Privacy Policy

1. Who We Are

This website and our tutoring services are operated by GOGOODY INC. (“FutureKey School,” “we,” “us,” or “our”), located at PO Box 1755, Fremont, CA 94538. We are a private tutoring provider. We are not a school, school district, or public education agency.

This Policy applies to futurekey.com, to our live online classes, and to the written feedback and scheduling communications connected to those classes. It does not apply to any third-party website or platform we link to, which is governed by that party’s own privacy policy.

2. Information We Collect

2.1 Information a parent or guardian gives us

• Parent or guardian contact information — name, email address, telephone number, state or region, and time zone.
• Student information — the child’s first name (or a preferred name), grade level, and general learning goals or areas of concern that the parent chooses to share.
• Assessment and placement information — the child’s reading and writing performance during the free assessment and in class, the recommended level, and teacher notes.
• Student work — writing drafts, revisions, and assignments the child produces for class, together with the teacher’s written feedback on that work.
• Scheduling and enrollment information — requested class times, attendance, and enrollment status.
• Billing information — the billing name and contact details, and, where a family pays through a state scholarship or education savings account program, the information that program requires. We do not collect or store full payment card numbers — card payments are handled by our payment processor.
• Correspondence — messages you send us by email or through a form on this site.

2.2 Information collected automatically

• Device and log data — IP address, browser type and version, operating system, referring page, pages viewed, and the date and time of the visit.
• Approximate location — the country, region, or city inferred from your IP address. We do not collect precise GPS location.
• Referral information — the web address you first arrived on, including any campaign or click identifiers a platform appends to a link (for example utm_source or fbclid), and the site that linked you. We use this only to understand which of our own channels families find us through.
• Cookies and similar technologies — see Section 7.

Automatic collection happens on our public website. We do not use advertising cookies or behavioral tracking inside a live class session.

2.3 Information from third parties

If a family enrolls through a state education savings account or scholarship platform (for example, a state-approved marketplace such as ClassWallet), that platform may transmit to us the enrollment, eligibility, and payment information necessary to deliver and invoice the service.

2.4 What we do not collect

We do not knowingly collect a child’s home address, date of birth, social security number, biometric identifiers, precise geolocation, school-issued student identification number, or any medical, disability, or special-education record. Please do not send us these. We do not ask children to create accounts, and we do not invite children to submit information directly to us through this website.

3. Children’s Privacy

Our services are purchased and managed by adults on behalf of children, and this shapes every part of our approach.

• A parent or legal guardian is the account holder. All enrollment, scheduling, and billing runs through the adult who books the service.
• Information about a child comes from the child’s parent or guardian, or is generated by the child’s teacher in the course of instruction — for example, teacher notes on a writing draft.
• Verifiable parental consent. By booking an assessment or enrolling a child, the parent or guardian consents to our collection and use of that child’s information as described in this Policy. We obtain this consent from the adult before instruction begins.
• No behavioral advertising to children. We do not use a child’s personal information for targeted or interest-based advertising, we do not build advertising profiles of children, and we do not permit our advertising partners to do so.
• No sale of children’s data. We do not sell or rent children’s personal information, and we do not disclose it for cross-context behavioral advertising.
• No public sharing by children. Children are not given a means to publish content publicly, message other families, or share personal information through our website.

We do not condition a child’s participation in our program on the disclosure of more personal information than is reasonably necessary to teach the class.

Parental rights. A parent or legal guardian may at any time: review the personal information we hold about their child; ask us to correct it; ask us to delete it; or withdraw consent to our further collection or use of it. Withdrawing consent may mean we can no longer provide instruction. To make a request, email [email protected] with the subject line Privacy Request. We verify that the requester is the child’s parent or guardian before acting, and we respond within the time required by applicable law.

4. How We Use Information

• To conduct the free assessment and recommend a starting level.
• To deliver live classes, assign a teacher, and manage scheduling.
• To review student writing and return written feedback to the student and a summary to the parent.
• To communicate with the parent about scheduling, progress, and account matters.
• To process tuition, issue invoices, and, where applicable, complete a state scholarship or education savings account transaction.
• To improve our curriculum, teaching quality, and website — using aggregated or de-identified information wherever it is sufficient for the purpose.
• To maintain the security and integrity of our systems and to prevent fraud and abuse.
• To comply with law, respond to lawful requests, and establish or defend legal claims.

We do not use student work, teacher feedback, or assessment results to train third-party artificial intelligence or machine-learning models.

5. Marketing Communications

We may email a parent about our programs, scheduling, and educational resources. Every marketing email includes an unsubscribe link, and unsubscribing takes effect promptly. Transactional messages — class confirmations, teacher feedback, invoices, and policy notices — are part of the service and continue while the account is active. We do not send marketing messages to children.

6. How We Share Information

We do not sell personal information. We share it only in the following circumstances:

• Our teachers and teaching assistants — who need the information to prepare for and teach the class and to give feedback. They are bound by confidentiality obligations.
• Service providers acting on our behalf — limited to what each provider needs to perform its function, and contractually restricted from using the information for its own purposes. These fall into the following categories: video conferencing and virtual classroom software; scheduling and calendar tools; email delivery; cloud file storage; payment processing; state scholarship and education savings account platforms; website hosting, content delivery and security, and website analytics; and the internal messaging tool our staff use to coordinate follow-up on a new inquiry.
• State scholarship or ESA administrators — where a family chooses to pay using a state program, and only the information that program requires to verify eligibility and release funds.
• Legal and safety disclosures — when required by law, subpoena, or court order, or where we believe in good faith that disclosure is necessary to protect the safety of a child or any person, or to investigate suspected fraud or misuse of our services.
• Business transfer — if we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction. We will give notice before your information becomes subject to a materially different privacy policy.

We do not disclose a student’s name, image, or work publicly, in marketing, or in testimonials without the separate, specific, written permission of that student’s parent or guardian.

7. Cookies, Analytics, and Advertising

Our public website is intended for parents and guardians choosing courses for their children. We use Google Analytics 4 for basic website statistics. For visitors identified as being in the European Union, including its territories with separate country codes, we ask you to choose Allow analytics before loading Google Analytics. For visitors identified as being outside the European Union, basic analytics is on by default unless you have opted out. If we cannot determine your region, analytics stays off unless you have already allowed it. An existing analytics cookie may remain unused while your region is pending or unavailable; choosing Necessary only clears it. It helps us understand visits, referring websites and campaign links, pages viewed, and successful assessment inquiries and trial bookings. Google processes device, approximate location, and interaction data for this purpose. We do not send names, email addresses, telephone numbers, student information, form answers, or booking access tokens to Google Analytics.

Analytics cookies help distinguish browsers and visits. We configure their lifetime to 180 days. We do not enable Google signals, advertising personalization, or Meta Pixel. The analytics tag is not installed in the family portal or classroom pages.

First-party visit measurement. Under the same basic analytics choice, our server records a random visit reference, a public entry-page path, controlled campaign labels, a referring domain, and observation times. The reference groups activity within a 30-minute browser visit and may be linked to an inquiry you submit. It is not a login credential or proof of a person's identity. We do not send this visit reference to Google. Separately allowing OpenAI ad measurement can permit the corresponding visit event even when basic analytics is off.

Optional OpenAI ad measurement. You can separately choose Allow ad measurement in Privacy choices. For visits associated with a ChatGPT paid campaign, this allows our server to share limited website-entry, inquiry, successful trial-booking, post-trial-email-sent, formal-contract-signing, and completed-purchase events with OpenAI, including an opaque event identifier, the action time, an available OpenAI click reference, and the actual purchase amount and currency when relevant. We do not send children's names, ages, grades, assessment answers, writing, booking-access credentials, or free-text form answers. We do not install an OpenAI browser Pixel or scan form fields for advertising matching.

With this choice, we use local storage for a random measurement-choice credential and the first and latest paid campaign references for up to 30 days. The associated server-side choice also expires after 30 days. These references help distinguish ad creatives; they do not prove a person's identity. Choose Stop ad measurement or Necessary only to stop optional measurement. Withdrawal immediately stops this browser from attaching further measurement information and asks our server to stop future event sharing for that credential. A request already dispatched cannot be recalled. If server withdrawal cannot be confirmed, we show a retry message and retry on a later public-page visit. Withdrawal does not erase data already shared. More information: OpenAI Privacy Policy.

Your choice. Open Privacy choices in the footer and choose Necessary only to use the website without Google Analytics. You can change or withdraw your choice at any time. We remember your explicit choice in local storage for 180 days and respect an existing refusal in every region. When your browser sends Global Privacy Control or Do Not Track, we keep analytics off. Withdrawal stops further analytics collection and clears our analytics cookies; it does not erase data already collected.

The site also uses the following storage and security services:

• Session storage (referral information) — your browser stores the address you arrived on and the site that linked you for the browsing session. If you submit an assessment inquiry, this information accompanies your submission to us so we can understand our own channels. When analytics is enabled under the regional settings above, we use only its cleaned public entry-page path, campaign labels, and referring-page address for analytics; the raw record is not sent. It is cleared when you close the tab.
• Cloudflare delivery and security — Cloudflare processes network requests, including IP addresses, to deliver the website, cache public resources, and help block attacks. We also use a same-site Cloudflare response to determine your country for the regional analytics setting. We use only its country code for this decision and do not store the response or send it to Google. Necessary security cookies may be used when a security check requires them. These services operate independently of optional Google Analytics cookies.

The website and assessment forms work if you decline analytics or block browser storage. For more information about Google's processing, see Google's partner-sites privacy information.

8. Class Recordings

Where a class is recorded, the recording is made for instructional review, teacher training and quality assurance, and to let a family revisit a lesson. Recordings are accessible only to the enrolled family, the assigned teacher and teaching assistant, and authorized staff. We do not use class recordings in advertising or publish them publicly without the separate written permission of every parent whose child appears in them. A parent may ask us not to record their child’s class, and may ask us to delete a recording in which their child appears. Recordings are retained no longer than 30 days unless a family asks us to keep a specific lesson longer.

9. Data Retention

We keep personal information only as long as it serves the purpose it was collected for, and then delete or de-identify it. In general:

• Enrollment, placement, and student work — kept while the family is enrolled and for a reasonable period afterward so that a returning student can resume at the right level.
• Billing and tax records — kept for the period required by tax and accounting law.
• Inquiry and assessment records for families who do not enroll — kept for 24 months from your last contact with us, then deleted. You may ask us to delete them sooner at any time.

A parent may request earlier deletion at any time under Section 3.

10. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold: encryption of data in transit, access limited to staff who need it for their role, confidentiality obligations for teachers and staff, and periodic review of our providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and the appropriate authorities as required by law.

11. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your own personal information and, as a parent or guardian, your child’s:

• Know and access — what we collect, why, and who we share it with, and receive a copy.
• Correct — inaccurate personal information.
• Delete — personal information, subject to limited legal exceptions such as tax records.
• Portability — receive your information in a portable format.
• Opt out — of sale, of sharing for cross-context behavioral advertising, and of profiling in furtherance of significant decisions. We do not engage in these activities, but the right is stated for completeness.
• Non-discrimination — we will not deny service, charge a different price, or provide a lower quality of service because you exercised a privacy right.
• Appeal — where your state provides it, you may appeal a decision we make on your request by replying to our response.

California residents. Under the California Consumer Privacy Act as amended, you have the rights listed above. We do not sell personal information and do not share it for cross-context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16 years of age. Our collection, use, and disclosure of the categories of information listed in Section 2 are described in Sections 4 and 6.

Residents of other states with comprehensive privacy laws — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others as their laws take effect — may exercise the rights above to the extent their state law provides them.

How to make a request. Email [email protected] with the subject line Privacy Request, and tell us which right you wish to exercise. To protect children’s information, we verify identity and, for a request concerning a child, verify the parent or guardian relationship before we act. An authorized agent may submit a request with written proof of authorization.

12. Student Records and FERPA

FutureKey School is a private tutoring provider engaged directly by families. We are not a school or school district, and the Family Educational Rights and Privacy Act (FERPA) does not generally apply to us in that relationship. If we are ever engaged by a school or district to provide services to its students, we would act as a “school official” under FERPA with respect to that engagement, use student data only for the purposes the school authorizes, and follow the school’s direction on access and deletion.

13. Where Information Is Processed

We operate from and store information in the United States. If you access our services from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country.

One exception. The internal messaging tool our staff use to alert one another to a new inquiry is operated by a provider outside the United States. The only details that reach it are the parent’s name and email address, the child’s grade, the requested class time and time zone, and which of our own channels the inquiry came from. Anything a parent writes in the free-text box, along with student work, assessment results, teacher feedback, class recordings, and all billing information, stays in our United States systems and is never sent to it.

14. Third-Party Links

Our website may link to third-party sites and platforms. We do not control them and are not responsible for their content or privacy practices. Please read the privacy policy of any site you visit.

15. Changes to This Policy

We may update this Policy from time to time. When we do, we revise the “Last updated” date at the top. If a change materially affects how we handle children’s information or the rights available to you, we will provide additional notice — by email to enrolled families, or by a prominent notice on this website — and, where the law requires it, obtain fresh consent before the change applies.

16. Contact Us

We aim to acknowledge privacy requests within 10 business days and to resolve them within the period required by applicable law.