BookBright

COPPA Notice

Last updated: 2026-07-31.

Our commitment

BookBright is built for kids in grades 3-12, including children under 13. The Children’s Online Privacy Protection Act (COPPA) governs how we handle their data. We comply with COPPA at the design level, not as an afterthought.

What we collect from children under 13

For student profiles created by a parent under a parent account, we collect:

  • Display name (first name or nickname only; no last name)
  • Grade level
  • Optional avatar/mascot selection (no photos)
  • Study activity: which questions were attempted, results, streaks, mastery

We do not collect: email addresses, last names, phone numbers, addresses, photos, geolocation, voice recordings, or any persistent identifier that would let a child be tracked across services.

Parental consent and control

A parent or legal guardian creates the account, manages billing, and creates the student profile. The parent can at any time:

  • Review the data associated with each student profile
  • Edit or delete a student profile
  • Refuse the further collection of data by deleting the account
  • Receive a copy of the student’s data by email request

We retain student profile data only while the parent account remains active, and only as long as it is needed to provide the service. Account deletion removes student profile data within 30 days.

No third-party tracking

We do not use third-party advertising networks, and we do not allow any third party to collect personal information from children using BookBright for its own purposes. We use two measurement tools strictly for the internal operations COPPA permits, keeping the service working and fixing bugs:

  • Sentry receives crash and error reports so we can find and repair failures. Reports are configured to exclude names, email addresses, and study content.
  • PostHog counts page visits and feature usage on our website. Activity on student-facing screens is anonymous and is never tied to a student’s identity.

Neither tool is used to profile children, serve advertising, or track children across other apps or websites.

Service providers

We use Supabase (database), Stripe and RevenueCat (payments, parent-side only), Apple and Google (in-app purchases, parent-side only), Resend (transactional email, parent-side only), Expo (push notification delivery; the push token belongs to the parent’s device and account, never to a student profile), Vercel (hosting), Sentry (crash and error reporting, scrubbed of user-identifying details), and PostHog (website analytics, anonymous on student-facing screens). Each operates as a service provider on our behalf and does not use child data for any other purpose.

Teachers and student data

Teacher accounts are list-building only. Teachers cannot see who used a share code, cannot see individual student progress, and have no visibility into student profile data. This is intentional to keep school-side use COPPA-aligned without requiring district-level data agreements.

Operator contact information

Next Chapter Education LLC (operating as BookBright)
5456 Cattle Dr., Missoula, MT 59808
Phone: (502) 264-9015
Email: contact@bookbright.app

We respond to parental requests within 30 days, usually within 1-2 business days.