Privacy Policy
Last updated: May 2025
1. Information We Collect
We collect the following types of information when you use Miyagi Labs:
a. Information You Provide
- Account information (e.g., name, email address, login provider such as Google)
- User-generated content (e.g., answers, notes, feedback)
- For education clients: student submissions, learning progress, assessment data (subject to school consent)
b. Information Collected Automatically
- Usage data (e.g., pages viewed, time spent, feature interactions)
- Device information (e.g., browser type, IP address)
- Diagnostic and performance data
We do not collect more data than is necessary for educational or business purposes, and we do not use this data for advertising.
2. How We Use Your Information
We use your information to:
- Provide and personalize our services
- Improve the effectiveness and usability of our platform
- Support customer service and respond to inquiries
- Comply with legal obligations or enforce our Terms of Service
- (For education clients) Support instructional goals as defined by your school or institution
3. Legal Basis and Compliance
We comply with all applicable U.S. data privacy laws, including:
- FERPA, for protecting student education records
- COPPA, for users under 13 (with school or guardian consent)
- Applicable state-level privacy laws regarding educational and consumer data
We act as a data processor for educational institutions and a data controller for business accounts, depending on the relationship.
4. Data Ownership and Access
Your data belongs to you or, in the case of educational use, your school or institution. You may:
- Request access to your data
- Request deletion of your data
- Export your data in a portable format
- Request that we restrict processing of certain information
We honor all such requests in accordance with applicable laws and contracts.
5. Data Storage and Security
We use Supabase to store your data securely. Supabase applies industry-standard security measures, including:
- End-to-end encryption of data in transit and at rest
- Role-based access control
- Regular audits and monitoring
We also implement additional safeguards to ensure your data is not accessed, shared, or used beyond its intended scope.
6. Data Sharing
We do not sell, rent, or share your personal data with third parties for advertising purposes. We may share data only with:
- Service providers under strict data protection agreements
- Schools or organizations (when they are the account owner)
- Authorities when required by law or to protect rights and safety
7. Children's Privacy
We do not knowingly collect personal information from children under 13 without verifiable parental or school consent. Schools may authorize student access and act as the parent's agent under COPPA.
8. Retention and Deletion
We retain data only as long as needed to provide services, fulfill legal requirements, or comply with institutional agreements. Upon request, we will delete or anonymize personal data, subject to verification.
9. Updates to This Policy
We may update this Privacy Policy from time to time. If changes are significant, we will notify you by email or within the platform. Continued use of our services after updates constitutes your acceptance.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: