Privacy Policy
How Atlas Academy collects, uses, and protects information for parents and children in your family account.
Who we are
Atlas Academy (“we”, “our”, “the app”) is operated by Xrossly. It is a homeschool and family learning platform. Parents create a family account; children sign in with a Family ID and PIN provided by the parent.
Information we collect
Parent account: email address, display name, family identifier, and authentication data from Firebase (email/password or sign-in providers you choose).
Child profiles: first name (or nickname), grade level, learning language preference, and a hashed PIN — not the plain PIN.
Learning data: lesson progress, quiz scores, attendance, portfolio entries, language practice, travel journal entries, planner schedules, and assignments you create.
Content you upload: files, photos, or documents stored in Firebase Storage under your family folder.
Waitlist: if you register interest on our website, we collect the name and email you provide.
Device data: basic device type and app version for diagnostics. We do not sell personal information.
Children and parental control
Only parents can create accounts and manage child profiles. Children access the app through a parent-controlled Family ID and PIN.
Optional AI features send prompts through our secure Cloud Functions to OpenAI when your plan includes AI and you enable it. Student AI is off by default until a parent turns it on in Settings.
Parents are responsible for supervising children’s use of the app and for the accuracy of information entered about minors.
How we use information
To provide lessons, progress tracking, storage, subscriptions, and sync across your devices.
To send launch updates if you joined our waitlist (you can unsubscribe at any time).
To enforce plan limits (storage, number of children, feature access).
To improve reliability and security — for example, diagnosing sign-in or permission errors.
Third-party services
Google Firebase (authentication, database, file storage).
Resend (transactional email: welcome and account-deletion confirmation).
Stripe (web subscription payments). Stripe processes payment details; we receive subscription status, not your full card number.
Formspree or similar (waitlist form on our website, if configured).
Optional: OpenAI (AI content you request), Mapbox (maps in Compass when configured), Apple/Google sign-in, and RevenueCat (App Store / Play subscription management).
Data retention and deletion
We retain your family data while your account is active. Parents can permanently delete their account in Settings → Delete account.
You may email support@atlasacademy.com.au to request deletion or export.
Security
We use industry-standard authentication and Firestore security rules scoped by family. No system is perfectly secure; please use a strong parent password and unique child PINs.
Your rights
Depending on your region, you may have rights to access, correct, or delete personal data. Contact us and we will respond within a reasonable time.
Changes
We may update this policy. We will post the new date at the top. Continued use after changes means you accept the updated policy.