Data Security

In plain words

We collect very little, and we work to protect what we do collect. All connections to Little Lobos Academy are encrypted, and access to data is restricted by role-based rules.

Parents manage everything. Children never create accounts, never change settings, and never see billing information.

We do not claim any formal security certification. This page describes what we actually do, in plain language.

What data we hold

We store the parent's account email, student first names, learning progress and activity attempts, documents parents choose to upload (like receipts or curriculum), and a cache of audio narration.

We intentionally keep this footprint small. Less data stored means less data to protect.

Encryption in transit

Every connection between your device and Little Lobos Academy uses HTTPS, so information is encrypted while it travels over the internet.

This applies to logins, learning activity, and uploaded documents alike.

Access controls

Our database uses row-level security — a rule system that ties each piece of data to the account that owns it. One family's data is walled off from another's at the database layer, not just in the app.

Parents control all accounts and student profiles. Children interact with the platform only under parent supervision and cannot reach settings or account data.

Where data lives

Little Lobos Academy is hosted on established cloud infrastructure: Vercel for the application and Supabase for the database.

These providers maintain their own physical and network security for the underlying servers, on top of the application-level protections we build.

What we do not do

We do not sell data. We do not show ads. We do not embed third-party ad trackers.

Your family's information is used to run the platform for your family — nothing else.

If something goes wrongpending legal review

No system on the internet is perfectly secure, and we will not pretend otherwise. If we ever discover a security incident affecting your family's data, our intent is to investigate promptly and notify affected parents.

Formal incident-response and breach-notification procedures are being prepared with legal counsel and will be finalized before public launch.

Contact

If you spot a security concern, please tell us at contact@cyberwolfai.com. We take reports from parents and researchers seriously.