Privacy Policy
Last updated: May 2, 2026
1. Summary
Homeschool Genius is built to help your family plan and document schooling. We collect only what we need to run the service, we don’t sell or share your data with advertisers, and we don’t use third-party analytics or tracking cookies. The rest of this policy spells out the details.
This policy applies to homeschoolgenius.com and any subdomain operated by OffByOne LLC.
2. Cookies we use
Every cookie below is first-party (set by us, on our domain) and strictly necessary or functional — required either to deliver the service you requested by signing in, or to remember a UI preference you chose explicitly (which calendar view to show, which children to filter to, etc.). We do not set or use any tracking, advertising, or analytics cookies.
| Cookie | Purpose | Strictly necessary |
|---|---|---|
| authjs.session-token | Signed JWT session set by Auth.js — keeps you signed in across requests. | Yes |
| authjs.csrf-token | CSRF protection for Auth.js sign-in / sign-out endpoints. | Yes |
| authjs.callback-url | Stores the URL to return to after Google OAuth completes; cleared once sign-in finishes. | Yes |
| tz | Your IANA timezone (e.g., America/New_York) so server-rendered dates match your wall clock. | Yes (UI correctness) |
| hp-weekends | Remembers whether the calendar shows or hides weekend columns. | Yes (UI preference) |
| hp-child-filter | Remembers which children you’ve filtered to in the calendar and day views. | Yes (UI preference) |
| hp-search-per-page | Remembers your search results-per-page preference. | Yes (UI preference) |
You can clear or block these cookies in your browser’s settings. Blocking the Auth.js cookies will prevent you from signing in. Blocking the others will reset the corresponding UI preference back to its default but won’t affect your ability to use the service.
3. No third-party tracking
We do not use Google Analytics, Plausible, Mixpanel, Hotjar, Facebook / Meta Pixel, or any other third-party analytics or tracking tool. We do not run advertising, retargeting, or behavioural-segmentation tags. No third party drops a cookie or script on your browser through our site. If this changes — for example, if we add an analytics tool to understand product usage — we will update this page first and, where required, collect your consent before any tracking begins.
4. Email
We send transactional email through Amazon Simple Email Service (SES) from the domain homeschoolgenius.com. The categories of email we send are:
- Account email — sign-in confirmations, password recovery (when applicable), and security notifications. Sent only when triggered by your action and only to the address on your account.
- Reminder email — daily / weekly summaries of scheduled school activities. Strictly opt-in: we never send these unless you explicitly enable them in your account settings.
Every reminder email includes an RFC 8058 one-click unsubscribe header (List-Unsubscribe + List-Unsubscribe-Post) so Gmail / Apple Mail / Outlook can unsubscribe you with a single click, plus an unsubscribe link in the footer. Either path turns reminders off immediately and we never re-enable them automatically. We do not sell, rent, or share your email address with any third party.
5. Data we store
The data you put into the service — children’s names, activities, notes, attachments, school-year configuration — is stored on AWS infrastructure in the United States. Access is scoped to your account and the household members you’ve invited. We don’t look at your content except as needed to operate the service (debugging an issue you report, responding to a legal request, or running the content-moderation pipeline described below).
Image attachments pass through an automated content-moderation pipeline (AWS Rekognition) before they become visible in the app, to detect and prevent the upload of illegal content. The moderation system is automated; an image flagged for review is handled per the procedures in our DMCA + incident-response documentation.
6. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise these rights, email privacy@offbyone.click. We’ll respond within the timeframe required by applicable law (typically 30 days under GDPR, 45 days under CCPA).
7. Children's data
Homeschool Genius is operated by parents and guardians on behalf of their own household. Children’s names, birth dates, activities, and uploaded attachments are entered by the account-holding parent. The service is not directed to children under 13 as primary users; children don’t create their own accounts.
8. Changes to this policy
When the cookie inventory or any material practice in this policy changes, we update the “Last updated” date at the top of this page. For material changes (e.g., adding any new third-party tool that touches your data), we will also notify signed-in users via in-app banner or email before the change takes effect.
9. Contact
Questions or concerns: email privacy@offbyone.click. The service is operated by OffByOne LLC.