Cubit Privacy Policy

Effective date: November 2, 2026
Last updated: November 2, 2026

This policy explains what information Cubit collects on our website (cubitlearning.com) and in the Cubit learning app, how we use it, and the choices you have. Cubit is a Pre K to 12 homeschool learning app for families.

We wrote a separate, more detailed notice about children's information: the Cubit Kids' Privacy Notice at cubitlearning.com/kids-privacy. If anything in this policy and that notice ever seem to disagree about a child's information, the Kids' Privacy Notice controls.

1. Who we are

Cubit is operated by:

• CubitUSA LLC
• Mailing address: 10015 Metromont Industrial Blvd, Suite A, Charlotte, NC 28269
• Email: [email protected]
• Website: cubitlearning.com

We are the only company that collects or controls information on Cubit. Write to the email above with any privacy question.

2. Our promises, in short

• We never sell your information or your child's information.
• We never share your child's information with third parties.
• There are no ads in Cubit, and no ad tracking or behavioral advertising of any kind.
• Only a parent can create a child's profile, and only after giving consent.
• You can see, download, or delete your child's information at any time.
• We collect only what lessons and progress records need, and nothing more.
• We follow one strict set of rules for every family, in every state, and every parent gets the same rights. See section 10.

3. Information we collect

From visitors to our website

• Waitlist and contact forms: your name, email address, and anything you choose to write in a message.
• Basic technical information: like most websites, our hosting provider automatically logs things like your browser type, device type, IP address, and the pages you visit. We use this to keep the site running and secure.
• Cookies: we use only the cookies needed to run the site and remember your choices. We do not use advertising cookies.

Our website is meant for parents. Children should not fill out our website forms.

From parents who create an account

• Your name and email address
• A password (stored in scrambled form, so we cannot read it)
• The parent PIN you choose to lock the parent area (also stored scrambled)
• Notes and records you add, such as offline learning time, grade changes, and attendance
• Messages you send us, including problem reports
• Billing details, once paid accounts open. Payments will be handled by our payment processor, Stripe. We will not see or store your full card number.

From children, only after a parent gives consent

• First name or nickname
• Grade level
• Placement test answers and results
• Lesson answers, scores, progress, and which lessons are finished
• Learning time logs, including answer timing that helps us spot guessing
• Technical information needed to keep the app working and secure, such as device type, IP address, and an app identifier that keeps your child signed in

We do not ask for a child's last name, email, phone number, address, school, photo, video, or voice recording. The full details are in the Kids' Privacy Notice.

4. How we use information

• To run Cubit: create accounts and child profiles, show the right lessons, save work, and sync progress across your devices
• To show parents progress, time logs, attendance, and reports
• To send account emails, such as consent emails, password resets, renewal reminders, and important notices
• To answer your messages and fix problems you report
• To keep Cubit secure, find bugs, and prevent abuse
• To meet our legal duties

With your permission, we may also email you news about Cubit. You can unsubscribe at any time with the link in any of those emails. We never send marketing to children.

We do not use your child's information for advertising, to build marketing profiles, or to train outside AI models. We do not use anyone's information for targeted or behavioral advertising, and we do not profile children or teens to make decisions about them. The only "profile" we keep is a child's learning progress, used to pick the next lesson.

We do not collect precise location, health or disability information, or voice or face data, and we do not use any of it to make decisions about a child.

5. Who we share information with

We do not sell or rent anyone's information.

We use a small number of service providers who help us run Cubit. They may use information only to do that job for us, and we get written promises from each of them that they will keep it secure. The types of providers are:

• Website and app hosting and data storage: Cloudflare
• Parent's Assistant (AI): Cloudflare Workers AI. The Parent's Assistant is only for parents, sits behind the parent PIN, and children cannot use it. When a parent asks about their own child's progress, or asks for help planning the school week or for teaching suggestions, a short summary of that family's progress (scores, how many questions were missed, and in which skills) is sent to Cloudflare's AI only to answer that parent. The questions and answers are not saved; we keep only a count of how many questions were asked, for 90 days. It is not used to train AI and is not kept by Cloudflare for any other purpose.
• Email delivery: Resend. It receives a parent's email address and the message we send (such as a consent request, password reset or renewal reminder), never children's lesson data.
• Error and security monitoring: Cloudflare's own logs
• Payments, once paid accounts open: Stripe. The payment processor receives parent billing details only, never children's lesson data.

We may also share information if the law requires it, such as a valid court order, or if it is needed to protect someone's safety. If Cubit is ever sold or merged, we will tell you first, and any new owner must keep these promises or ask parents for new consent before handling children's information differently.

6. Children's information

Cubit is built for children, so children's privacy gets extra protection under a federal law called the Children's Online Privacy Protection Act (COPPA) and the FTC's rule under that law.

• We collect a child's information only after a parent gives consent. We use the "email plus" method: you give consent from your email, and then we send you a second email to confirm. You can take back that consent at any time.
• We treat every child profile this way, no matter the child's age, including teens 13 to 17. A parent gives consent separately for each child profile before it is created.
• Children cannot post anything publicly, chat with others, or share their information with anyone through Cubit.

Please read the Cubit Kids' Privacy Notice at cubitlearning.com/kids-privacy for the full details, including exactly what we collect, how long we keep it, and how to review or delete it.

7. How long we keep information

We keep information only as long as we need it for the reasons above. Our written retention policy for children's information is:

When a child's information is deleted:

• You delete a child's profile or close your account: it is removed from the app right away, deleted from our systems within 30 days, and cleared from backups within 35 days after that.
• You take back consent: we stop collecting right away, then delete on the same schedule.
• Inactive accounts: if no one has signed in and there is no active subscription for 12 months, we email you. If you do not ask us to keep the information within 30 days, we delete it.
• We never keep children's information forever.

Some parent records are kept longer because the law or our business needs them: billing records are kept as long as tax and accounting rules require, and the record showing that you gave consent is kept for the life of the account plus 3 years. These records contain no lesson data.

8. How we protect information

We keep a written information security program, as the COPPA Rule requires. It includes:

• A named person responsible for security
• A risk review at least once a year and before major new features
• Encrypted connections (HTTPS) and encrypted storage
• Access to children's data limited to the few people who need it, with strong passwords and two step login
• Testing before every release to make sure one family can never see another family's data, and that delete really deletes
• Written security promises from every service provider before they handle children's data
• A plan for responding to any security incident, including telling affected families

No system is perfectly secure, but we work hard to protect your family's information. If we ever learn of a breach that affects your information, we will tell you as the law requires.

9. Your choices and rights

• See and download: in the Parent area, open a child's profile and tap View data or Download data.
• Correct: you can change a child's name, nickname, or grade at any time.
• Pause: tap Pause profile to stop all collection from that child.
• Delete: tap Delete profile, or close your whole account.
• Email us: write to [email protected] from your account email. We will confirm you are the parent before sharing or deleting anything. We reply within 5 business days and finish requests within 30 days.
• Someone acting for you: you can have an authorized agent make a request for you. We will ask for your signed permission and confirm your identity before we act.
• Appeal: if we say no to any privacy request, you can appeal by replying to our answer or writing to [email protected] with the word "Appeal." We will answer your appeal in writing within 45 days and explain our decision. If you are still not satisfied, you can contact your state's Attorney General.
• Marketing emails: unsubscribe at any time. You will still get account and safety emails.

Tip: if you need attendance or progress records for your homeschool files, download them before you delete a profile.

10. One policy for every state

Cubit serves homeschool families in all 50 states and Washington, DC. Instead of different rules for different states, we follow one strict set of rules for everyone, built to meet the strictest state and federal laws for children's information:

• Parent consent for each child. A parent gives consent for each child profile before we collect anything from that child.
• Never sold. We never sell, rent, or trade anyone's information, and we never "share" it for cross context advertising. That includes sensitive information and all children's and teens' information.
• No targeted ads. Cubit has no ads at all, so there is no targeted advertising to anyone, at any age.
• Only what we need. We collect only what is needed to teach, save progress, and keep the app secure (section 3).
• Private by default. Children have no public profiles, no chat, no messaging, and no posting. We do not send children notifications, and nothing in the app rewards extra time once the day's lessons are done. The "days in a row" counter only counts days a child finished a lesson.
• Same rights everywhere. Every parent, in every state, can see, download, correct, and delete their family's information, and appeal if we say no (section 9). Because we never sell information or use it for targeted ads or profiling, there is nothing to opt out of, but you can always ask us to confirm that in writing.
• Written safeguards. We keep a written security program, a written retention policy, and a written review of the risks to children's privacy, and we update them at least once a year.
• Breach notice. If a breach affects your information, we will notify you, and any regulators, as the laws of your state require.

11. State-specific rights

The promises in section 10 apply to every family. The laws below give some families extra rights or ask us to say certain things. We meet all of them for everyone.

• California. We do not sell or share personal information, as those words are used in the California Consumer Privacy Act, and we have no plans to. We do not share information with anyone for their own direct marketing (California Civil Code 1798.83). Our website and app do not change how they handle information when a browser sends a "Do Not Track" signal, because we do no cross site tracking in the first place. We treat California's student privacy law (SOPIPA) as applying to Cubit: we do not use student information for targeted ads, we do not sell it, we do not build profiles except to support your child's learning, we keep it secure, and we delete it when you ask. Children cannot post content in Cubit, so there is nothing for a minor to remove, but we will delete anything you ask us to.
• Connecticut, Colorado, and Montana. We do not use children's or teens' information for targeted ads, sale, or profiling, and we would ask for consent before handling any sensitive information about a minor. We take reasonable care to avoid any heightened risk of harm to minors, and we keep a written review of those risks. If we deny a privacy request, you can appeal as described in section 9, and then contact your state's Attorney General.
• New York. Under the New York Child Data Protection Act, we handle information about teens 13 to 17 only as strictly needed to provide Cubit, or with consent that you can refuse or take back without losing access. We follow COPPA for children under 13. We never sell this information, and we respect device or browser signals that a user is a minor.
• Vermont. Starting January 1, 2027, under Vermont's Age Appropriate Design Code, we keep the protections in section 10 as our defaults: high privacy settings, only the information we need, no precise location, no profiling of children, and a duty of care toward the children who use Cubit.
• Nevada. We do not sell personal information. You can still send a request not to sell to [email protected], and we will confirm it.
• Delaware. We do not market or advertise any products to children, including the products Delaware law restricts.
• Texas, Nebraska, and Minnesota. We do not sell sensitive information, including any information about a known child.
• New Jersey. We never sell sensitive information, including children's information.
• Rhode Island. The kinds of information we collect are listed in section 3. The only companies that receive any of it are the service providers listed in section 5, and only to run Cubit for us. We do not sell information to anyone.

If you live in a state not listed here, you still get every promise and right in this policy.

12. Changes to this policy

If we change this policy, we will post the new version here with a new "Last updated" date and email account holders about important changes. If a change affects how we collect, use, or share children's information, we will ask parents for new consent before the change applies to their child.

13. Contact us

CubitUSA LLC
10015 Metromont Industrial Blvd, Suite A, Charlotte, NC 28269
[email protected]