Privacy Policy

Mind Map is an educational platform operated by Jeremy Meadows under the brand "The Meadows Mindset" (we, us, our). Mind Map helps K–12 students learn through guided "expeditions" — short, AI-assisted learning paths covering vocabulary, quizzes, flashcards, and activities. You can reach us any time at theswoom@gmail.com.

This policy describes what personal information we collect, how we use it, who we share it with, and the choices you have. By using Mind Map you agree to the practices described here.

Mind Map is built for K–12 learners. Many of our users are children under 13. We comply with the U.S. Children's Online Privacy Protection Act ("COPPA") and design Mind Map so that the only path for a child to use the service is through a parent, teacher, or other authorized adult who has agreed to these terms on their behalf.

• Adult-managed accounts. Mind Map accounts are created and owned by parents, guardians, or educators ("Parent/Educator"). The Parent/Educator agrees to this Privacy Policy and our Terms of Service on the child's behalf and is responsible for the child's use of Mind Map.
• Child profiles ("climbers"). Inside an adult-managed account, the Parent/Educator may create one or more child profiles ("climbers"). For each climber we collect only a first name (or nickname), a grade level, and educational progress data (Altitude Points, badges, streaks, expedition answers). We do not ask children for their last name, email, phone number, home address, photos, or any other personally identifying information.
• No direct marketing to children. We never serve ads to climbers, never sell or rent child data, and never use child data for behavioral advertising of any kind.
• Parental rights. A Parent/Educator may at any time review their child's profile data, request a correction, or delete the climber and all associated data by removing the climber from the Mind Map dashboard or by emailing us at theswoom@gmail.com. We will honor verified deletion requests promptly.
• Verifiable parental consent. Account creation requires the adult to provide a working email address, agree to this policy, and accept the Terms of Service. The adult's billing relationship (handled through Stripe for paid plans) provides an additional layer of consent verification.

If you believe a child has created a Mind Map account or submitted personal information without proper parental consent, please contact us at theswoom@gmail.com and we will delete the account.

From the Parent/Educator who owns the account:

• Name and email address (for sign-in and account communications).
• A hashed password (we never store the plain-text password).
• Subscription state, billing status, and plan history (synced from Stripe).
• Records of agreement to these terms (date, version).
• Basic usage diagnostics (timestamps of logins, last activity).

From each climber profile:

• First name or nickname, grade level, and (optional) avatar selection.
• Learning progress: completed expeditions, scores, Altitude Points, badges, streaks.
• Free-text answers to expedition prompts (e.g., a Quick Write response). These are stored to score the activity and may be reviewed by the Parent/Educator on the dashboard.

Automatically collected:

• Basic device and browser metadata (user agent, screen size) used solely for compatibility and to render the Progressive Web App.
• Server-side logs of API requests (IP, endpoint, status code) retained for up to 30 days for security and debugging.

We do not use third-party advertising trackers and we do not embed third-party analytics that profile individuals.

We use the information we collect to:

• Provide, operate, and personalize the Mind Map learning experience.
• Generate expedition content tuned to a climber's grade level.
• Track Altitude Points, badges, streaks, and other gamified progress so the Parent/Educator can see how the climber is doing.
• Process subscription payments and prevent billing fraud through Stripe.
• Send transactional and lifecycle emails (welcome, password reset, trial reminders, subscription receipts, weekly progress reports). You can unsubscribe from non-essential emails at any time.
• Maintain account security, detect abuse, and enforce our Terms of Service.
• Comply with legal obligations and respond to lawful requests.

We use a small number of vendors to operate Mind Map. We share only the data each vendor needs to do its job, and only under contracts that require them to protect your information.

• Stripe processes subscription payments. When you upgrade to a paid plan, Stripe receives your name, email, billing address, and payment method. Mind Map never stores full credit card numbers — only a Stripe customer ID and the high-level subscription state.
• Resend delivers transactional and lifecycle emails on our behalf. Resend receives the recipient email address and the email content for each message we send you.
• Anthropic (Claude API) generates the educational text used inside expeditions (vocabulary, quizzes, guide narration). When a climber or Parent/Educator triggers expedition generation, Mind Map sends Anthropic the topic, grade level, and difficulty — never the climber's name, the account email, or any other identifying information. Anthropic processes these requests under their commercial terms and does not use submitted content to train their public models.
• Cloud hosting providers run our servers and database. They see only what is necessary to operate the service.

We do not sell, rent, or trade personal information to advertisers or data brokers. Period.

We keep account and climber data for as long as the account is active. When you delete a climber, the climber profile and associated expeditions are removed from active databases promptly. When you close your account, the account and all owned climbers are deleted (best-effort cancel of any active Stripe subscription happens automatically). Email delivery logs and payment records may be retained for a longer period as required by tax and accounting law.

We protect your account with bcrypt password hashing, encrypted connections (HTTPS/TLS) for all data in transit, and least-privilege access controls inside our infrastructure. We also operate an AI content-safety layer that filters expedition inputs and outputs to keep the platform age-appropriate.

No online service can promise perfect security. If we ever discover a security incident that affects your account, we will notify you by email and on the dashboard as soon as we reasonably can.

• Access and correction. You can view and update your account information at any time from the My Account page.
• Deletion. You can remove a climber from the dashboard or delete your entire account by emailing theswoom@gmail.com.
• Unsubscribe. Every non-essential email includes an unsubscribe link. We will continue to send essential transactional emails (password reset, payment receipts).
• Export. Email us if you want a copy of the data on your account; we will provide it in a portable format within 30 days.
• California, EU, and other jurisdictions. If you live in a place that grants you specific privacy rights (e.g., the right to know what we have, the right to delete, the right to object to processing), email us and we will honor those rights to the extent the law requires.

We may update this policy from time to time. When we do, we will update the "last updated" date at the top and post the new version at this URL. If the changes are material, we will notify you by email. Continued use of Mind Map after the changes go into effect constitutes acceptance.

Questions, requests, or privacy concerns? Email Jeremy Meadows at theswoom@gmail.com. We aim to respond within five business days.