data isolation at the database level, an attempt limit on PIN access, and an audit log of sensitive administrative access. No system is 100% invulnerable; if we detect an incident that compromises personal data, we will notify you as required by applicable law.
11. International transfersSome of our providers (Anthropic, Vercel, Stripe, Resend, OpenAI) process data on servers outside Mexico. By using the Service, you accept this international transfer, which is carried out only for the purposes described in this Notice and under each provider's contractual data protection commitments.
12. Minors outside the family contextBELUGA is not intended for a minor to create their own account independently. A learner's access always happens inside a family account created and managed by their parent/guardian.
13. Changes to this NoticeWe may update this Notice to reflect changes in the Service or in applicable law. We will notify material changes at least 30 days in advance by email or inside the application.
14. ContactQuestions or requests about privacy: eralph.arq@gmail.com.
