Beyond Privacy Policy

Effective Date: [MONTH DAY, YEAR]
Last Updated: [MONTH DAY, YEAR]

This Privacy Policy explains how Beyond Generations LLC, doing business as Beyond ("Beyond," "we," "us," or "our"), collects, uses, discloses, retains, and protects personal information when you use the Beyond website, applications, and services.

The "Services" include BeyondSchool, family and student profiles, work samples, portfolios, attendance tools, reports, memories, journals, Future Letters, Time Capsule features, Autofill, Generated Summary, and any other Beyond feature or service that links to this Privacy Policy.

By using the Services, you acknowledge the practices described in this Privacy Policy. Our Terms & Conditions govern your use of the Services.

1. Our Privacy Commitments

Beyond is designed for families. We follow these core principles:

• Family profiles and Family Content are private by default.
• An adult controls each family account.
• Children cannot independently create or own a Beyond account.
• We do not sell personal information.
• We do not share personal information for cross-context behavioral advertising.
• We do not use Family Content to target advertising to children or families.
• We do not use private Family Content to train general-purpose models.
• We do not permit service providers to use private Family Content to train models for their own purposes.
• We do not use uploaded photos, videos, or audio to create facial-recognition templates, voiceprints, or other biometric identifiers for identification or authentication.
• Adult Account Owners can request access to, correction of, export of, or deletion of information associated with their family account.

These commitments apply unless a user specifically directs us to share information, disclosure is necessary to provide a requested feature, or disclosure is required or permitted by law.

2. Who Controls a Family Account

Only a person who is at least 18 years old and legally capable of entering a contract may create and own a Beyond family account.

The adult who creates the account is the "Account Owner." The Account Owner may create profiles for children and other family members, invite authorized users, assign permissions, and control the family's information.

A teenager age 13 through 17 may create their own sign-in only through an invitation from the adult Account Owner and with the permission and supervision of a parent or legal guardian. Family owner and family manager permissions are available only to adults. A child under 13 may use a parent-managed profile but may not create login credentials. A child may not purchase a subscription, accept our Terms & Conditions, or provide consent on behalf of a parent.

3. Information We Collect

The information we collect depends on the features you use.

3.1 Account user information

When an adult creates or manages an account, or an invited person age 13 through 17 creates a sign-in, we may collect:

• name;
• date of birth and age;
• gender, if provided;
• email address;
• telephone number, if provided;
• profile photograph;
• account role and permissions;
• authentication information;
• records of legal notices, policies, and acknowledgements presented to you;
• communication preferences;
• subscription plan and billing status;
• transaction identifiers and payment history; and
• support and account correspondence.

Passwords are handled through protected authentication systems. We generally do not receive or store full payment-card numbers when payments are processed by a payment provider or app marketplace.

3.2 Family-member and child profile information

An Account Owner may create profiles for children and other family members. Profile information may include:

• name and nickname;
• date of birth and age;
• relationship to the Account Owner;
• profile photograph;
• grade level and school year;
• educational subjects, interests, and activities;
• family membership and account permissions;
• optional height, weight, and growth information; and
• other information the Account Owner chooses to provide.

We do not require more personal information from a child than is reasonably necessary to use the applicable feature.

3.3 Family Content

"Family Content" means information, files, and material that users create, enter, record, or upload through the Services. Family Content may include:

• work samples and assignments;
• photographs, videos, audio recordings, and documents;
• educational portfolios;
• attendance records;
• educational notes, subjects, grades, and dates;
• journals and journal entries;
• memories, stories, milestones, and answers to prompts;
• Future Letters and delivery instructions;
• family history and profile information;
• optional growth records;
• reports, captions, descriptions, and summaries; and
• information contained within uploaded files.

Family Content may include personal or sensitive information about children and other people. The Account Owner controls whether to provide this information and which authorized users may access it.

Beyond is not designed to store Social Security numbers, government identification numbers, financial-account credentials, medical records, or similar high-risk records. Please do not upload this information unless Beyond expressly introduces a feature designed to collect it and provides an appropriate notice.

3.4 Autofill, Generated Summary, transcription, and media processing

When a user requests Autofill, Generated Summary, transcription, file analysis, media conversion, or another processing feature, Beyond may process the selected content to:

• extract text or metadata;
• transcribe spoken content;
• identify possible dates, subjects, titles, or descriptions;
• generate a proposed summary;
• organize or categorize content; or
• suggest information for a work sample, memory, journal entry, portfolio, report, or other record.

The selected content may be transmitted to service providers that process information on Beyond's behalf. Those providers may use the information only to provide the requested service, protect the service, and comply with applicable law. They may not use private Family Content for advertising, independent profiling, or their own general model training.

Generated or extracted results may be inaccurate. Users decide whether to accept, edit, or reject them.

3.5 Device, usage, and security information

When you use the Services, we may automatically collect:

• Internet Protocol address;
• browser and device type;
• operating system;
• app version;
• device, account, and session identifiers;
• approximate location derived from an IP address;
• login dates and times;
• pages, screens, and features used;
• referring page;
• cookie and local-storage information;
• crash and performance information;
• diagnostic logs; and
• authentication, fraud-prevention, and security events.

Persistent identifiers collected in child-directed portions of the Services are used only as reasonably necessary to authenticate users, maintain sessions, provide requested functionality, understand service performance, prevent fraud, protect security, or comply with law. We do not use them for behavioral advertising or to build profiles across unrelated services.

3.6 Payment information

Payments may be processed by a payment processor, an app marketplace, or another authorized billing provider. Those providers may collect payment-card information, billing information, and transaction details under their own terms and privacy policies.

Beyond may receive limited information such as:

• the subscription or plan purchased;
• transaction and receipt identifiers;
• payment amount and date;
• renewal date;
• payment status; and
• limited billing contact information.

3.7 Communications

We collect information when you contact support, submit feedback, report a problem, respond to a survey, or otherwise communicate with us. This may include the content of your message and any files you choose to attach.

3.8 Information from invited users

When an Account Owner invites another person, we may collect the invitee's name, date of birth, gender if provided, email address, account role, invitation status, and activity within the permissions granted to that person.

4. How We Use Information

We use personal information and Family Content to:

1. create, authenticate, and manage accounts;
2. create and maintain family-member and child profiles;
3. store, organize, display, and preserve Family Content;
4. provide work samples, portfolios, attendance tools, reports, memories, journals, Future Letters, and related features;
5. provide Autofill, Generated Summary, transcription, and other user-requested processing;
6. synchronize information across authorized devices;
7. allow Account Owners to invite and manage authorized users;
8. process subscriptions and payments;
9. send account, security, billing, renewal, parental, and service communications;
10. respond to support requests;
11. detect, investigate, and prevent fraud, misuse, unauthorized access, and security incidents;
12. troubleshoot and improve the reliability, accessibility, and usability of the Services;
13. enforce our Terms & Conditions and other agreements;
14. comply with legal obligations; and
15. protect the rights, safety, and integrity of Beyond, our users, children, and others.

We may use aggregated or deidentified information to understand general use of the Services and improve the product. We do not attempt to reidentify information that we maintain as deidentified, except to test whether our deidentification methods are effective.

5. Children's Privacy

5.1 Adult-controlled access

Beyond is intended to be controlled by parents and legal guardians. A child under 13 may not create login credentials or provide consent to Beyond. In the current version of Beyond, children under 13 use a profile managed by the adult Account Owner rather than a separate sign-in.

A person age 13 through 17 may create a sign-in only through a valid family invitation and with the permission and supervision of a parent or legal guardian. The adult Account Owner controls that person's family role and access.

If a child uses a parent-created profile to enter, record, or upload information, Beyond may collect personal information directly from that child. Where required, we provide the parent or legal guardian with direct notice and obtain verifiable parental consent before collecting, using, or disclosing that information.

5.2 Information that may be collected from a child

Depending on the features enabled by the Account Owner, information collected from a child may include:

• name or nickname;
• birthdate, age, or grade;
• profile image;
• schoolwork and educational records;
• attendance information;
• interests and activities;
• photographs and videos;
• audio recordings containing the child's voice;
• memories, stories, journals, and Future Letters;
• optional height and weight information;
• information contained in content submitted by the child; and
• device identifiers, usage information, and technical logs needed to operate and secure the Services.

5.3 Parental notice and consent

Where parental consent is required, our direct notice explains:

• the information we intend to collect;
• how the information will be used;
• the categories of service providers or recipients that may receive it;
• whether a disclosure is necessary to provide the requested feature;
• how long the information will be retained;
• how the parent can review, correct, export, or delete it; and
• how the parent can withdraw consent.

We use a verification method reasonably designed to confirm that the person providing consent is the child's parent or legal guardian.

If a proposed disclosure is not integral to providing the Services, we will request separate parental authorization before making that disclosure. A parent may consent to the collection and internal use of a child's information without consenting to an optional, nonessential disclosure.

5.4 Parent and guardian rights

A verified parent or legal guardian may:

• review the categories of information collected from a child;
• access the child's information;
• correct inaccurate information;
• download or export the child's information;
• direct us to stop further collection or use;
• withdraw previously provided consent; and
• request deletion of the child's profile and personal information.

These controls may be available through the account or by contacting [email protected].

Withdrawing consent or deleting information may prevent the child from continuing to use features that require that information.

5.5 No public child profiles

Beyond does not make a child's profile or Family Content public by default.

Information may be viewed by the Account Owner and other users whom the Account Owner authorizes. Any future feature that would make a child's information public or disclose it to a nonessential recipient will require clear notice and any legally required separate consent.

5.6 No advertising or biometric identification

Beyond does not:

• sell children's personal information;
• share children's personal information for cross-context behavioral advertising;
• use children's Family Content for targeted advertising;
• allow advertising networks to track children across unrelated services; or
• use a child's image, voice, or other characteristics to create biometric identifiers for identification or authentication.

6. How We Disclose Information

We disclose information only as described below.

6.1 Authorized family members and users

Information may be made available to family members, caregivers, tutors, or other people whom the Account Owner invites or authorizes.

The Account Owner is responsible for:

• choosing whom to invite;
• assigning appropriate permissions;
• reviewing access periodically;
• removing access when it is no longer appropriate; and
• ensuring invited users handle family information responsibly.

An authorized recipient may create copies outside Beyond. Beyond cannot control copies independently created by a person whom the Account Owner authorized to access the content.

6.2 Service providers supporting Beyond

We use carefully selected service providers to operate, secure, and support the Services. Their functions may include:

• cloud hosting, database services, and file storage;
• account authentication;
• content delivery and network security;
• subscription and payment processing;
• transactional email and notifications;
• customer support;
• application diagnostics and error monitoring;
• file and media processing;
• transcription; and
• user-requested Autofill and Generated Summary processing.

These providers may process information only as reasonably necessary to perform services for Beyond, protect the Services, or comply with applicable law. We require them to protect personal information and restrict their use of it based on the services they perform.

We do not permit service providers to sell Family Content, use Family Content for targeted advertising, or use private Family Content to train their own general-purpose models.

6.3 Legal, security, and safety reasons

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law, regulation, subpoena, court order, or legal process;
• investigate fraud, misuse, or a security incident;
• enforce our agreements;
• protect the safety of a child or another person;
• protect the rights, property, or security of Beyond or our users; or
• respond to a lawful emergency request.

We evaluate legal requests and seek to disclose only information we reasonably believe is required.

6.4 Business transactions

Information may be transferred as part of a merger, financing, acquisition, restructuring, bankruptcy, or sale of some or all of our business.

A successor that receives children's personal information must continue to protect it consistently with this Privacy Policy unless the parent receives notice and any legally required opportunity to consent to a materially different use.

6.5 At the Account Owner's direction

We may disclose information when the Account Owner asks us to export, share, transmit, or integrate it with another service.

Where the requested disclosure involves a child's personal information and is not integral to the Services, we will provide any additional notice or consent choice required by law.

7. No Sale or Behavioral Advertising

Beyond does not sell personal information for money or other commercial value.

Beyond does not share personal information for cross-context behavioral advertising and does not use Family Content to target advertising.

We do not use advertising networks or data brokers to monetize family or child information.

8. Cookies and Similar Technologies

Beyond may use cookies, local storage, and similar technologies to:

• keep users signed in;
• maintain sessions;
• remember preferences;
• protect account security;
• prevent fraud;
• measure performance; and
• understand whether features are functioning correctly.

We do not use advertising cookies or third-party behavioral-advertising trackers in child-directed portions of the Services.

You may adjust browser settings to restrict cookies, although essential parts of the Services may not work correctly without them.

9. Data Retention and Deletion Policy

We retain information only for as long as reasonably necessary for the purpose for which it was collected, to provide the Services, maintain security, resolve disputes, and meet legal obligations. We do not retain personal information collected from children indefinitely.

Our general retention timeframes are described below.

9.1 Family profiles and Family Content

Family profiles, work samples, portfolios, attendance records, memories, journals, recordings, Future Letters, and other Family Content are retained while the relevant account or profile remains active or until the Account Owner deletes them.

After an Account Owner deletes an item, profile, or account:

• the information is generally removed from active production systems within 30 days; and
• remaining backup copies are generally deleted or overwritten within 90 days.

Limited information may be retained longer when reasonably necessary to investigate fraud or a security incident, comply with a legal hold, resolve a dispute, document consent, or meet another legal obligation.

9.2 Temporary processing files

Temporary copies created solely for transcription, Autofill, Generated Summary, media conversion, or similar processing are deleted within 30 days after processing unless the user saves the material or result as Family Content.

9.3 Incomplete parental-consent records

If we collect limited contact information solely to obtain parental consent and consent is not completed, we delete that information within 30 days, unless a shorter period is required.

9.4 Parental notice and consent records

Records documenting parental notice, consent, withdrawal, and related verification may be retained while the child profile remains active and for up to three years afterward. We retain these records to document compliance, manage parental choices, resolve disputes, and protect account security.

Information used solely to verify a parent's identity, such as a copy of identification or a verification image, is deleted promptly after verification unless applicable law requires otherwise.

9.5 Account legal acknowledgements

We may retain records showing which version of the Terms & Conditions, Privacy Policy, or another legal notice was presented to and acknowledged by an account user. These records may include the account identifier, a hashed form of the account email address, the document versions, and the date and registration context of the acknowledgement.

We retain these records while reasonably necessary to document compliance, manage updated notices, enforce agreements, resolve disputes, and protect account security.

9.6 Security and diagnostic logs

Authentication, security, fraud-prevention, performance, and diagnostic logs are generally retained for up to 12 months. A specific record may be retained longer when connected to an active security investigation, legal request, or dispute.

9.7 Billing and tax records

Adult billing, tax, and transaction records may be retained for up to seven years, or for another period required by law.

9.8 Support communications

Support communications are generally retained for up to three years after the issue is closed, unless a longer period is reasonably necessary for security, dispute resolution, or legal compliance.

9.9 Deidentified information

Aggregated or deidentified information may be retained for longer periods as long as it cannot reasonably be associated with a person, child, or family and we do not attempt to reidentify it.

10. Security

We maintain a written information security program with administrative, technical, and physical safeguards designed to protect information. The program is reviewed and updated as appropriate to the sensitivity of the information, the nature of the Services, and identified risks. Safeguards may include:

• access controls and least-privilege permissions;
• encryption in transit;
• encryption at rest where supported;
• protected authentication;
• logging and monitoring;
• vulnerability and dependency management;
• secure development practices;
• backup and recovery procedures;
• service-provider review;
• confidentiality obligations; and
• periodic risk assessments and security-program reviews.

No online service, storage system, or transmission method is completely secure. Users should protect their credentials, use unique passwords, secure their devices, and promptly notify us of suspected unauthorized access.

11. Your Privacy Choices and Rights

Beyond offers adult Account Owners the ability to request:

• confirmation of whether we process their information;
• access to personal information;
• correction of inaccurate information;
• deletion of personal information;
• a portable copy or export of information;
• withdrawal of consent;
• removal of an authorized user;
• deletion of a child profile;
• cancellation of promotional communications; and
• review of a decision concerning a privacy request.

Some requests may be limited where necessary to protect another person's rights, maintain security, prevent fraud, comply with law, or retain records that we are legally required to keep.

You may submit a request through account settings, where available, or by emailing [email protected].

We may need to verify your identity and authority over the relevant account before completing a request. We use verification information only for that purpose.

Where permitted by law, an authorized agent may submit a request on your behalf. We may require evidence of the agent's authority and direct confirmation from the Account Owner.

To appeal a privacy-request decision, email [email protected] with the subject line Privacy Request Appeal.

Deleting an account does not automatically cancel a subscription purchased through an app marketplace, and canceling a subscription does not automatically delete the account.

12. Email and Notifications

We may send:

• account-verification messages;
• security alerts;
• parental notices;
• payment and renewal notices;
• Future Letter or scheduled-content notices;
• important service announcements; and
• support communications.

These operational communications may be necessary to provide the Services and cannot always be disabled while an account remains active.

You may opt out of promotional messages through account settings or the unsubscribe mechanism in the message. Opting out of promotional messages does not stop operational communications.

13. Third-Party Services and Links

The Services may contain links to third-party websites or allow an Account Owner to export information to another service. A third party's independent privacy practices are governed by its own policies.

Beyond is not responsible for a third party's independently operated service. The Account Owner should review the third party's terms and privacy practices before directing Beyond to transmit family information to it.

14. International Processing

Beyond and its service providers may process information in the United States and other countries where they operate.

The Services are currently intended primarily for users in the United States. If you use the Services from another country, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your location.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the Services, our practices, or applicable requirements.

We will update the "Last Updated" date and provide additional notice when a change is material.

If a material change affects the collection, use, or disclosure of a child's personal information in a manner not previously authorized, we will provide direct notice to the parent and obtain new consent where required before applying the change to the child's information.

16. Operator and Contact Information

Operator responsible for the Services:
Beyond Generations LLC, doing business as Beyond

Mailing address:
[PUBLIC MAILING ADDRESS]
[CITY, STATE ZIP]
United States

Telephone: [TELEPHONE NUMBER]

Privacy: [email protected]
Support: [email protected]
Legal: [email protected]

Questions involving a child's information should use the subject line Children's Privacy Request.

As of the Effective Date, Beyond Generations LLC is the operator responsible for collecting and maintaining personal information through the Services. Beyond uses service providers that support internal operations as described in this Privacy Policy. If another entity independently collects personal information through the Services or receives children's personal information for a nonintegral purpose, we will update this notice and provide any additional notice or consent choice required by law.