Privacy Policy

SPEDMinutes is a product of The In App LLC, a California limited liability company. Contact: support@spedminutes.com.

SPEDMinutes is built for FERPA-aware special education professionals. Our core design principle is to minimize the student data that crosses our servers. We do not store student work product, student names, or student records. Identifying student information is not designed to be entered into the application — and we actively guard against it.

When you use the quiz creator, the IEP goal text you enter is sent to our AI provider (Anthropic) so the application can generate aligned quiz items. To prevent student names from being transmitted, SPEDMinutes scans your goal text for common names before any request leaves your browser. If a name is detected, submission is blocked and you are prompted to replace the name with “the student” or initials. This check also runs on the server as a backstop. Goal text that passes the check is processed by Anthropic and not retained by SPEDMinutes after the request completes.

SPEDMinutes does not store:

• Student names, dates of birth, addresses, or contact information
• IEP content beyond the active request, disability categories, or eligibility records
• Parent or guardian information
• Student work product, written responses, photographs of student work, or any artifact produced by a student
• Any other student record covered by FERPA, IDEA, or California Education Code

Students are represented in the application only as sequential placeholders (“Student 1,” “Student 2,” and so on). You are responsible for maintaining any private mapping between these placeholders and real students, and for keeping that mapping outside of SPEDMinutes.

• Account email, used for authentication via magic link.
• Stripe customer ID and subscription status, used for billing.
• IEP goal text you enter into the quiz creator, transmitted to Anthropic to generate aligned quiz items. Subject to the name-detection guardrail described in Section 02. Not retained by SPEDMinutes after the request completes.
• Bell schedule images you upload, transmitted to Anthropic to extract period times. Not retained after the request completes.
• Service-minute calculations and checklist progress, stored against placeholder student records only.
• Daily quiz generation counts, stored for usage-limit enforcement (user ID and timestamp only).
• Anonymous analytics on our marketing pages, captured by Microsoft Clarity — see Section 05.

Microsoft Clarity is enabled on our marketing pages (homepage, pricing, privacy policy, terms, and similar public pages) to help us understand how visitors discover and evaluate SPEDMinutes. Clarity records aggregate session behavior — pages viewed, clicks, scrolling, browser, device, and approximate location derived from IP address.

Clarity does not run on the application itself (/app), the settings page, or any page where you work with student data. Clarity is governed by Microsoft’s privacy policy.

• Supabase — authentication and database hosting
• Stripe — payment processing
• Anthropic — AI processing of IEP goal text (quiz creator) and bell schedule images
• Vercel — web hosting
• Microsoft Clarity — analytics on marketing pages only

Each operates under its own privacy policy. Per Anthropic’s API terms, data submitted through their API is not used to train models.

SPEDMinutes is not a “school official” under FERPA and does not receive or store education records. Because we do not store student names, work product, or other identifying records, and because our guardrails are designed to prevent identifying information from being transmitted to our AI provider, SPEDMinutes operates with minimal exposure to FERPA, IDEA confidentiality requirements, California AB 1584, and SOPIPA.

You remain responsible for ensuring your use of SPEDMinutes complies with your district’s data policies. This includes not attempting to bypass the name-detection guardrail, not entering student PII into goal text or other fields, and consulting your district’s data governance team if you have any uncertainty about whether your use is appropriate.

You may delete your account at any time from Settings, which permanently removes all associated data within 30 days. Stripe billing records are retained per Stripe’s policies and applicable tax law.

Data in transit is encrypted via TLS. Data at rest is encrypted by Supabase.

SPEDMinutes is intended for use by adult educators. The service is not directed to children under 13 and we do not knowingly collect information from children.

We may update this policy. Material changes will be communicated via email to active subscribers.

support@spedminutes.com