Privacy Policy

Last updated: October 1, 2026

Who we are

Test My Kid (at testmykid.org) is an adaptive math and reading assessment for parents to understand approximately where their child stands academically today. The first assessment is free. After that, a family gets a 30-day free trial, and then it costs $99 a year per family. This policy explains what we collect, why, who else receives it, how long we keep it, and how you can see it, delete it, or stop us collecting it.

Test My Kid is operated by Jun Loayza, who is responsible for the information collected through it and answers every question about it.

Who uses Test My Kid

Parents and legal guardians who are 18 or older create accounts. A parent signs in with Google and adds a profile for each child. Children do not create accounts, and we never ask a child for an email address, a phone number, or any other way to contact them.

Children do use Test My Kid themselves. After a parent sets up a test on their own phone, tablet or computer, the child takes the math or reading assessment on that device, and can play a short dino game when the test ends. A parent can also let a child take a math assessment without signing in; the child's profile then lives only in that browser (see "If you are not signed in" below).

By adding a child, you tell us that you are the child's parent or legal guardian, and you consent, on the child's behalf, to the collection and use of the information described in this policy.

A new account also agrees once, on a one-time screen right after signing in with Google. The parent ticks a box to confirm that they are 18 or older, that they are the parent or legal guardian of any child they add, and that they agree to our Terms of Service and this Privacy Policy. We record the time they agreed and which version of the two they agreed to. Accounts created before we added this screen were not asked.

Children's privacy (COPPA)

This section, together with the sections it points to, is our notice to parents about the information we collect from and about children.

What we collect from or about a child:

  • Profile: first name (we ask only for a first name), birth month and year, from which we work out the school grade, and optionally a 5-digit ZIP code. A parent enters these, not the child.
  • Answers: the math answers your child types (usually numbers), the reading answers your child picks from multiple choices, and, when you choose open-ended answers for a reading test in grades 6 to 8, the sentences your child types, with the written feedback our AI grader gives on them.
  • How each test went: the questions your child was shown and in what order, whether each answer was right, wrong or skipped, the topic and skill each question covered, which reading passages were served and their grade, the grade level and level we work out at the end, the points earned and your child's in-game level, and when the test started and finished.
  • Dino game: scores, when each game was played, which dino was used, the power-ups your child has earned, and where each score ranks on the leaderboard.
  • Choices you make for a child: the reading answer style, and whether a share link or village sharing is turned on.
  • Analytics: using the site produces the analytics described under "Product analytics", whether a parent or a child is at the keyboard, including a random identifier stored in the browser.

Without signing in, a child can take only the math assessment. The child's profile, answers, results and dino scores then stay in that browser's storage. When a parent signs in, the profile and every result we can match to a child in the account move into the account; anything we cannot match stays in that browser until the parent claims it. For children, we do not ask for last names, photos, school names, or teacher names.

Can a child make information public? No. Test My Kid has no chat, comments, posts or public profiles, so a child cannot publish anything. A parent can choose to share: a share link shows a child's first name and results to anyone who has the link, and village sharing shows more to the families in your village. Both are described below. Dino game scores appear on the Test My Kid leaderboard, which anyone can see, with no name attached. A child's first name appears on the leaderboard only to the adults in their own family and the families in their village.

How we use it: to run each assessment (picking questions at the right level, grading answers, and working out the grade level), to show you your child's results and progress over time, to run the dino game and its leaderboard, to send the emails described below, and, through analytics, to understand and improve how Test My Kid works and to keep it working and secure. We never use a child's information for advertising, and we never sell it.

Emails that name your children: reminders to take an assessment go to the adults in your family and use your children's first names. An invitation to join your family, sent to the address you enter, names your children. When your family joins a village through an invite link, the owners and admins of the family that invited you get an email naming your children. The monthly village recap, sent to the families in your village, can name your child too, as described under "Joining a village with other families".

Who receives it: only the companies that run part of the service for us. Each is named under "Who has access" with what it receives and how long it keeps it.

How long we keep it, and your rights: see How long we keep information and See, delete, or stop collection. To reach us, see Contact.

What we collect about you

  • From you (the parent): your Google account email address and name, used to identify and authenticate your account. Google also passes along the address of your profile picture, which our sign-in provider stores with your account. We do not show or use it.
  • Your agreement to our policies: if your account was created after we added the one-time policies screen, the time you agreed to our Terms of Service and this Privacy Policy there, and which version you agreed to (named by the "Last updated" date of the two pages). We keep a record of each time you agree. We do not record your IP address or your device with it.
  • About your children: everything listed under "Children's privacy (COPPA)" above.
  • Your family and village: your family's name and time zone, the email addresses of adults you invite into your family, and which families are in your village.
  • Billing: whether your family is on a trial or a subscription, and its dates. Card details are entered on Stripe's checkout page and never reach our servers.
  • Email: your email preferences, and any message you send us through the contact form (your name, email address and message). If you join the waitlist, your email address.
  • Cookies and local storage: Supabase-issued authentication cookies that keep you signed in, and an analytics identifier stored in your browser's local storage (see "Product analytics" below). Three more cookies are set. When you are signed in, tmk_policy_ok remembers for 30 days that your account has agreed to our Terms of Service and this Privacy Policy, or did not need to, so that we do not check on every page. It holds your account's internal id, the version of the policies and when it was set, and nothing else. The other two are set only when you open a link another parent shared. Opening a shared assessment link (/share/...) sets tmk_share_ref, which holds that link's code for 30 days: if you create an account in that time, we record in analytics which family shared the link that brought you. Opening a village invite link (/village/join/...) sets tmk_village_invite, which holds the invite for 30 days so that signing in accepts it; if you are new, we also record in analytics which family invited you, and the invite is accepted once you have agreed to our policies. Signing in clears both. A new account's invite is the exception: it is kept, for up to its 30 days, so that it can be accepted after you agree. If you use Test My Kid without signing in, your children's profiles and results are kept in local storage too (see "If you are not signed in" below). No third-party advertising cookies.

Why we collect it

  • Your email and name exist so that we can keep your data across devices and so you can see which account you're signed into.
  • A child's first name and birth month and year personalize the experience (for example, greeting them by name, picking the right difficulty) and let you compare a child's results to previous tests.
  • ZIP code is optional. We do not use it yet. It is for a feature we are building that compares your child's progress with school-district norms. You can leave this blank.
  • Assessment results let you review how your child did over time.
  • The record of when you agreed to our policies, and to which version, shows what you agreed to and when.

How it's stored

When you are signed in, your data is stored in Supabase (a Postgres database), encrypted in transit and at rest. It is isolated per family using row-level security, so the only people signed into Test My Kid who can read or change it are you and the adults you invite into your family. What you choose to share by link or with your village is described below.

If you are not signed in

A child can take a math assessment without an account. The child's name, birth month and year, answers and results are stored only in your browser's local storage on that device. They are not sent to our database. If you later sign in, every result we can match to a child in your account moves into the account and is removed from the device. Anything we cannot match, or cannot save, stays in that browser until you claim it on your Village page or clear your browser's data for testmykid.org.

Analytics still runs while you are signed out, with less in it. See "Product analytics" below for exactly what is sent.

Who has access

You, and the adults you invite into your family, can read your family's data. We do not look through families' data. We open a specific account's records only to fix a problem with it, such as a test that did not finish grading, or when you ask us to.

These companies receive personal data or your children's data because they run part of the service for us:

  • Google runs sign-in. It learns that you signed into Test My Kid, and it gives us your email address, name and profile picture address.
  • Supabase is our database and sign-in service. It stores your account, your children's profiles, assessments and game scores, your family, village and billing status, your email preferences, and waitlist sign-ups.
  • Vercel hosts the website and runs our server code. Every request passes through it, including your IP address and the pages you visit, and it keeps request logs for up to 30 days.
  • PostHog provides product analytics, described under "Product analytics" below. On our plan it keeps analytics events for 1 year.
  • Resend sends our email. It receives your email address and name and the content of each email we send you, which can include your children's first names. The monthly village recap can include the first names of village children, as described under "Joining a village with other families". Resend also receives the email addresses of adults you invite into your family, your marketing email preference, waitlist email addresses, and contact form messages. It keeps the content of each email and its delivery logs for 30 days.
  • Stripe handles payments. It receives your email address, an internal id for your family, and the card details you enter on its checkout page. It receives nothing about your children. Stripe keeps payment records for as long as the law requires.
  • Anthropic grades typed reading answers with its AI model. For each typed answer we send the reading passage, the question and its type, the scoring guide and a model answer, your child's typed answer, and an internal random id for the test. We do not send your child's name or birth month and year, or your name, email address or account. Multiple choice reading answers are checked by our own code and are not sent. Math answers are never sent. Anthropic deletes what we send within 30 days, unless it is flagged for a review under its usage policy, in which case it can be kept for up to 2 years.

We do not share, sell, rent, license, or otherwise transfer your data to third parties for advertising, partnerships, or data-broker arrangements.

Sharing your child's assessment

You can opt in to share a child's assessment page via a link. Sharing is off by default and is set per child and per subject, so math and reading are shared separately. You can turn the link off at any time from the child's page; the link stops working immediately, and you can turn it back on later with the same URL.

What's visible to anyone with the link: your first name (taken from your Google sign-in profile name), your child's first name, the derived grade level, topic intelligence, practice suggestions, readiness signal, alignment, topic exposure, and the child's assessment history (dates and grade results).

Link previews: when you send a share link in a messaging app, the preview the app shows includes your child's first name and approximate grade level.

What is not visible: your last name, your email address, your child's birth month and year, ZIP, account information, or any other children on your account.

Share pages carry a noindex directive so search engines do not include them in results.

Joining a village with other families

You can invite other families into a shared village so you can see each other's kids growing alongside yours. A village holds up to 10 other families by default. Invites are opt in on both sides: you have to send the link, and the other parent has to sign up through it. Either side can leave the village at any time, which removes the connection on both sides silently.

What other families in your village see about your children: each kid's first name, the avatar color, the in-game level number, the dino game high score (and which dino sprite set it), and how many months in a row the kid has completed at least one assessment. They also see your family's name: the name set for your family, or one built from your Google name, or, if there is no name, from the part of your email address before the @.

If you turn on “Share with my village”: sharing with your village is off by default and is set per child and per subject. For a subject you share, village families also see that child's latest grade level and level (Approaching, Meeting, or Exceeding grade language) and when the test was taken, and they can open the same analysis a share link shows. Turning it off hides it again.

What other families in your village never see: grades or assessed levels for any subject you have not shared, your child's answers or the content of any assessment question, your child's birth month and year, or your full email address. Our server removes grades and levels for subjects you have not shared before it builds the village page, and the monthly village recap email follows the same rule.

The monthly village recap email: it goes to the families in your village. It names every village child who leveled up or set a new dino high score that month, with the score, whatever their family's sharing settings. Grade-level milestones appear in it only for the recipient's own children and for subjects a family shared with the village.

How to leave: tap the “⋯” menu on any family in your village and choose “Remove from village.” The connection is dropped on both sides immediately. Neither side receives a notification.

The recipient join page (/village/join/...) and its share-image route carry a noindex directive so search engines do not include them in results.

Product analytics

We use PostHog (US-hosted) to understand how families use Test My Kid: which pages get visited, which buttons get clicked, and where people get stuck. This is the main way we figure out what to build next.

What PostHog collects: pageviews, when you leave a page, button clicks, navigation paths, events for steps in the product (for example, that an assessment started or finished), measurements of how quickly pages load and respond, and browser metadata (browser version, operating system, screen size, and rough location derived from your IP address).

No recordings: We do not record sessions or messages from your browser's console. Until September 17, 2026, we recorded sessions: a rebuilt view of the page layout and what was clicked. Those recordings also included messages from the browser's console, which are technical notes the site writes for troubleshooting. Recordings made after September 15, 2026 had every word on the page masked. Earlier ones did not, so a recording made before that date can show the words a page displayed, including your child's first name where the page showed it. Our PostHog plan keeps recordings for up to 30 days. If you want the recordings from your family deleted, ask us and we will delete them.

The analytics identifier in your browser: PostHog stores a random identifier in your browser's local storage so that events from the same browser can be counted together. It does not contain your name, your child's name or your email address. We use it only to understand and improve how Test My Kid works, and to keep it working and secure. We never use it for advertising or to contact anyone, and we never sell it. No advertising or marketing scripts run on Test My Kid, so nothing else in your browser receives it. What happens to its events when you sign in is described below.

When you are signed in: analytics events are linked to your account. We attach your email address to your PostHog profile (and your first name when you sign up), along with account details such as how many children you have, how many assessments your family has completed, your subscription status, and an internal id for your family. Events about your child include an internal id for the child and the test, the grade worked out from the child's age, the grade level and level results, scores and points, whether each answer was right, wrong or skipped, the names of the topics and skills involved, which reading passages were served and their grade, and dino game scores. A click is recorded with the text of what was clicked, except a child's name (see "Children's names" below). Activity from before you signed in on the same browser is joined to your account.

When you are not signed in: analytics records that steps happened, such as that a math assessment started or finished, so we can see where people get stuck. Before an event leaves your browser, we remove the details that say which child it was, the grade or level worked out from the child's age, or how the child did on the assessment: scores and the skills they reached. On the assessment, results and dashboard pages, a click is recorded only as which kind of element and which link was clicked, without its text, styling or position. Your child's name and answers stay on your device. If you later sign in on that browser, those earlier events are joined to your account. Events recorded before we started removing these details still include them, and they are joined to your account the same way. Contact us if you want them removed.

Children's names: we keep them out of analytics. A child's name is not put into a page address, a page title, or the label of any link or button, and anything name-shaped that reaches one of those is stripped before the event leaves your browser. Where the app displays a name on screen, the name is marked so that a click on or near it is recorded without it.

What PostHog does not collect: keystrokes, uploaded files, audio, video, or error reports from your browser (the text of an error and where in our code it happened).

Events recorded on our servers: some events are sent to PostHog by our servers rather than your browser. Linked to your account: signing up (with your email address and first name), a typed reading assessment finishing grading (with its grade level, level and score) or failing to grade (with a fixed one-word reason, never any part of your child's answer), changes to your subscription, emails we send you and unsubscribes, changes to your family or village, and opening your village or a village child's shared analysis. With no account attached: joining the waitlist (without your email address), sending a contact form message (its length only), and opening some pages while signed out, such as the upgrade page or a village invite link.

PostHog requests are routed through our own domain via a server-side proxy, so no third-party tracking script loads directly in your browser.

Do Not Track: if your browser sends a Do Not Track signal, the analytics code in your browser records and sends no pageviews, clicks or events, does not load settings from PostHog, and does not send PostHog your account or email address. Your browser may still download PostHog's script files through our domain; those requests carry nothing about your account or what you do. Do Not Track does not affect the events recorded on our servers described above.

Test My Kid does not run advertising and does not embed third-party advertising or marketing scripts.

How long we keep information

We keep information only as long as we need it for the reason we collected it. For each kind of information, here is what it is for, whether and why we keep it, and when it is deleted.

  • Your children's profiles, results and dino scoresWhat it is for: running each assessment at the right level, showing you your child's results and progress, and the dino game.Why we keep it: comparing a child's results over time is what a regular assessment is for, so we keep them while your family uses Test My Kid.When it is deleted: when a parent deletes them (see "See, delete, or stop collection" below). Our policy is also to delete your family's children and their results 3 years after anyone in your family last used Test My Kid (signed in, or used the site while signed in). We will email the adults in your family 30 days before that happens, and signing in before then keeps them. This never happens to a family that has a paid or complimentary membership. Nothing has been deleted under this rule so far: no family has gone 3 years without using Test My Kid, and the earliest this could reach anyone is May 2029. A copy of the leaderboard, which includes first names, is rebuilt from current scores the next time someone opens the leaderboard, so a deleted child drops out of it then.
  • Unfinished assessmentsWhat it is for: letting a child pause a test and come back to it.Why we keep it: we need it only until the test is finished.When it is deleted: an assessment started while signed in and never finished is deleted 7 days after it was started.
  • A child's information in your browserWhat it is for: letting a child take a math assessment and see the results without an account, and holding on to a result that could not be saved to our database.Why we do not keep it: it stays on your device, where we cannot reach it.When it is deleted: when you sign in, every result we can match to a child in your account moves into the account and is removed from the device. Anything we cannot match, or cannot save, stays in that browser until you claim it on your Village page, delete the result on its page, or clear your browser's data for testmykid.org.
  • Analytics eventsWhat it is for: understanding and improving how Test My Kid works, and keeping it working and secure.Why we keep it: to compare how the site is used from month to month.When it is deleted: PostHog keeps analytics events for 1 year on our plan. Your PostHog profile, which holds your email address, is not deleted on a schedule; ask us and we will delete it.
  • Recordings made before September 17, 2026What it is for: seeing where pages were hard to use. We no longer make them.Why we do not keep them: they sit at PostHog, not with us, until its plan limit removes them. One made before September 15, 2026 can show the words a page displayed.When it is deleted: Our PostHog plan keeps recordings for up to 30 days. Ask us and we will delete the ones from your family.
  • EmailsWhat it is for: sending the emails described in this policy.Why we keep it: delivery records show whether an email arrived.When it is deleted: Resend keeps the content of each email and its delivery logs for 30 days. Emails already delivered stay in the inbox they were sent to. If you unsubscribe or report an email as spam, we keep a one-way scrambled code made from your email address, never the address itself, so that we keep honoring it.
  • Typed reading answers sent to AnthropicWhat it is for: grading the answer.Why we do not keep a copy there: the answer itself stays with the assessment in our database.When it is deleted: Anthropic deletes what we send within 30 days, unless it is flagged for a review under its usage policy, in which case it can be kept for up to 2 years.
  • Server logsWhat it is for: keeping the site working and secure.Why we keep it: to find and fix problems after they happen.When it is deleted: our hosting and database providers keep request logs, which include IP addresses and the pages requested, for up to 30 days.
  • Database backupsWhat it is for: restoring the service after a failure.Why we keep it: a backup is the only way to get families' results back if something goes wrong, and it is only useful for a short time.When it is deleted: our database is backed up once a day and each backup is kept 7 days, so deleted data can remain in a backup for up to 7 days after you delete it, and is then gone from the backups too. We started keeping backups on September 17, 2026. Before that date there were none.
  • Payment recordsWhat it is for: billing, refunds and taxes.Why we keep it: the law requires payment records to be kept.When it is deleted: Stripe keeps payment records for as long as the law requires.
  • Your accountWhat it is for: signing you in and keeping your family's information across devices.Why we keep it: you need it to use Test My Kid.When it is deleted: your sign-in record, profile, email preferences and the record of your agreement to our policies are kept until you delete your account. Some things are kept after that: analytics events already recorded (for the year PostHog keeps them) and your PostHog profile, emails already sent, your customer and payment record at Stripe, any entry for your email address on our email list at Resend or on our waitlist, and the scrambled codes that keep an unsubscribe or spam report honored. Invitations you sent to other adults, which hold their email address, are kept until your family is deleted or you delete your account. Messages you send us stay in our inbox. Ask us and we will delete any of these, except what Stripe must keep.

We do not keep information about a child forever. Each item above says when it is deleted.

See, delete, or stop collection

At any time, you can review your child's information, have it deleted, and tell us to stop collecting or using it. Here is how.

  • See: your account email is in Settings. Your children are on your Village page and in Settings, then Family, and each assessment's page lists every question with your child's answer. Analytics and email records are not shown in the app. To get a copy of any of it, contact us and we will send it.
  • Delete a single assessment: open the assessment and click "Delete assessment".
  • Delete a child: go to Settings, then Family, find the child, and click Delete. This removes the child's profile (first name, birth month and year, ZIP code), that child's past assessments, dino game scores and power-ups, and sharing settings and share links. In a family you share with another adult, it also removes tests that adult recorded for this child. There is no undo. Before September 18, 2026, deleting a child left that child's results stored with no link to any child. We deleted all of those on September 18, 2026.
  • Delete your entire account: go to Settings, then Account, and click "Delete account". This permanently removes your sign-in record and your profile. If you own your family and no other adult in it is an admin, it also deletes the family's children and their assessments. If another adult in the family is an admin, ownership passes to them, and the children and assessments stay with the family. Dino game scores played while you were signed in are deleted either way. There is no undo. What is kept after an account is deleted is listed under "How long we keep information".
  • Ask us to delete something: contact us and we will delete what you ask for, including analytics events and your PostHog profile, and your entry on our email list or waitlist. Stripe keeps payment records as the law requires.
  • Stop collection or use: delete the child, or your account, and nothing more is collected under that child's profile. For a reading test in grades 6 to 8, choose the "Multiple choice" answer style, and your child's answers are never sent to Anthropic. Turn off a share link or village sharing from the child's page, or leave a village. Turn off reminder and recap emails in Settings, then Notifications. Or contact us and tell us what to stop. A child cannot take an assessment without giving answers, so stopping all collection for a child also ends their assessments.
  • Export: we do not yet have a one-click export. If you need a copy of your data before deleting, contact us and we will send it.

How we confirm a request comes from the child's parent: we act on a request only when it is sent from, or confirmed by a reply from, the email address on a Test My Kid account in the child's family. If you write from another address, we email the account's address and wait for your reply.

Only what the assessment needs: a child can use Test My Kid without giving more information than the assessment needs, which is a first name, a birth month and year, and their answers. A ZIP code, sharing and villages are optional.

Changes to this policy

Before a material change to how we collect, use or share children's information takes effect, we will update this page and change the "Last updated" date at the top of it. Where the law requires us to tell parents directly, or to ask for your consent again, we will. Whenever this policy changes, that date changes too.

Contact

Questions about this policy or your child's information, or a request to see, delete or stop collecting it? Reach Jun Loayza, who operates Test My Kid:

  • Operator: Jun Loayza
  • Mailing address: Test My Kid, 8605 Santa Monica Blvd, PMB 81769, West Hollywood, CA 90069-4109, United States
  • Email: support@testmykid.org
  • Contact form: Contact Form