Privacy Policy

1. Our Privacy Commitments

Latimer Enterprises LLC is the operator of Latimer Energy Academy. We are a Delaware limited liability company committed to protecting the privacy and security of everyone who uses our platform.

We believe privacy is a right. Here are our five commitments:

1. We do not sell or share your personal information. We never sell, rent, or share your data with third parties for their marketing use.
2. Students never create accounts and never provide personal information to us. Students access classroom sessions through a privacy-preserving entry process that requires no account creation and collects no personal information.
3. We collect only what is needed to run the platform. If we are not using data to deliver the service, improve the experience, or comply with the law, we do not collect it.
4. We are transparent about what data we collect and why. This policy explains exactly what we collect, from whom, and why. No hidden tracking, no surprise data collection.
5. You can request access to, correction of, or deletion of your personal information at any time. Contact privacy@latimerenergyacademy.com.

2. Who We Are

Latimer Enterprises LLC is a Delaware limited liability company. We operate the Latimer Energy Academy platform and website.

Questions about this Privacy Policy may be directed to: privacy@latimerenergyacademy.com.

3. Who This Policy Covers

This Privacy Policy applies to three groups of people:

• Website Visitors: Anyone who visits the Latimer Energy Academy website without creating an account. We collect minimal data (see Cookies section below).
• Instructors and Account Holders: Teachers, school administrators, club advisors, community leaders, and parents who create accounts to use the platform.
• Parents and Guardians: Parents or guardians of students who access classroom sessions through LEA.

This policy does NOT describe data collection from students. Students do not create accounts on Latimer Energy Academy and do not provide us with personal information. See Section 6 for our explicit commitments on what we do not collect.

4. What We Collect — Instructors and Account Holders

When you create an account, we collect:

• Your name
• Your email address
• Your school or organization affiliation
• Your role type (optional) — e.g., teacher, principal, community advisor

Why we collect this: To create your account, send platform updates, comply with school partnership agreements, and deliver the service.

Data storage: Your account information is stored on Supabase, our data processor and cloud database provider. Supabase processes instructor and parent account data on our behalf under a data processing agreement.

5. What We Collect — Website Visitors

If you visit the Latimer Energy Academy website anonymously (without an account), we collect cookies only (see the Cookies section below). We do NOT collect your name, email address, IP address, or other identifying information from anonymous visitors.

If you fill out a contact form on our website, we collect only the information you voluntarily provide and use it solely to respond to your inquiry.

6. What We Do NOT Collect

Here is what Latimer Energy Academy explicitly does NOT collect:

• We do NOT collect student names
• We do NOT collect student email addresses
• We do NOT collect student ages or dates of birth
• We do NOT collect student photos, biometric data, or video recordings
• We do NOT track individual students across sessions or between days
• We do NOT serve advertising to students or instructors
• We do NOT sell any personal information to anyone

7. How We Use Data

We use collected data to:

• Deliver and improve the Latimer Energy Academy platform
• Authenticate and maintain instructor and parent accounts
• Display lesson progress and assessment results to instructors
• Send transactional emails (session confirmations, password resets)
• Diagnose technical issues and improve platform reliability

We do not use data for targeted advertising. We do not sell data to third parties. We do not share data except as required to operate the service (see Section 9).

8. COPPA Compliance — School-Official Consent Model

Latimer Energy Academy is designed to be fully COPPA-compliant. Because students never create accounts or provide personal information, the platform does not collect “personal information” from children under 13 as defined by COPPA (15 U.S.C. §§ 6501–6506).

When an instructor creates an account and sets up a classroom session, they represent that they are an authorized representative of their school or educational organization. By doing so, the instructor confirms that: (a) the school has authorized the use of LEA with students; and (b) the school is acting as the parent’s agent for COPPA purposes, under the school-official-as-operator exception (§312.5(b)(1)).

If you are a parent and have questions about COPPA compliance or your child’s privacy, contact us at privacy@latimerenergyacademy.com.

9. FERPA Compliance

Latimer Energy Academy acts as a “school official” under FERPA (the Family Educational Rights and Privacy Act) for the instructor records it processes. This means we operate under the legitimate educational interest exception when accessing instructor account data on behalf of the school.

Our FERPA scope is narrow: We process only instructor personal information (name, email, school affiliation) and aggregated, anonymized student performance data (mission progress, assessment results, without student identifiers). We do NOT process student names, email addresses, or any individually identifiable student information.

We use this data solely to operate the platform and help instructors track class progress. We do not share it with third parties.

10. Third-Party Services

Latimer Energy Academy uses the following third-party services and tools:

MakeCode (Microsoft)

We embed MakeCode, a block-based code editor from Microsoft, to power coding lessons. Students interact with pre-loaded lesson content only. No personal data is sent to Microsoft. MakeCode’s practices are governed by the Microsoft Privacy Statement.

Supabase

Supabase is our data processor and cloud database provider. Supabase stores and manages instructor and parent account data, authentication tokens, and platform operational data under a data processing agreement. Supabase does not have independent rights to use this data for their own purposes. See the Supabase Privacy Policy.

Monaco Editor

Monaco Editor is an open-source code editor used in Python and JavaScript lesson modules. All code is processed locally in your browser — Monaco does not transmit any data externally.

Google Analytics 4

We use Google Analytics 4 (GA4) to understand how you use our site. GA4 is loaded only after you accept analytics cookies on our consent banner. Google Analytics automatically anonymizes your IP address — we do not send any personal information to Google. No student data is included in any analytics collection. See the Google Privacy Policy for details on how Google processes this aggregated data.

Sentry

We use Sentry, an open-source error and performance monitoring service, to detect and diagnose technical issues on the platform. Sentry may capture stack traces, browser and operating system metadata, and anonymized request context when an error occurs. We configure Sentry to exclude personal information (request body, cookies, headers, and user context) from events originating from public-facing intake routes such as the contact form and waitlist. No student data is included in error reports. See the Sentry Privacy Policy.

Google Calendar (Contact Scheduling)

Our contact and demo-scheduling pages embed a Google Calendar appointment scheduler. When you visit those pages, your browser makes a direct request to Google’s servers. Google may receive your IP address and may set its own cookies as part of loading that embed — see the Google Privacy Policy for details. We do not receive the personal data Google collects through its own services.

11. Data Retention

• Instructor and parent account data: Retained while your account is active. Deleted within 90 days of account closure or 12 months of inactivity.
• Classroom session data (student nicknames): Not persisted beyond the active session. Deleted automatically within 24 hours of session end.
• Mission progress data: Retained while the school license is active. Deleted within 30 days of license expiration.
• Cookie data: Per the durations listed in the cookie table below. Session cookies deleted when you close your browser.

12. Your Rights

Instructors and parents with accounts may request:

• Access — a copy of the personal information we hold about you
• Correction — fix inaccurate or incomplete information
• Deletion — remove your personal information (subject to legal constraints)

Send a request to privacy@latimerenergyacademy.com. We will respond within 30 days.

13. Children’s Privacy

Latimer Energy Academy does not knowingly collect personal information from children under 13, except as permitted under COPPA and FERPA through the school-official consent model described in Sections 8 and 9.

If you are a parent and believe we have collected personal information from your child in error, contact us immediately at privacy@latimerenergyacademy.com.

14. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Delaware and the United States, without regard to conflict-of-law provisions. Latimer Enterprises LLC is a Delaware limited liability company.

15. Effective Date

This Privacy Policy is effective as of April 13, 2026 and was last updated April 13, 2026. We may update this policy to reflect changes in our data practices or legal requirements. Material changes will be communicated by email to registered accounts or by posting the updated policy with a new “Last Updated” date.