The short version: IEP Compass stores your data securely so you can access it from any device. We never sell your personal information. We never share your child's information with advertisers. Everything you log stays yours. Our AI assistant (Claudia) processes messages through Anthropic's API — we explain exactly what that means below.
IEP Compass ("we," "our," or "us") is a mobile application designed to help parents and advocates organize, track, and manage Individualized Education Program (IEP) documentation for children with special needs. IEP Compass is developed and operated by Tristan Patin.
For questions about this policy, contact us at: hello@iepcompass.com
We collect only what is necessary to provide the app's features:
For California residents, the categories of personal information we collect include:
We do not sell or share any of these categories for cross-context behavioral advertising.
We use your information exclusively to:
We do not use your data to serve you advertisements. We do not sell, rent, or trade your personal information to any third party.
Your data is stored using Google Firebase, which provides industry-standard security including encryption in transit (TLS) and at rest. Firebase Security Rules ensure that only you — authenticated with your account — can access your own data. No other app user can read or modify your account or your child's information.
We use Sentry for crash reporting. Crash logs contain technical stack traces and device information only — they do not include the content of your logs, documents, or your child's personal information.
IEP Compass is designed for use by parents and adult advocates — not by children directly. Children do not create accounts or interact with the app. We do not knowingly collect personal information directly from anyone under the age of 13.
Information about your child (name, age, school, behavioral observations, IEP details) is entered by you, the parent or guardian, and is stored within your account to organize your own records. We treat this information with the highest level of care:
Parental Rights: As the account holder and parent or guardian, you have the right to:
If you believe a child under 13 has created an account without parental consent, please contact us immediately at hello@iepcompass.com and we will delete the account promptly.
IEP Compass includes two AI-powered features: the Claudia chat assistant and the AI Explainer tool. Both transmit data to Anthropic, Inc. to generate responses. The app asks for your explicit permission through a consent screen before any data is ever sent. You may decline at any time.
What data is transmitted to Anthropic
Each time you use Claudia or the AI Explainer, the following information is sent over an encrypted (HTTPS) connection to Anthropic's servers:
Who receives this data
The data listed above is received and processed by Anthropic, Inc. (anthropic.com), the company that operates the Claude AI model. Anthropic acts as a data processor on your behalf for the sole purpose of generating AI responses. For full details on how Anthropic handles API data, see Anthropic's Privacy Policy. Anthropic does not use data submitted through the API to train its AI models without customer permission.
How IEP Compass handles AI conversations
Your consent
Before any data is transmitted to Anthropic, the app displays a disclosure screen that identifies Anthropic as the recipient, lists what data will be sent, and requires your explicit acknowledgment. You can decline at any time — doing so prevents the AI features from sending data. If you have previously consented and wish to withdraw, you can clear the app's local data or contact us at hello@iepcompass.com to request account deletion.
IEP Compass uses the following third-party services to function:
We retain your data for as long as your account is active. If you delete your account — which you can do at any time from the app's Settings screen — your personal data and all associated records (logs, documents, child profiles, reminders, calendar events) will be permanently deleted from our systems within 30 days. Uploaded files in Firebase Storage are deleted as part of this process. Anonymized analytics data may be retained indefinitely as it cannot be linked to your identity.
You have the right to:
If you are located in California, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. Contact us to exercise any CCPA rights.
If you are located in the European Economic Area, you may have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority. Contact us to exercise these rights.
IEP Compass does not sell, rent, lease, or otherwise share your personal information or your child's information with any third party for monetary or other valuable consideration. This applies to all users including California residents under CCPA.
If you enable reminders, we will send push notifications to your device. You can disable these at any time through your device's notification settings or within the app's Settings screen.
The IEP Compass mobile app (iOS and Android) does not use cookies. It uses standard device-local storage — specifically AsyncStorage and Firebase's secure token cache — to keep you signed in and store your preferences. This data never leaves your device except as part of normal Firebase Authentication.
The IEP Compass web app uses Firebase Authentication's session management, which stores your login token in your browser's IndexedDB — not as a traditional HTTP cookie. We do not use advertising cookies, tracking pixels, or third-party analytics cookies on the web app.
Because we do not use cookies for tracking or advertising purposes, we do not display a cookie consent banner. The only browser storage we use is strictly necessary to keep you signed in and provide the app's core features. You can clear this at any time by signing out or clearing your browser's site data.
In the event of a data breach that affects your personal information, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with applicable law. Notification will be sent to the email address associated with your account.
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For significant changes — particularly those that affect how your child's data is handled — we will notify you within the app before the changes take effect. Continued use of IEP Compass after changes are in effect means you accept the updated policy.
Email: hello@iepcompass.com
We aim to respond to all privacy-related inquiries within 5 business days.
For COPPA-related requests (parental review, correction, or deletion of child data), we will respond within 48 hours.