Legal
Privacy Policy
1. Who We Are
PracticeNest (“we,” “us,” or “our”) operates the website and service at practicenest.ca. We are a Canadian company that provides AI-powered, curriculum-aligned practice sheets for K–8 students. Our service is directed to parents and guardians (“you”) in Canada. Children do not directly use or access PracticeNest — parents manage everything on their behalf.
For privacy questions, contact us at: privacy@practicenest.ca
2. Scope of This Policy
This Privacy Policy explains:
- What personal information we collect and why
- How we use, store, and protect it
- Who we share it with (and who we do not)
- Your rights under Canadian privacy law (PIPEDA)
- How to contact us with questions or requests
By creating an account, you consent to the practices described in this Policy.
3. Information We Collect
3.1 Information You Provide Directly
| Category | Examples | Why We Collect It |
|---|---|---|
| Account information | Name and email address (obtained via Google sign-in at sign-up) | To create and manage your account; to send you transactional emails |
| Child profile information | Child’s first name, grade level, optional learning notes | To personalize practice sheets for your child |
| Payment information | Billing plan selection; payment card details entered via our payment processor | To process your subscription |
| Support communications | Messages you send us via chat or email | To resolve your support request |
We do not collect:
- Your child’s full name, date of birth, school name, photo, or precise location
- Government identification numbers
- Health or medical information
3.2 Information We Collect Automatically
| Category | Examples | Why We Collect It |
|---|---|---|
| Usage data | Pages visited, sheets generated, subjects selected, document opens and downloads | To improve the product and measure key engagement metrics |
| Device and browser data | Browser type, operating system, screen size, IP address (country-level) | To ensure compatibility and detect country for appropriate pricing display |
| Session data | Authentication tokens | To keep you securely signed in |
| AI cost and usage data | Tokens consumed per generation (no personal content retained at cost-tracking level) | Internal cost management |
3.3 Information We Receive from Third Parties
| Source | What We Receive | Why |
|---|---|---|
| Google (via sign-in) | Display name, email address, Google Drive access permission | Sign-up authentication and one-click Google Docs export |
| Payment processor | Payment confirmation, subscription status, partial card identifier | Billing and subscription management |
4. How We Use Your Information
We use personal information only for the following purposes:
- Provide the service — generate curriculum-aligned practice sheets tailored to your child’s profile and session history
- Account management — create and maintain your account; manage child profiles
- Subscription billing — process payments, handle trials, send receipts
- Product communications — send transactional emails (welcome, trial reminders, payment receipts, renewal notices)
- Product improvement — analyze aggregate usage patterns to improve sheet quality, onboarding, and features
- Safety and fraud prevention — detect and prevent abuse of the service
- Legal compliance — meet our obligations under PIPEDA and applicable Canadian law
We do not use your information for:
- Selling your data to third parties
- Behavioural advertising or ad targeting
- Profiling your child for purposes beyond personalized sheet generation
- Sharing with schools, teachers, or any educational institution
5. Google Drive Integration
When you sign up with Google, you grant PracticeNest permission to create documents in your Google Drive. Here is how we use that permission:
- We create a copy of your generated practice sheet in your own Google Drive when you click “Open in Google Docs.”
- The document is private to your Google account — we do not retain access to it after creation.
- We do not read, index, or analyze documents stored in your Google Drive.
- You can revoke this permission at any time via your Google Account Security settings. Revoking access does not delete previously created documents from your Drive.
6. Session Memory and Sheet Storage
The amount of session history and sheet storage available to you depends on your subscription plan, as described on our website. Session memory contains subject, grade, topics, and optional interests or struggles as entered by you. It does not contain full conversational transcripts beyond what is needed for personalization.
All session data is private to your account and not shared with any third party.
7. Information Sharing
We do not sell, rent, or trade your personal information. We share it only with service providers who help us operate PracticeNest, including:
- Payment processor — to handle subscription billing (we never store raw card numbers)
- Google — for sign-in authentication and Google Docs sheet creation
- Analytics providers — for pseudonymous product event tracking (no raw personal information shared)
- Email service providers — to deliver transactional and lifecycle emails
- Customer support platforms — to manage support conversations
All service providers are bound by data processing agreements and may not use your data for their own purposes.
We may disclose information if required by a valid Canadian court order or law enforcement request, and will notify you where legally permitted to do so.
8. Children’s Privacy
PracticeNest is designed for parents and guardians — our service is not directed to children, and children do not create accounts or interact directly with the platform.
- We collect only the minimum child information necessary to personalize sheets: first name, grade, and optional learning notes you provide.
- We do not collect a child’s full name, date of birth, photo, school, or location.
- Child profile data is linked to the parent’s account and is accessible only by that account.
- If you believe we have inadvertently collected personal information about a child without parental consent, please contact us at privacy@practicenest.ca and we will delete it promptly.
9. Data Retention
| Data Type | Retention Period |
|---|---|
| Account and child profile data | Active account duration + 30 days after deletion request |
| Sheets and session memory | Per your subscription plan; deleted with your account |
| Billing records | Duration of subscription + 1 year (for dispute purposes) |
| Support communications | 2 years |
| Analytics event data (pseudonymous) | 2 years |
When you delete your account, we delete all personal information within 30 days, except where retention is required by law (e.g., billing records).
10. Security
We implement industry-standard security measures:
- Data in transit: TLS 1.2+ encryption on all connections
- Data at rest: AES-256 encryption
- Authentication: Google sign-in only (no passwords stored by PracticeNest)
- Payment data: Processed by a PCI-DSS certified payment processor — we never store raw card data
- Penetration testing: Conducted before public launch and periodically thereafter
No system is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@practicenest.ca.
11. Your Rights Under PIPEDA
As a Canadian resident, you have the right to:
| Right | What It Means |
|---|---|
| Access | Request a copy of the personal information we hold about you |
| Correction | Request that inaccurate information be corrected |
| Withdrawal of consent | Withdraw consent to certain uses of your data (may affect service availability) |
| Data portability | Download your account data in a machine-readable format (via Account Settings) |
| Deletion | Request deletion of your account and all associated personal information |
To exercise any of these rights, contact us at privacy@practicenest.ca. We will respond within 30 days.
If you are unsatisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
12. Cookies and Tracking
We use:
- Strictly necessary cookies: Session authentication stored as a secure, HttpOnly cookie
- Analytics cookies: Pseudonymous event tracking for product usage purposes only — no cross-site tracking
We do not use third-party advertising cookies or tracking pixels from ad networks.
You can disable analytics cookies via your browser settings without affecting core product functionality.
13. Changes to This Policy
We will notify you of material changes to this Privacy Policy via email to your registered address and/or a prominent in-app notice at least 14 days before the change takes effect. Continued use of PracticeNest after the effective date constitutes acceptance of the updated Policy.