CodeSky Privacy Policy

01Who we are

CodeSky is a coding school for kids and teens in Markham, Ontario, Canada. "CodeSky", "we", "us" and "our" mean CodeSky, 9833 Markham Rd Unit 2, Markham, ON L6E 0E5, Canada. You can reach us about privacy at info@codesky.ca.

02What this policy covers

This policy applies to:

• our website, codesky.ca;
• the CodeSky learning platform (online courses, lessons and student accounts on codesky.ca), and the web version of the CodeSky app at app.codesky.ca; and
• the CodeSky mobile app for iPhone, iPad and Android.

It explains what information we collect, why, who helps us handle it, and the choices families have. Websites we link to (for example Scratch, Instagram or Xiaohongshu) have their own privacy policies.

03Information we collect

Account information

To sign in to the CodeSky app or learning platform, a user needs an account. Depending on how the account was set up, we receive:

• CodeSky school account (usually created by CodeSky for an enrolled student): username, password (checked against our learning platform to sign in), name, and the school or program the student belongs to.
• Email account: email address, display name and password. Passwords are handled by our sign-in provider and are not visible to CodeSky staff.
• Sign in with Google: the name, email address and profile picture link that Google shares with us. We do not receive your Google password.

We also keep basic account details such as the account's role (student, parent, teacher or administrator), when it was created, the last sign-in time, and links between a student and their parent, guardian or teacher.

Learning and class information

• Progress through lessons, puzzles, missions and courses, quiz and exercise results, and completion status.
• Skill and level summaries (for example computational-thinking skill levels), practice streaks, in-app rewards, badges, awards and certificates.
• Work students create or submit, such as code, projects, homework, assignments and portfolio pieces, including links to Scratch projects a student chooses to add.
• Participation in live in-class activities (for example Class Quest rooms) and class records such as attendance, teacher comments and progress reports.

Photos you choose to upload

Some app screens let a user attach an image (for example to homework or an assignment). The app only accesses the photo you pick from your photo library; it does not use the camera, and it does not scan or upload the rest of your library. Chosen images are resized and stored with the related class item.

Device and technical information

When the app or website talks to our servers, we and our service providers automatically receive standard technical information such as IP address, device and browser type, operating system, app version, and the time of the request. This is used to deliver the service, keep it secure and fix problems. The app also saves a few settings on your device (such as language choice and cached progress) so it works smoothly.

What we do not collect in the app

• No precise or approximate location, contacts, microphone or camera access.
• No advertising identifiers and no third-party advertising or analytics tools in the mobile app.

When you contact us

If you email us, book a trial or register for classes, we keep the information you send, such as parent name, contact details, and your child's name, age and interests.

04How we use information

• To create and manage accounts and let users sign in.
• To deliver lessons, practice, live class activities and the CodeSky app.
• To track learning progress and share it with the student, their parent or guardian, and their teachers (for example through progress reports sent to the parent or guardian email on file).
• To run our classes and programs, including attendance, scheduling and certificates.
• To keep our services secure, prevent misuse and fix bugs.
• To answer questions and send service messages about a student's classes or account.
• To understand, in aggregate, how our website is used so we can improve it.

We do not use student information for advertising, and we do not build marketing profiles of children.

05Children's privacy

CodeSky teaches students aged 7 to 18, so many of our users are children. We take that seriously:

• Student accounts are created by CodeSky, or by or with the permission of a parent or guardian, usually as part of enrolling in our classes or a partner program. Children under the age of majority should only use the app with a parent's or guardian's consent.
• We collect only the information needed to teach and support the student.
• There are no ads in the CodeSky app, and we never sell or rent children's (or anyone's) personal information.
• Student work is shared inside CodeSky with the student, their teachers, and their parent or guardian. We only feature a student's work publicly (for example in a showcase) with permission.
• Parents and guardians may review, correct or delete their child's information at any time (see Your rights).

If you believe a child has given us personal information without the right consent, contact info@codesky.ca and we will look into it and delete it where appropriate.

06Sharing and service providers

We do not sell personal information. We share it only:

• Inside CodeSky with the student, their parent or guardian, their teachers, and, for students who join through a partner school or program, the staff who run that program.
• With service providers that host and run our services for us, under contracts that limit how they can use the data:

  Provider	What it does for us
  Google Firebase (Google LLC)	App sign-in (including Sign in with Google), app database, storage for uploaded images, and hosting of the web app
  DigitalOcean	Cloud servers that host codesky.ca, our learning platform and the CodeSky app's server
  Email service provider	Delivering account and progress-report emails
  Google Analytics (website only)	Aggregate statistics about visits to codesky.ca (see Cookies)
  Content delivery networks	Delivering app and website files, such as the Python runtime used by in-app coding practice

• When required by law, or to protect the safety, rights or property of our students, families, staff or the public.
• If CodeSky's business is transferred, in which case this policy will continue to protect the information.

07Ads and tracking

08Website cookies and analytics

codesky.ca uses cookies that are needed for the learning platform to work (for example to keep you signed in). Our public web pages also use Google Analytics 4 to count visits and see which pages are popular. Google Analytics uses cookies and receives information such as pages viewed, approximate location derived from IP address, and device or browser type. We use these reports in aggregate only. You can block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on. Google Analytics is not part of the CodeSky mobile app.

09Storage, security and retention

• Where it's stored. Our information is stored with the service providers above, whose servers may be located in Canada, the United States or other countries. Information stored outside Canada may be subject to the laws of those countries.
• Security. We use encrypted connections (HTTPS) between the app, website and our servers, require sign-in to see student information, and limit staff access to people who need it. No system is perfectly secure, but we work to protect your information and will notify affected families and authorities of a breach as required by law.
• Retention. We keep account and learning information while a student is active with CodeSky, and for a reasonable period afterwards so families can come back to their progress and so we can meet legal, tax and record-keeping obligations. When information is no longer needed, we delete it or make it anonymous. You can ask us to delete it sooner (see below).

10Your rights (Canada and Ontario)

CodeSky is based in Ontario and follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Students, and parents or guardians on behalf of their children, can:

• ask what personal information we hold and get a copy;
• ask us to correct anything that is wrong or out of date;
• withdraw consent (this may mean we can no longer provide some services); and
• ask us to delete an account and its information.

Email info@codesky.ca. We may need to confirm your identity and your relationship to the student first, and we aim to respond within 30 days. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

11Deleting an account and its data

You can ask us to delete a CodeSky account (including a CodeSky app account) and its associated data at any time:

1. Email info@codesky.ca with the subject "Account deletion request", from the email address linked to the account or the parent/guardian email we have on file.
2. Include the student's name and their CodeSky username or sign-in email.
3. We will confirm the request, then delete the account and its personal information from the app, our learning platform and our service providers, and let you know when it's done.

We may keep a small amount of information when the law requires it (for example payment and tax records) or to resolve disputes, and copies in backups are removed as those backups expire.

12Changes to this policy

We may update this policy as our services change. We will post the new version on this page with a new effective date, and if the changes are significant we will tell families by email or in the app before they take effect.

13Contact us

CodeSky
9833 Markham Rd Unit 2
Markham, ON L6E 0E5, Canada
Email: info@codesky.ca