Privacy & Security for Schools and Districts
Operated by Revenue Stream Builder LLC
Last reviewed: October 23, 2026
This page explains how Carryover Connect handles privacy and security for schools and districts. It uses plain, factual language.
1. What this is
Carryover Connect is a parent-managed home practice app for speech and language. There are no school or teacher accounts, and we do not receive student education records or district data.
If a school or district wants to use it, contact hello@carryoverconnect.com and we will review a data privacy agreement first.
2. Data we collect from children
The information we collect from children, and why we collect it, is shown below. This is the same table published in the Children's Privacy section of our Privacy Policy.
| Information | Why we collect it |
|---|---|
| Nickname | To personalize the experience and address the child by a friendly name. |
| Age band | To present age-appropriate activities. |
| Interests and favorite characters | To recommend activities your child enjoys. |
| Read-aloud and session-length settings | To match the practice experience to your child. |
| Practice sessions, streaks, badges, and favorites | To remember progress and celebrate consistency. |
| Device, browser, and IP in server logs | To keep the service working and secure. |
2.1 How long we keep it
The retention periods below are the same ones published in our Data Retention Policy, so this page and those two policies never disagree.
| Category | Why we keep it | How long | How it's deleted |
|---|---|---|---|
| Child profile and practice history | To personalize practice and remember progress | Until a parent deletes the profile or account, or after 12 months of inactivity (no sign-in and no practice sessions), whichever comes first. We email the parent 30 days and 7 days before deleting. Accounts with an active membership are not deleted for inactivity. | Automatically on deletion or on the inactivity schedule above. |
| Usage events | To keep the service working and improve it | 3 months | Automatic. |
| Bug reports | To investigate and resolve issues | 6 months after resolved, 12 months maximum | Automatic. |
| Parent account and sign-in | To operate your account | Until deleted by the parent or 12 months of inactivity | Automatically on the inactivity schedule. |
| Consent records | Proof of consent | While the account exists. After deletion we keep only a de-identified record (hashed email, policy version, consent and deletion dates, method; no names or emails) for 3 years. | De-identified record kept for 3 years, then deleted. |
| Free challenge access records | To track challenge participation | 12 months after access expires | Automatic. |
| Privacy requests | To respond to your request and show we answered it on time | Until the account is deleted, or 12 months after the request is completed | Automatic. |
| Admin access log | To show who at Carryover Connect accessed child data | 24 months | Automatic. |
| Pilot access records | To give pilot access | Until the account is deleted, or 12 months after access ends | Automatic. |
| Membership and billing records | Tax and legal recordkeeping | As required for tax and legal recordkeeping | Per legal recordkeeping requirements. |
3. What we do not do
We do not:
- Show advertising to children.
- Sell or rent personal data.
- Create behavioral profiles.
- Add third-party advertising or analytics trackers to the app.
- Use a microphone, or record or listen to your child.
- Offer chat or user-generated content.
- Allow open web access inside activities. Every outside link requires a grown-up check before it opens.
4. Service providers
The service providers we use, and what each one does, are listed in our Privacy Policy.
| Service provider | What they do |
|---|---|
| Base44 | Hosting, database, and sign-in |
| GoHighLevel | Checkout, parent email, and membership records (no child profile data) |
| Stripe | Payments |
| Optional parent sign-in | |
| ElevenLabs | Audio production only (receives no child data) |
5. Parent controls
A parent can:
- Review and download a child's data, from Profiles.
- Delete a child profile, from Profiles.
- Delete the account, from My Account.
- Revoke consent for a child, from Profiles.
- Submit a privacy request, from Help & Support or My Account.
6. Consent
Before a child can play, we obtain a parent's consent through a notice and an email confirmation for that child.
A parent can revoke consent at any time from Profiles.
7. Security
Access to data is role-based. A parent can only access their own account and child profiles.
Access to child data through Carryover Connect's administrator tools is logged.
8. Accessibility
We aim for WCAG 2.1 AA. We do not claim formal conformance.
Contact hello@carryoverconnect.com to report accessibility issues.
9. COPPA
Carryover Connect is designed to comply with the Children's Online Privacy Protection Act. See our Privacy Policy for details.
10. Contact
Revenue Stream Builder LLC
224 West 35th Street #500 2426, New York, NY 10001
Email: hello@carryoverconnect.com
Phone: +1 (332) 296-3452