1. Who we are
MyBrightPatha is a Canadian curriculum-connected learning platform. In this policy, “we,” “us,” and “the platform” refer to MyBrightPatha. Questions or requests may be submitted through our contact page by choosing “Privacy question.”
2. Information we collect
- Adult account details, including name, email address, role, authentication information, and account settings.
- Student account details, including display name, custom student ID, province or territory, grade, assigned subjects or courses, and guardian or classroom relationships. Students are not required to provide an email address.
- Learning information, including assigned work, answers, completion, accuracy, tutorial progress, support requests, and recommendations.
- Operational information, including security events, device and browser information, IP address, session records, and service diagnostics.
- Messages voluntarily submitted through support, contact, or feedback features.
We do not ask users to enter medical records, government identifiers, payment-card information, or unnecessary sensitive information into learning or support fields.
3. Why we use information
We use information to provide accounts and learning services, connect students with authorized adults and classes, personalize curriculum pathways, measure progress, operate the AI tutor, communicate about accounts, protect the platform, respond to support requests, comply with law, and improve accessibility and reliability.
4. Consent and children
Parents, guardians, teachers, and schools create or manage student access according to their authority and responsibilities. Student information is used only for educational and operational purposes described here. We seek meaningful consent from the appropriate person and use age-appropriate explanations for students. A parent or guardian may contact us to review, correct, export, restrict, or request deletion of a child’s information, subject to legal and educational record requirements.
5. When information is shared
We do not sell personal information or use student information for behavioural advertising. Information may be shared with an authorized parent, guardian, teacher, school, or service provider when needed to provide the platform. Providers may support hosting, databases, email, security, monitoring, backups, or AI processing and must be limited to the information needed for their work. We may also disclose information when required by law, to protect safety or security, or as part of a properly managed organizational transaction.
6. AI and automated recommendations
Student questions may be processed to provide tutoring responses. Authorized adults receive progress indicators and topic-level insights, not private conversation transcripts, unless disclosure is necessary for safety, investigation, or legal compliance. Automated recommendations support learning decisions; they do not make high-impact disciplinary, admissions, or final grading decisions.
7. Storage and international processing
We aim to use Canadian hosting where practical. Some carefully selected providers may process information outside a user’s province or outside Canada, where it may be subject to the laws of that location. Production provider locations and safeguards must be documented before launch.
8. Retention and deletion
We retain information only while an account or educational relationship is active and for a limited period afterward when needed for recovery, security, legal obligations, or legitimate educational records. Temporary security logs and support records use shorter retention periods. Backups expire on a managed schedule. Account deletion requests are verified before records are removed or de-identified.
9. Security
Safeguards include access controls, role-based permissions, password hashing, secure sessions, encryption in transit, account lockout protection, audit logs, restricted databases, backups, monitoring, and staff access limitations. No system can guarantee absolute security. We investigate suspected incidents and provide legally required notifications.
10. Your choices and rights
Depending on applicable law, you may request access, correction, explanation of use, withdrawal of consent, restriction, export, or deletion. We will verify identity and authority before responding. Withdrawing consent may prevent us from providing some services. You may also complain to the appropriate Canadian privacy regulator.
11. Changes
Material changes will be explained through the platform or by email when appropriate. The effective date at the top identifies the current version.