Student & User Privacy Policy

1. Institutional Commitment & Legal Entity

Legacy United ("Legacy United", "we", "our", or "us"), operating under the official corporate domain legacyunited.io, maintains ironclad standards of student, educator, and guardian privacy. This Privacy Policy governs all personal data collected across our physical educational academies, regional laboratory testing centers, and sovereign digital EdTech mobile applications on iOS, iPadOS, and the web.

2. Strict Compliance with Student Privacy Laws (COPPA, FERPA, GDPR)

Legacy United adheres strictly to the Children's Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), the California Consumer Privacy Act (CCPA), and the General Data Protection Regulation (GDPR):

• Zero Advertising & Tracking: We never display third-party advertisements, never sell student personal records, and do not embed commercial behavioral tracking SDKs.
• Data Minimization: We collect only information strictly necessary to administer academic curricula, proctor coursework, and certify academic milestones.
• Parental Rights: Parents and legal guardians possess the absolute legal right to review, update, or demand the permanent deletion of their student's personal information at any time.

3. Categories of Information Collected

• Account Information: Student/guardian name, institutional or guardian email address, school affiliation, and enrolled grade levels.
• Curriculum & Learning Telemetry: Lesson progress timestamps, evaluation scores, student assignment submissions, and instructor feedback logs.
• Technical Diagnostics: Device model, OS build version, and anonymized performance telemetry used solely to optimize application stability and high frame-rate performance on Apple devices.

4. Data Security, Retention & Encryption Standards

All student records and data transmissions are encrypted in transit using industry-standard TLS 1.3 and encrypted at rest using AES-256 encryption on secure, SOC-2 audited enterprise infrastructure. Data is retained only for the active duration of the student's academic enrollment plus any legally required educational archival periods.

5. Account Deletion & Right to Erasure (Apple Guideline 5.1.1(v))

In full compliance with Apple App Store Review Guidelines, users and guardians may request complete and permanent account deletion and erasure of all associated academic records directly from their mobile application profile settings or by submitting an email to: support@legacyunited.io. Account deletion requests are executed within 7 business days.

6. Contacting the Data Protection Officer

For questions, parental inquiries, or data access requests, please contact our Central Privacy Governance Desk: