Privacy Policy
The short version: we collect the minimum needed to run the tutor, we never sell data, we never show ads inside the app, we never share anything about a child with an advertising platform, and children's data exists only inside a parent-controlled account.
1. What we collect
From parents: name, email address, password (stored as a salted hash, we cannot read it), and subscription status. Payments are processed by Stripe; we never see or store card numbers. When you visit our public marketing pages or go through checkout, we also receive standard web information — IP address, browser type, and the cookie identifiers described in section 4.
About learners (children): the first name, grade, avatar, and 4-digit PIN a parent enters, plus learning activity generated by use (answers, skill mastery, badges, game scores). We do not collect a child's email, phone number, precise location, photos, or free-form messages; the buddies feature uses only pre-written cheers.
2. Children's privacy (COPPA)
Gallop is a K–12 learning service that children use inside a parent-managed account. For children under the age of 13, we comply with the Children's Online Privacy Protection Act (COPPA). Before any child profile is created, the parent or legal guardian creates the account, affirms that they are the parent or guardian, and consents to the limited collection described in this policy. As a verification step, we email the parent a confirmation link that must be clicked before any learner profile can be created or any child information is collected; for paid accounts the payment card on file provides an additional verification of the account holder. Children cannot create accounts, cannot make purchases, and cannot communicate in free text with anyone — or with any AI. The buddies feature allows only pre-written cheers, and the tutor interacts through structured, multiple-choice questions, never open chat. Learner profiles are created, managed, reviewed, and deleted only by the parent: deleting a learner from the Parent Dashboard permanently deletes that child's data, and deleting your account deletes everything. Parents may review or delete their child's information, or withdraw consent (which refuses further collection), at any time via the dashboard or by emailing support@learnwithgallop.com.
3. How data is used
Solely to operate the service: placing students at the right level, adapting lessons, generating progress reports for parents, and maintaining streaks and rewards. We do not sell or rent personal information. We share it only with the processors that run the service (hosting, payments, email delivery) and, as described in section 4, with advertising and analytics providers who help us measure whether our own marketing is working — never with anyone who would use it to target your child.
4. Cookies, analytics, and advertising
Gallop shows no advertising to anyone inside the app, and children never encounter ads or advertising technology of any kind. We do advertise Gallop elsewhere on the internet, and on our public marketing pages and during checkout we use a small set of cookies and measurement tools to understand which of those ads actually bring families to us.
What runs on those pages: Google Analytics (loaded through Google Tag Manager) for basic traffic measurement, and conversion measurement tags from Meta (Facebook and Instagram) and OpenAI (ChatGPT Ads). These set cookies or similar identifiers in your browser so those companies can recognize that a visit followed one of our ads.
What we send them: when a parent starts a free trial or begins a paid subscription, we send those platforms a record that the conversion happened, the amount charged, and an irreversibly hashed (SHA-256) form of the parent's email address so the platform can match it back to the ad it served. We do not send names, addresses, phone numbers, or any payment details.
What we never send: nothing about a child ever reaches an advertising or analytics platform — not a name, not a grade, not an answer, not a score, not even the fact that a learner profile exists. Our code refuses to fire any marketing tag while a learner is signed in. That is a technical boundary built into the product, not just a promise in a policy.
Your choices: you can block or delete these cookies in your browser settings and the site will work normally without them. You can also limit interest-based advertising directly at the platforms — through your Meta ad preferences, your Google ad settings, or the industry opt-out at youradchoices.com.
5. Artificial intelligence & automated help
Gallop uses adaptive technology to choose the right lesson and question for each learner. This works only from a child's structured activity (which answers were right or wrong, skill mastery); a child never types free-form messages to an AI, and children do not chat with an AI tutor. Separately, when a parent uses our in-app Help Assistant or emails support, that message may be processed by a trusted third-party AI provider to help draft an accurate reply. Those support messages are used only to answer you, are handled under confidentiality obligations, are not used to train the provider's models, and are never sold. Children's learning data is never sent to that assistant.
6. Security & retention
All traffic is encrypted (HTTPS). Parent passwords are hashed with scrypt, and child PINs are stored hashed as well. We keep personal data only while your account is active. Deleting a learner or your account deletes the associated data promptly; limited billing records may be retained where required by law. Support messages and their AI-drafted replies are retained only as long as needed to handle the request and for reasonable record-keeping.
7. Schools and classrooms
This policy covers family accounts — where a parent signs up, creates their child's learner profile, and controls it. Gallop is also used by schools, charter schools and homeschool programs, where a teacher creates the learner profile and the school, not the parent, provides consent for a strictly educational purpose (which COPPA permits). Different rules apply there: the school controls the records, it decides who may see them, and it can export or delete them at any time. Our written commitments for that path — what we collect, what we will never do with it, how it is secured, retained and deleted, and what we cannot yet claim — are published in full at Student Data Commitments for Schools.
7. Contact
Privacy questions or data requests: support@learnwithgallop.com. We are a family business, so a real person answers.
← Back to Gallop