BoostBOOST
LEGAL

Privacy Policy

Operated by Boost Ed LLC, a Maryland Limited Liability Company.

Effective Date: July 6, 2026 · Last Updated: July 26, 2026 · Version: 2.0-2026-07

Boost Ed LLC ("Boost," "we," "us," or "our") operates the Boost curriculum platform available at boost-basics.com and related applications (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over it. By using the Service you agree to this Policy.

Boost is designed for parents and legal guardians who are teaching K-5 physical education and health at home. Parents create the account, subscribe, and use the app on behalf of the children in their household. Children themselves do not create accounts, and Boost stores no personal information about them — see Section 4.

1. Information We Collect

1.1 Account Information (Parent)

Email address
Full name
Password (stored as a salted hash, never in plain text)
State of residence (used for state-portfolio compliance features)
Acceptance timestamp for our Terms & Conditions

1.2 Child Information — None

Boost stores NO personal information about children. Not names, not birthdays, not grade levels, not preferences, not any per-child progress. This is a deliberate design decision — Boost is priced per account, not per child, so there is no product reason to collect it.

Where a state portfolio requires a student's name, the parent adds it to the printed PDF themselves after downloading. The name never travels through Boost's systems.

1.3 Usage Data (Account-Level)

All engagement is attributed to the parent's account, never to any child:

Which lessons were viewed and marked complete on the account
Quiz responses per attempt (attributed to the account)
7-day challenge day-toggle activity
Video playback events aggregated by the video CDN (see Section 3)

1.4 Payment Information

We do NOT store or process credit card numbers, CVCs, expiration dates, or bank account numbers. All payments are processed by Stripe, Inc. Boost stores only the Stripe customer identifier, subscription identifier, subscription status, trial end date, and current billing period end. These are non-sensitive references issued by Stripe.

1.5 Technical & Device Data

IP address and general geographic location inferred from it
Browser type, operating system, and device type
Referral URL and campaign identifiers
Cookies and similar identifiers described in Section 6

1.6 Communications

If you contact us by email or the waitlist form, we retain the contents of that correspondence and any information you voluntarily provide.

2. How We Use Information

Provide, operate, and improve the Service.
Deliver post-lesson Boost Review emails and welcome emails to the account holder.
Generate exportable state-portfolio documentation on the parent's request.
Process subscription payments and honor cancellations or refunds.
Detect fraud, abuse, and unauthorized access.
Comply with legal obligations, respond to lawful requests, and enforce our Terms.
Communicate service changes, security notices, and (if you opt in) product updates.

3. How We Share Information

We do not sell your personal information. We share only what is necessary to operate the Service, and only with the following categories of subprocessors, each of which is contractually bound to protect the data they receive:

3.1 Infrastructure Subprocessors

Supabase, Inc. — hosted PostgreSQL database, authentication, and file storage.
Vercel, Inc. — application hosting, edge network, and web analytics.

3.2 Payments

Stripe, Inc. — subscription billing, card processing, tax handling. Card data is collected directly by Stripe and never touches Boost's systems.

3.3 Content Delivery

Mux, Inc. — video encoding and streaming for lesson videos and marketing content.

3.4 Email

Resend, Inc. — transactional and lifecycle email delivery.

3.5 Analytics

Google LLC — Google Analytics 4 measurement for marketing pages, subject to Google's own privacy terms. Vercel Analytics for privacy-preserving usage counts.

3.6 Legal, Safety, and Corporate Events

We may disclose information (a) to comply with a lawful subpoena, court order, or applicable law; (b) to protect the rights, safety, or property of Boost, our users, or third parties; or (c) in connection with a merger, acquisition, financing, reorganization, or sale of assets. If ownership changes, we will notify affected users and this Policy will continue to apply to information transferred to the new entity unless replaced by a policy with equivalent protections.

4. Children's Privacy

Boost is a parent-facing product. The Children's Online Privacy Protection Act ("COPPA") governs the online collection of personal information from children under 13. Boost's approach is the simplest one possible: we do not collect any information about children at all.

Specifically, Boost:

Does not collect names, birthdays, ages, grade levels, photos, biometrics, preferences, or any other personal information about children.
Does not attribute lesson completions, quiz responses, or portfolio records to any individual child — everything is stored at the account level under the parent's ID.
Does not allow children to create their own accounts, sign in, or submit information directly.
Does not display third-party behavioral advertising anywhere in the Service.

Because Boost does not collect personal information from children under 13, the verifiable parental consent requirements of COPPA §312.5 do not apply. If we ever learn that a child under 13 has independently submitted personal information to us (for example, through the contact form), we will delete that information as promptly as reasonably possible.

5. Data Retention

We keep account and usage data for as long as the account is active. When a parent cancels their subscription, account records are retained for a reasonable period to allow reinstatement, then deleted unless we have a legal reason to retain the data longer (for example, transaction records required for tax or accounting purposes). A parent can request earlier deletion at any time.

6. Cookies and Similar Technologies

We use cookies and similar technologies for these purposes only:

Essential: keeping you signed in, remembering your session, storing referral codes at signup.
Analytics: aggregate, privacy-preserving usage counts via Vercel Analytics and Google Analytics 4 on marketing pages.

We do not use cookies for behavioral advertising or cross-site tracking. Most browsers let you block or delete cookies. Blocking essential cookies will make the Service unusable.

7. Security

We take reasonable technical and organizational measures to protect the information we hold, including TLS encryption in transit, encrypted storage at rest through our infrastructure providers, role-based access controls, and least-privilege service credentials. No system is ever fully secure. If we discover a security incident that materially affects your data, we will notify affected users as required by applicable law.

8. Your Rights

Depending on where you live, you may have some or all of the following rights over your personal information:

Access — request a copy of the personal information we hold about you.
Correction — ask us to correct information that is inaccurate or incomplete.
Deletion — ask us to delete your account and associated data.
Portability — receive your data in a machine-readable format.
Objection — object to certain uses of your data.
Opt out of marketing — unsubscribe from lifecycle marketing emails using the link at the bottom of every marketing message.

To exercise any of these rights, email us at the address in Section 11. We may need to verify your identity before responding. We will not discriminate against you for exercising any privacy right.

9. California Residents (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), including the rights described in Section 8 and the right to know the categories of personal information collected, disclosed, or sold. Boost does not sell personal information and does not share it for cross-context behavioral advertising.

The categories of information we collect are described in Section 1. Categories of recipients are described in Section 3. To exercise your California rights, contact us at the address in Section 11.

10. International Users

Boost is operated from the United States. If you access the Service from outside the U.S., you understand your information may be processed and stored in the U.S. and other countries whose data protection laws may differ from your own. Where required by law, we will use appropriate safeguards (for example, standard contractual clauses) when transferring personal data internationally.

11. Contact Us

Questions, concerns, or requests about this Policy or your personal information can be sent to:

Email: info@boost-basics.com
Postal: Boost Ed LLC, 204 East Earle Ave, Easton, MD 21601

12. Changes to This Policy

We may update this Policy from time to time. When we do, we will change the "Last Updated" date at the top of the page and, for material changes, notify active account holders by email. Continued use of the Service after an update means you accept the revised Policy.