Plain-English privacy policy.

Context Spanish (the "Service") is operated by Med-edu Peru Ltd. (med-eduperu.com). We make editorially-balanced Spanish-language history modules for learners, teachers, and schools. Questions: hello@contextspanish.com.

For everyone:

• Account email and display name
• Account type (learner, educator)
• Reading progress (which modules you've opened, comprehension answers)
• Class enrollment (which class you belong to, if any)
• Standard server logs (IP address, browser, timestamps) for security and debugging

We do not collect:

• Voiceprints, facial templates, or any biometric data. Audio in modules is for playback only — we do not record student voice.
• Precise location data
• Contact lists, photos, or any data outside the Service
• Data from third-party advertising networks (we don't run ads)

To run the Service: log you in, show you the right level, save your progress, show teachers their class roster, and fix bugs. That's it.

We do not use student data to train AI models, build advertising profiles, or share with third-party marketers.

When a school or district licenses Context Spanish, the school is the data controller for its students under FERPA. We act as a school official with a legitimate educational interest, and we only use student data to provide the Service to that school.

Our practices are aligned with the FTC's April 2026 COPPA Rule amendments, including the expanded definition of personal information (we do not collect biometric data) and the prohibition on indefinite data retention (see Section 5).

We do not have a standard Data Privacy Agreement (DPA) on file today. Schools and districts that require one are welcome to send their preferred form to hello@contextspanish.com and we'll review it in good faith.

Active accounts: we keep your data for as long as your account is active.

Inactive student accounts: if a student account has not signed in for 14 months, we delete the account and all associated progress data. This window covers a full school year, summer break, and a grace period.

Class records: when a teacher deletes a class, student enrollments are removed within 30 days.

On request: students, parents, and schools can request deletion at any time. We complete deletion requests within 30 days.

Backups: deleted data may persist in encrypted backups for up to 35 days before being permanently overwritten.

We share data only with infrastructure providers needed to run the Service:

• Our hosting and database provider (for storing your account and progress)
• Email delivery provider (for password resets and class invitations)

Each provider is contractually bound to use the data only to provide the infrastructure service. We do not sell, rent, or trade personal data. Ever.

You can request to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account and data
• Export your data in a portable format

Email hello@contextspanish.com. For students under 13, parents or the enrolling school may make requests on the student's behalf.

Data is encrypted in transit (TLS) and at rest. Access is restricted to staff who need it to operate the Service. We log administrative access. If a breach affecting personal data occurs, we will notify affected schools and users within 72 hours of discovery.

We use a small number of cookies that are strictly necessary to keep you signed in and remember your level preference. We do not use advertising or cross-site tracking cookies.

If we materially change this policy, we'll email account holders and post the new version here at least 30 days before it takes effect.

hello@contextspanish.com

For school/district procurement and DPAs, see our Trust & compliance page.