Privacy Policy

Who we are

Test My Kid (accessible at testmykid.org) is a free adaptive math and reading assessment tool, built for parents to understand approximately where their child stands academically today. This policy explains what we collect, why, how we store it, and how you can see or delete your data.

Who this product is for

Test My Kid is designed for parents and legal guardians. Children do not create accounts; parents create an account, then optionally create child profiles on the child's behalf. The parent consents, on the child's behalf, to the collection of the data described below.

What we collect

• From you (the parent): your Google account email address and display name, used to identify and authenticate your account.
• About each child you add: first name only (never last name), birthday, grade level, and optionally a 5-digit zipcode.
• Assessment results: which questions your child answered, whether each was correct, the order they were shown, and the computed grade level at the end.
• Session cookies and local storage: Supabase-issued authentication cookies that keep you signed in, and a pseudonymous analytics identifier stored in your browser's local storage (see "Product analytics" below). No third-party advertising cookies.

We do not collect photos, last names, school names, teacher names, or any other identifiers beyond what is listed above.

Why we collect it

• Your email and display name exist so that we can persist your data across devices and so you can see which account you're signed into.
• A child's first name, birthday, and grade personalize the experience (for example, greeting them by name, picking the right difficulty) and let you compare a child's results to previous tests.
• Zipcode is optional. We currently do not use it. It is reserved for a future feature that would compare your child's progress against school-district norms. You can leave this blank.
• Assessment results let you review how your child did over time.

How it's stored

Your data is stored in Supabase (a Postgres database), encrypted in transit and at rest. It is isolated per account using row-level security so that nobody else signed into Test My Kid can read or write your data.

If you use Test My Kid while signed out, your past assessments are stored only in your browser's local storage and never leave your device. If you later sign in, we migrate that local history into your account and then clear it from the device.

Who has access

Only you, the account holder, can read or modify your own data. Google (the identity provider), Supabase (the database), Vercel (the hosting platform), and PostHog (our product analytics provider) have infrastructure-level access to their respective slices of the data, as is normal for any cloud application. No human at Test My Kid reads your data as part of operating the service.

We do not share, sell, rent, license, or otherwise transfer your data to third parties for advertising, partnerships, or data-broker arrangements.

Sharing your child's assessment

You can opt in to share an individual child's assessment page via a link. Sharing is off by default and is configured per child. You can turn the link off at any time from the child's page; the link stops working immediately, and you can turn it back on later with the same URL.

What's visible to anyone with the link: your first name (taken from your Google sign-in profile name), your child's first name, the derived grade level, topic intelligence, practice suggestions, readiness signal, alignment, topic exposure, and the child's assessment history (dates and grade results).

What is not visible:your last name, your email address, your child's birthday, ZIP, account information, or any other children on your account.

Share pages carry a noindex directive so search engines do not include them in results.

Joining a village with other families

You can invite up to five other families into a shared village so you can see each other's kids growing alongside yours. Invites are opt in on both sides: you have to send the link, and the other parent has to sign up through it. Either side can leave the village at any time, which removes the connection on both sides silently.

What other families in your village see about your children: each kid's first name, the avatar color, the in-game level number, the dino game high score (and which dino sprite set it), and how many months in a row the kid has completed at least one assessment. Nothing else.

What other families in your village never see: grades, assessed levels (Approaching, Meeting, or Exceeding grade language), per-topic mastery, individual assessment scores, recommendations, mistakes, or any content from any assessment question. The privacy boundary is enforced at the database query layer: the village page intentionally never reads those columns for anyone other than you.

How to leave:tap the “⋯” menu on any family in your village and choose “Remove from village.” The connection is dropped on both sides immediately. Neither side receives a notification.

The recipient join page (/village/join/...) and its share-image route carry a noindex directive so search engines do not include them in results.

Product analytics

We use PostHog (US-hosted) to understand how parents use Test My Kid — which pages get visited, which buttons get clicked, and where people get stuck. This is the main way we figure out what to build next.

What PostHog collects: pageviews, button clicks, navigation paths, browser metadata (browser version, operating system, screen size, and rough location derived from your IP address), and session replays— a reconstructed view of what you and your child see and interact with while using Test My Kid, including the assessment questions shown and which answer choices are clicked. Replays are reconstructed from your page's DOM (the HTML the browser is already rendering); we do not capture the literal pixels on your screen, do not access your camera or microphone, and cannot see other tabs or applications.

What is masked in session replays: the contents of all text input fields, including passwords, email addresses, names, and anything else you type into a form. Replays show that a field was typed into, but not the characters you typed.

What PostHog does not collect: raw keystrokes outside of recorded interactions, uploaded files, audio, or video.

PostHog requests are routed through our own domain via a server-side proxy, so no third-party tracking script loads directly in your browser. We do not link analytics events to your account; events are pseudonymous by browser. If you have Do Not Track enabled in your browser, we do not send any analytics events.

Test My Kid does not run advertising and does not embed third-party advertising or marketing scripts.

How to see, export, or delete your data

• See: the app surfaces everything we have about you. Your account email is in Settings; your children and their assessments are in the home and child detail pages.
• Delete a single assessment:open the assessment and click "Delete assessment".
• Delete a child:go to Settings, find the child, click Delete. The child's past assessments are kept in your account but marked unassigned.
• Delete your entire account:go to Settings and click "Delete account" at the bottom. This permanently removes your authentication record, your profile, all children you added, and all assessments. There is no soft-delete, no backup copy, and no way to recover.
• Export: we do not yet have a one-click export. If you need a copy of your data before deleting, contact us using the form below and we will send it.

Children's privacy (COPPA)

Test My Kid is intended to be used by parents and legal guardians, not directly by children. Children do not create accounts. By adding a child profile, you represent that you are the child's parent or legal guardian and that you consent to the collection and use of the child's data as described in this policy.

We apply data minimization to every piece of information we hold about a child. If, at any point, you want us to stop storing information about a specific child, deleting that child's profile in Settings removes everything tied to their name and birthday. Deleting your account removes all children under it.

Changes to this policy

If we change this policy in a material way, we will update the "Last updated" date at the top of this page. We will never apply changes retroactively to data we've already deleted.

Contact

Questions about this policy, your data, or anything else? Use our contact form:

Contact Form