ScaffoldPath

Privacy

Your data, in plain terms.

ScaffoldPath is built for families, so privacy starts with a simple structure: adults hold the accounts, and everything recorded about a learner comes from the adult supporting them. This page says exactly what we collect, what we never do, and the controls you have.

Parent-mediated by design

ScaffoldPath accounts belong to adults — parents, guardians, and educators. Learners never register or sign in themselves; they use the product with an adult's support. Everything recorded about a learner is provided by the adult, never collected from the child directly.

What we collect

  • Account data Email and display name Used to sign you in and greet you. Passwords are hashed by our auth provider — we never see or store them in plaintext.
  • Learner profile The intake answers you provide Strengths, interests, sensory needs, and daily contexts — the structured profile the matching rules run on. Every intake question can be skipped.
  • Usage data Check-ins and weekly reviews Daily completions, difficulty and independence ratings, and your weekly reflections — the record that drives progress charts and adjustment proposals.

We do not ask for precise birthdates, school names, or home addresses, and we do not want them — please keep them out of free-text fields too.

What we never do

No ads, no trackers, no analytics beacons — pages load only from our own domain. One deliberate exception: if you choose to use the optional AI wording assistant, a single request goes to DeepSeek to draft that wording (exactly what it contains is in the next section). We never sell or share your data. The full technical account of how data is handled, including what is still not built, is on the About page.

The AI wording assistant (optional)

On your plan page, each strategy card has an optional button — Make it fit my learner — that asks an AI service to reword that one strategy around your learner's interests and strengths. Nothing is sent anywhere until you press it.

  • What is sent Strategy text plus questionnaire labels The strategy's published wording (public on our library page) and the labels you picked in the questionnaire — grade, interests, strengths, sensory notes. If you write a feedback note, it is sent exactly as you typed it.
  • What is never sent No names, emails, or free-text notes Your account details and the free-text "anything else" notes from your profile never leave our database for this feature.
  • Who receives it DeepSeek, our AI wording provider One request per button press, used only to draft the wording. See the Processors section below.
  • How the output is guarded Validated, and you decide Every draft passes automatic checks (length, no medical or deficit language, no suggestions to switch strategies); if a draft fails, it is quietly dropped and the reviewed original stays. A draft only becomes part of your plan when you press Keep — and you can Remove it anytime.
  • What it never touches Decisions stay rule-based The AI never recommends, ranks, adds, or removes strategies. Which strategies appear is always the published rule-based matching you can inspect on the algorithm page.

Children's privacy (COPPA)

ScaffoldPath is not directed at children under 13, and we do not knowingly collect personal information directly from children — if we ever receive it by mistake, we delete it promptly. Accounts are for adults only, and registration requires confirming you are an adult setting the product up for a learner. If you believe a child has created an account, contact us at hello@scaffoldpath.com and we will delete it promptly.

Your controls

  • Export Take your plan with you Download the full support plan as a PDF anytime from Plan.
  • Change Edit the profile anytime Update any intake answer on the Profile page — changes take effect immediately.
  • Delete Self-serve, immediate, complete Delete your account yourself in two confirmations — the account and all of its data are removed at once.

Processors

  • Supabase Database and authentication Hosts the Postgres database and manages password hashing and sign-in sessions.
  • Resend Transactional email Delivers sign-in and password-reset email. No marketing email is sent.
  • DeepSeek AI wording (optional, on demand) Drafts the optional personalized wording when you press the button. Receives the strategy's published text and your questionnaire labels — never names, emails, or free-text notes.
  • Vercel Hosting Serves the pages and API that make up the product.

Changes & contact

If this page changes, the update is noted here with its date. Questions, requests, or concerns: hello@scaffoldpath.com.

Last updated: 2026-09-08.