HOMETRAIL APP, INC. PRIVACY POLICY

Children's Privacy Notice: If you are reviewing HomeTrail for Nest, the HomeTrail Student App, please also read our Children's Privacy Policy (COPPA Policy). It explains what child information is collected, how it is used and disclosed, how long it is kept, and how parents can review, delete, or stop further collection of a child's information.

HomeTrail App, Inc. (the "Company") is committed to maintaining robust privacy protections for its users. Our Privacy Policy ("Privacy Policy") is designed to help you understand how we collect, use and safeguard the information you provide to us and to assist you in making informed decisions when using our Service.

For purposes of this Agreement, "Site" refers to the Company's website, which can be accessed at https://hometrail.net and through our mobile application. "Service" refers to the Company's services accessed via the Site, in which users can track, plan, and discover homeschooling activities. The terms "we," "us," and "our" refer to the Company. "You" refers to you, as a user of our Site or our Service. By accessing our Site or our Service, you accept our Privacy Policy and Terms of Use (found here: https://hometrail.net/terms-of-service), and you consent to our collection, storage, use and disclosure of your Personal Information as described in this Privacy Policy.

I. INFORMATION WE COLLECT

We collect "Non-Personal Information" and "Personal Information." Non-Personal Information includes information that cannot be used to personally identify you, such as anonymous usage data, general demographic information we may collect, referring/exit pages and URLs, platform types, preferences you submit and preferences that are generated based on the data you submit and number of clicks. Personal Information includes your email address, name, phone number (optional), family/team information, and educational data which you submit to us through the registration process and use of the Service.

1. Information collected via Technology

To activate the Service you do not need to submit any Personal Information other than your email address and name. To use the Service thereafter, you do not need to submit further Personal Information. However, in an effort to improve the quality of the Service, we track information provided to us by your browser or by our software application when you view or use the Service, such as the website you came from (known as the "referring URL"), the type of browser you use, the device from which you connected to the Service, the time and date of access, and other information that does not personally identify you.

Cookies and Similar Technologies: We take a privacy-first approach to cookies and similar technologies. The cookies we use fall into these categories:

  • Essential Cookies: Required for the website to function properly, including session cookies, security tokens, authentication cookies, and consent preference storage. These cookies cannot be disabled as they are necessary for the Service to operate.
  • Analytics: We use Fathom Analytics, a privacy-focused analytics service that does not use cookies or collect personal information. This helps us understand how our website is used without tracking individual users.
  • Embedded Content: When we display video content from Vimeo with Do Not Track enabled, Vimeo and Cloudflare set security cookies necessary for bot prevention and secure video delivery. These cookies are technically necessary for the video player to function properly.

We do NOT use advertising cookies, social media tracking cookies, or marketing cookies. User preferences and settings are stored in your account data on our servers, not in cookies on your device. We do not participate in cross-site tracking or behavioral advertising.

You can control cookie settings through your browser, but disabling essential cookies may prevent certain features of the Service from functioning properly. Most browsers accept cookies by default until you change your settings. You can find instructions for managing cookies in your browser's help section or settings menu.

2. Information you provide us by registering for an account

In addition to the information provided automatically by your browser when you visit the Site, to become a subscriber to the Service you will need to create a personal profile. You can create a profile by registering with the Service and entering your email address, name, family name, and creating a password. By registering, you are authorizing us to collect, store and use your information in accordance with this Privacy Policy.

3. Marketing Attribution and Referrer Data

When you visit our website or sign up for our service, we may collect marketing attribution data including UTM parameters (campaign, source, medium, content, term) and referrer information to understand how you found us. This data helps us improve our marketing efforts and measure the effectiveness of our campaigns.

4. Phone Numbers and SMS Communications

You may optionally provide your phone number for SMS notifications and account security purposes. If you provide your phone number, you consent to receive SMS messages from us related to your account, including security alerts and service updates. You can opt out of SMS communications at any time by replying "STOP" to any SMS message or by updating your preferences in your account settings.

We use Twilio to send SMS messages and do not store SMS message content beyond what is necessary for delivery and basic logging purposes.

5. Educational and Family Information

As a homeschooling platform, we collect educational information that you provide about your family and students, including:

  • Family Information: Family name, location (state/region), and homeschooling approach preferences
  • Student Information: Student names, ages, grade levels, and educational progress data
  • Educational Records: Learning activities, session records, attendance tracking, curriculum assignments, and educational assessments
  • Learning Materials: Uploaded files, photos of student work, project documentation, and portfolio items
  • Progress Tracking: Completed objectives, grades, learning milestones, and educational achievements

This educational data is essential for providing our homeschooling services and is only accessible to authorized users within your team.

6. Mobile Device Information and Permissions

If you use our mobile applications, we may collect device information including your device type, operating system, app version, screen size, and device identifier.

Our mobile apps may request the following permissions, which you can accept or decline:

  • Camera and Photos: To capture and upload photos of educational activities and projects
  • Push Notifications: To send you important updates about your account and activities

You can control these permissions through your device settings at any time. We only access these features when you explicitly use them within the app, and you can use the core features of HomeTrail without granting these permissions.

Nest Student App: Nest currently does not request push notification, camera, microphone, or location permissions, and does not include ads SDKs or analytics SDKs. Nest may send app version/build for compatibility, and its device heartbeat updates operating system version and WebView version only.

7. Usage Analytics and Session Information

We may collect information about how you interact with our Service, including pages viewed, features used, and time spent in the application. This helps us improve the user experience and identify areas for enhancement.

We may also send internal notifications about account activity (such as new signups) to our team for operational purposes including fraud prevention and service monitoring. These notifications may include limited account information but are used solely for legitimate business operations.

8. Bug Reporting and Error Tracking

To improve our service quality and fix technical issues, we collect error reports and diagnostic information when the Service encounters problems. This includes technical details about errors, device information, and usage patterns that led to the issue.

For Nest, diagnostics are limited to bounded error metadata, route path, app version/build, platform, operating system version, WebView version, line/column numbers, stack hash, and fingerprint information. Nest diagnostics are designed not to include raw child content, precise location, advertising identifiers, contacts, or full stack traces.

9. AI-Powered Features

We use third-party artificial intelligence services (including OpenAI and others) to provide educational content generation, activity suggestions, and other AI-powered features. When you use these features, the text or content you provide is sent to these AI providers for processing.

TrailGuide, our AI-powered texting and chat assistant, may send your messages together with relevant family and student information, such as student ages, grade levels, curriculum details, schedule information, and general location, to business AI service providers so it can respond to your requests. To reduce personal information used in AI processing, TrailGuide is designed to replace student names with system-generated aliases before sending requests to those providers. We configure these AI services so customer content submitted through TrailGuide is not used for model training.

AI providers may still retain limited data for security, abuse prevention, and service operations, consistent with their applicable terms and our service configuration.

10. Children's Privacy

This Privacy Policy applies to adults (parents and guardians) using the HomeTrail website and main application.

The HomeTrail website and main application are designed for and directed to adults—specifically parents and guardians managing their family's homeschool education. We do not knowingly collect personal information directly from children through the main HomeTrail application.

Student App: HomeTrail offers a separate "Student App" that allows children to complete educational activities under parental supervision. Our practices for the Student App comply with the Children's Online Privacy Protection Act (COPPA).

For complete information about how we collect, use, and protect children's personal information, please see our Children's Privacy Policy (COPPA Policy).

If you believe we have collected personal information from a child without proper parental consent, please contact us immediately at [email protected].

II. HOW WE USE AND SHARE INFORMATION

Legal Basis for Processing (GDPR)

We process your personal information based on the following legal grounds:

  • Contract Performance: Processing necessary to provide our homeschooling services to you
  • Legitimate Interest: Privacy-focused analytics to improve our service, with your ability to opt out
  • Consent: For optional features and communications you specifically agree to
  • Legal Obligation: When required by applicable laws or regulations

How We Use Your Information

Personal Information:
Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent. We do share Personal Information with vendors who are performing services for the Company, such as the servers for our email communications who are provided access to user's email address for purposes of sending emails from us. Those vendors use your Personal Information only at our direction and in accordance with our Privacy Policy. In general, the Personal Information you provide to us is used to help us communicate with you. For example, we use Personal Information to contact users in response to questions, solicit feedback from users, provide technical support, and inform users about promotional offers. We may share Personal Information with outside parties if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable legal process or enforceable governmental request; to enforce applicable Terms of Service, including investigation of potential violations; address fraud, security or technical concerns; or to protect against harm to the rights, property, or safety of our users or the public as required or permitted by law.

Non-Personal Information:
In general, we use Non-Personal Information to help us improve the Service and customize the user experience. We also aggregate Non-Personal Information in order to track trends and analyze use patterns on the Site. This Privacy Policy does not limit in any way our use or disclosure of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our service providers and partners at our discretion. In the event we undergo a business transaction such as a merger, acquisition by another company, or sale of all or a portion of our assets, your Personal Information may be among the assets transferred. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy. If our information practices change at any time in the future, we will post the policy changes to the Site so that you may opt out of the new information practices. We suggest that you check the Site periodically if you are concerned about how your information is used.

Third-Party Service Providers

We work with trusted third-party service providers to deliver our services. These providers only have access to the personal information necessary to perform their specific functions and are contractually obligated to protect your data:

  • DigitalOcean: Cloud hosting infrastructure for our servers and database
  • Stripe: Payment processing for subscriptions and transactions
  • Twilio: SMS communications and phone verification services
  • Fathom Analytics: Privacy-focused website analytics (no personal data collection)
  • Bento: Email marketing and user engagement communications
  • FeatureBase: User feedback and feature request management
  • Bugsnag (InsightHub): Error monitoring and diagnostic reporting
  • Nightwatch: Application monitoring and performance tracking
  • AI Services (OpenAI and others): Content generation and educational assistance features
  • Algolia: Search functionality within the application
  • Firebase: Push notifications for mobile applications
  • YouTube API Services and Embedded Player: Some parent-approved learning activities may include videos hosted by YouTube. When a student opens an approved video, Nest loads the video through YouTube's privacy-enhanced embed domain (youtube-nocookie.com) and related YouTube or Google media domains required for playback. Nest does not provide open YouTube browsing, YouTube search, public social features, third-party advertising SDKs, or third-party analytics SDKs. YouTube features are subject to the YouTube Terms of Service and Google Privacy Policy.
  • Cloudflare: Content delivery and image storage services
  • Content Delivery Networks (CDNs): We use various CDNs including jsDelivr and Cloudflare to deliver JavaScript libraries and other static assets for improved performance
  • Font Services: Bunny Fonts for privacy-focused web typography
  • Research and Data Services: Various third-party services for content research and data enhancement (no personal user data shared)

All third-party providers are contractually required to maintain appropriate data protection standards.

III. HOW WE PROTECT INFORMATION

We implement security measures designed to protect your information from unauthorized access. Your account is protected by your account password and we urge you to take steps to keep your personal information safe by not disclosing your password and by logging out of your account after each use. We further protect your information from potential security breaches by implementing certain technological security measures including encryption, firewalls and secure socket layer technology. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.

IV. YOUR RIGHTS REGARDING THE USE OF YOUR PERSONAL INFORMATION

You have the right at any time to prevent us from contacting you for marketing purposes. When we send a promotional communication to a user, the user can opt out of further promotional communications by following the unsubscribe instructions provided in each promotional e-mail. You can also indicate that you do not wish to receive marketing communications from us in the Settings, or "Trailhead" section of the Site. Please note that notwithstanding the promotional preferences you indicate by either unsubscribing or opting out in the Settings, or "Trailhead" section of the Site, we may continue to send you administrative emails including, for example, periodic updates to our Privacy Policy.

V. YOUR GDPR RIGHTS (EU/UK RESIDENTS)

If you are a resident of the European Union or United Kingdom, you have the following rights under data protection law:

1. Right to Access

You can request a copy of the personal data we hold about you, including information about how we process it.

2. Right to Rectification

You can request that we correct any inaccurate or incomplete personal data we hold about you.

3. Right to Erasure ("Right to be Forgotten")

You can request that we delete your personal data. You can also delete your account and all associated data through your account settings.

4. Right to Restrict Processing

You can request that we limit how we process your personal data in certain circumstances.

5. Right to Data Portability

You can request that we provide your personal data in a structured, commonly used format so you can transfer it to another service.

6. Right to Object

You can object to processing based on legitimate interests, including analytics and marketing.

7. Right to Withdraw Consent

Where processing is based on consent, you can withdraw your consent at any time.

8. Right to Lodge a Complaint

You can file a complaint with your local data protection authority if you believe we have mishandled your personal data.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

VI. DATA RETENTION

We keep personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, while we have a business need to do so, or as required by law, whichever is longer.

Generally, this means:

  • Account and Activity Data: Until you delete your account
  • Analytics and Usage Data: Retained in anonymized form for service improvement
  • Support Communications: Retained for service improvement purposes
  • Marketing Communications: Until you unsubscribe

You can request deletion of your data at any time by contacting us or deleting your account through your account settings.

Account Deletion

You can delete your account and all associated personal data at any time through your account settings. When you request account deletion, there is a 48-hour grace period during which you can cancel the deletion. After this grace period expires, we will permanently remove your personal information from our active systems. Some anonymized data may be retained for analytics purposes.

VII. INTERNATIONAL DATA TRANSFERS

HomeTrail operates globally and serves users worldwide. Your personal information may be transferred to and processed in the United States where our primary servers are located, and other countries where our service providers operate.

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we ensure appropriate safeguards are in place for international transfers, including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions where applicable
  • Vendor compliance with applicable privacy frameworks
  • Data Processing Agreements with all third-party processors

VIII. LINKS TO OTHER WEBSITES

As part of the Service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Policy applies solely to information collected by us through the Site and the Service. Therefore, this Privacy Policy does not apply to your use of a third party website accessed by selecting a link on our Site or via our Service. To the extent that you access or use the Service through or on another website or application, then the privacy policy of that other website or application will apply to your access or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.

IX. CHANGES TO OUR PRIVACY POLICY

The Company reserves the right to change this policy and our Terms of Service at any time. We will notify you of significant changes to our Privacy Policy by sending a notice to the primary email address specified in your account or by placing a prominent notice on our site. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. You should periodically check the Site and this privacy page for updates.

X. CONTACT US

If you have any questions regarding this Privacy Policy or the practices of this Site, please contact us:

For GDPR-related requests, please include "GDPR Request" in your subject line and specify which right you wish to exercise.

Last Updated: This Privacy Policy was last updated on May 6, 2026.

HomeTrail

The path to a happy homeschool