Draft — under legal review. Last updated 2026-10-07. Version 2026-09-30-draft

Privacy Notice

This notice explains what information B4 Uni collects when a parent or guardian signs up a family, what we do with it, who can see it, and what you can do about it. It is written for parents. If something here is unclear, write to us at [email protected].

Who we are

B4 Uni (b4uni.com) is run by B4 Uni Trust, 255 Blue Lakes Blvd # 618, Twin Falls, ID 83301. In this notice "B4 Uni", "we" and "us" mean B4 Uni Trust. For privacy questions or requests, contact [email protected].

The short version

A parent or guardian, 18 or older, creates the family account with an email address. Children under 13 don't sign up on their own and don't give us an email address. A person aged 13 to 17 may hold a teen account with their own email address (see Teen accounts).
For a child we keep only a nickname, an avatar picture chosen from a set, and, if you choose, a grade band. We ask for a child's date of birth to check they are 13 or older. We don't ask for a child's real name, photo or email.
A child's grade band is never shown to anyone else. Other people see only the child's nickname and avatar.
Children can't send private messages, and posting in classes is off until a parent turns it on.
B4 Uni itself sets one cookie, only to keep you signed in, and we don't use advertising or analytics trackers. One outside service loads content on the sign-in pages and may set or receive browser data such as your internet (IP) address: Cloudflare, for the bot check.
We don't sell your information or your child's.

What we collect from you (the parent or guardian)

Your email address. We use it to send you sign-in links and account notices. Having access to this email is how you get into your family account.
Your name. We ask for your own name as an adult, because it is meant to be used on certificates and in teacher records. Today it labels your profile in your family account, and your family is named after your first name (for example "Sam's family"). You and the other parents in your family can see both. We don't publish your name to the B4 Uni community.
Your confirmation. When you sign up, or accept an invitation to a family, you confirm that you are a parent or guardian, 18 or older, and that you agree to our Terms and this notice. We record when you agreed and which version you agreed to (the version is shown at the top of each page).
Your permissions for each learner. For each learner we also record, separately, whether a parent allowed AI tutors and whether badges may be shown publicly: who agreed, when and to which version. Any parent in the family can turn these off in Settings, under Kids & accounts, and every parent is emailed when AI tutor use changes.
A signature account for you. Like each child, every parent in a family gets a digital signature account that B4 Uni creates, holds and stores encrypted. What you do in the community is signed with it.
Other parents you invite. If you invite another parent or guardian to help manage your family, we collect the email address you enter so we can send them an invitation. If that address already has an account, we send that person a short notice instead of an invitation.
A family PIN, if you set one. It stops a child switching into a parent's profile. We store only a scrambled (hashed) form of it, not the PIN itself.
Devices you sign in for a child. For each one we keep the name you give it, if any (for example "Ada's tablet"), when it was signed in, and when it was last used, so you can recognise and remove it.

What we collect about your child

Only you, a parent, can create a child's profile. For each child we keep:

A nickname. It must not contain an email address, a phone number or a web address, and we warn you if it looks like a full name.
An avatar picked from a fixed set of pictures (such as a bee or a fox). There is no photo upload.
A grade band, if you choose to give one (6–8, 9–12 or adult learner; older accounts may show K–2 or 3–5). It is kept in the family account only and is never published or shown to other members.
A date of birth. Learners must be 13 or older. It is kept in the family account only, is never published or shown to anyone (including the learner's own profile), and can't be changed afterwards without contacting us. If a learner is under 13 we refuse the account and save nothing about the learner. We keep only a note that a refusal happened, with no name or date, for 90 days.
What your child does in B4 Uni: courses they join, lessons they mark complete, reactions, and posts if you have turned posting on.
A digital signature account that we hold for your child. Everything your child does in the community is signed with it, so that it is recorded as theirs. It is created and stored by B4 Uni, encrypted, and is never sent to your child's device (see "Keeping information safe").

We don't collect a child's email address, phone number, school name, photo or location.

What we collect automatically

One sign-in cookie. When you sign in we set a single cookie called b4u_session. It keeps you signed in and is used for nothing else. Your browser's scripts can't read it. It lasts 30 days from your last visit on a parent's device, or 180 days on a child's device that you signed in, and you can end it sooner by signing out or removing the device.
A bot check. The sign-up and sign-in form uses Cloudflare Turnstile to check that a person, not an automated program, is using it. Cloudflare may set or receive browser data, including your internet (IP) address, to do this.
Your internet (IP) address and email address for limits. We count how many sign-in links are requested from each email address and each internet address, and how many times each internet address tries to sign in a child's device, to stop abuse.
A record of account actions. We log actions such as "a learner was added", "posting was turned on", "a device was signed in or removed", and, for each action your child takes, what type it was, when, and which class or school space it was in. This log never contains the words of a post.
Things saved in your browser. The site remembers your light or dark theme. While you are signing up, it keeps the email address and name you typed in this browser tab only, until the tab is closed, so the "check your email" page can show them. It also keeps copies of course files and the site itself on your device so pages load faster and work offline.

How we use information

To create and run your family account, sign you in and keep you signed in.
To let your children take part in courses and school spaces within the limits you set.
To send you sign-in links and notices about your account (for example, when a parent is removed from or leaves your family, the family gets a new owner, or the family is deleted).
To keep B4 Uni safe: stopping automated sign-ups, limiting how often links can be requested, and enforcing the rules for children's accounts.
To process payments for paid plans (see "Service providers").
To let parents follow their own learner: in Settings → Kids & accounts → Supervision, a parent sees their learner's own posts in their courses and the replies made directly to those posts (including replies from other learners, teachers and AI tutors). Parents don't see anything else in a course.
To run an AI tutor in a course, only when a parent has agreed and only when the learner @mentions it: AI tutors are run by an adult we have cleared (the tutor's handler), not by B4 Uni. We keep a short record of each time a tutor was asked and of each AI reply we checked: which tutor, which course, when and what happened (never the words anyone wrote) for about 90 days. We remove any AI reply that breaks our rules and tell the handler. The text of the question is sent to the company that runs the AI model the handler chose, to write the answer. Parents can see the record and pause AI tutors at any time in Settings, under Kids & accounts, on the Supervision page.
To send parents a summary email (weekly unless a parent chooses daily or off) with counts only, never what anyone wrote; and a safety alert when a private message is opened with a learner or a learner reports something.

We don't sell personal information, and we don't use children's information for advertising.

What other people can see

Your child's profile shows only their nickname and avatar. It is published as the child's public profile on B4 Uni's community servers, so it is public, and it cannot be fully erased later (the one exception to deletion; see "If you delete your family").
In class and school spaces, other members can see your child's reactions, lessons they mark complete and, if you have turned posting on, their posts. A course space is seen by that course's members. A school space can be seen by anyone in the B4 Uni community.
Other learners' parents: if your learner replies directly to another learner's post, the parents of another learner can see your learner's replies to their learner (only those replies, not your learner's other posts).
Other parents in your family can see your family's profiles and your name. Parents see each other's email addresses only partly hidden (for example j•••@example.com).
Private to your family: email addresses, your name, your child's grade band, date of birth, permissions, your PIN, your devices, and the account records described above.

Messages and activity in class and school spaces are stored on B4 Uni's community servers so other members can see them.

Children's privacy and your choices as a parent

B4 Uni is used by learners aged 13 and older as well as adults. A child's profile exists only because a parent created it, and it stays under that parent's control. For children we limit what the account can do:

No private or direct messages, and no posts outside their classes and schools.
Posting in classes is off until you turn it on, and you can turn it off again at any time.
Children can open course files. A child can't upload a file unless you turn on picture sharing for them in Settings; the app then lets them share a picture with their class when a lesson asks for one.
Children can't change their own profile; it is built from the nickname and avatar you chose.
Children can undo their own posts and reactions.

As a parent you can:

See your children's profiles and turn posting on or off for each child.
Turn picture sharing on or off for each child. It is off by default and needs posting. To turn it on you need a family PIN and you confirm with a link we send to your email; turning it off needs neither.
Get an email when picture sharing is turned on for a child, and when a family PIN is first set or removed. Every parent in the family gets it. It names the child by nickname only.
See the devices signed in as your child and remove any of them, which signs that device out.
Set or remove a family PIN.
If you are the family's owner, invite or remove other parents. Removing a parent signs them out everywhere and deletes their profile in your family.
If you are not the owner, leave the family yourself.
If you are the family's owner, delete your family yourself in Settings, under Account & security (see "If you delete your family" below).
Ask us, at [email protected], for a copy of the information we hold about your family, to correct it, or to delete a child's profile.
Stop your child's use of B4 Uni at any time by asking us to delete their profile. You can also refuse to let us collect more information about your child, by not turning on features that need it.

When a parent is removed, we email that parent. When a parent is removed or leaves, we email the other parents in the family to tell them. When a family is deleted, we email every parent in it.

Feedback and bug reports

When you use "Send feedback or report a bug", we keep what you write, the kind you chose, and a short page line (the page's name, the app version and your browser and its version) in B4 Uni's family service until the thread is deleted: 400 days after its last message, or when your family is deleted. The people who run your school, and B4 Uni's operators, can read and answer it, and a parent can read a teen's thread. GitHub becomes a processor of a message once a B4 Uni operator files it as an issue. A filed issue cannot be recalled by deleting the account. The operator removes personal details from the text before filing, and the issue never carries replies, names, email addresses or ids.

Service providers

We use these companies to run B4 Uni. They handle information only to provide their service to us.

Cloudflare: hosts the b4uni.com website, sends our emails, runs the Turnstile bot check, and stores course files, pictures and backups.
Fly.io: runs the service that holds family accounts (including the encrypted signature accounts we hold for parents and children) and runs our community servers.
Supabase: hosts the database behind our community servers, which stores activity in class and school spaces.
GitHub: holds the issue for a feedback message that a B4 Uni operator files (see "Feedback and bug reports" above).
Stripe: processes payments for paid plans. You pay on Stripe's own hosted checkout page, so B4 Uni never sees your card number.

Our main databases and servers are in the United States. Cloudflare and Stripe, named above, process data on their own networks, which may be in other countries.

How long we keep information

Sign-in links work once and expire after 15 minutes (10 minutes for confirming a sensitive change, 3 days for handing over ownership of a family).
Sign-in sessions end 30 days after last use on a parent's device, or 180 days on a child's device, unless you sign out or remove the device sooner.
Your family account and your children's profiles are kept until you delete your family or ask us to delete them.
Used or expired sign-in links and device codes, ended sessions and request-limit counts are deleted 30 days after they stop being used.
The record of account actions is deleted after 90 days. Two kinds are kept for one year instead: records of posts our staff removed, and records of actions taken by B4 Uni or its operators that belong to no family.
Feedback threads are deleted 400 days after their last message, or when your family is deleted. An issue an operator has filed on GitHub is not deleted with them.
Backups of family accounts are kept for 30 days, then erased.

If you delete your family

The family's owner can delete the family in Settings, under Account & security. To protect your children, we first ask for the family PIN, if you set one, and for a confirmation link sent to the owner's email. You can also write to [email protected]. When a family is deleted, we:

Sign everyone in the family out, on every device.
Destroy the private part of every signature account we held for your family, so nothing can be signed as your family again. The accounts' public identities stay listed as members of the community spaces they joined until they are removed; ask us at [email protected] to remove them.
Delete the personal information in the account (email addresses, names, nicknames, grade bands, dates of birth, permission records, PIN, devices and the record of account actions). Copies in our backups are erased within 30 days.
Keep, for 30 days, only a note that a family was deleted and when, with no names or email addresses.
Keep a record that each signature account in your family was withdrawn, identified only by a code with no name attached, so it isn't treated as an active account again.
Email every parent in the family to tell them.

One exception: a learner's nickname and preset avatar are published as their public profile on the community servers and cannot be fully erased. Deleting the family removes them from our account records, but copies already published may remain.

Posts, reactions and lesson completions already made in class and school spaces stay there, with your child's nickname and avatar, unless the owner ticks "Also remove what my family shared" when deleting. Then we ask our community servers to remove each item your family's profiles shared in the last 90 days, and tell you how many were removed. Anything older, or anything that couldn't be removed at the time, can be removed on request at [email protected].

Teen accounts

For a teen account we store the teen's email address, used only to send sign-in links, a nickname, a picture choice and a date of birth. The date of birth is never shown to anyone. We do not ask for a name, a phone number, a photo or a location. A teen can ask us to delete the account at any time by writing to the contact address below.

Keeping information safe

The signature accounts we hold for parents and children are stored encrypted. The secret that unlocks them is kept separately from the encrypted accounts and never stored with our backups.
Your child's device never receives their signature account, so a lost or stolen device can't be used to copy it. You can remove the device from your family.
Sign-in links and sign-in sessions are stored only in a scrambled (hashed) form.
The sign-in cookie can't be read by scripts running on the page.

No system is perfectly secure. If we learn of a breach that affects your information, we will tell you as the law requires.

Changes to this notice

If we change this notice we will update the date at the top. If a change is material, we will tell parents and guardians by email or by a notice on the site before it takes effect.

Contact

B4 Uni Trust
255 Blue Lakes Blvd # 618
Twin Falls, ID 83301
[email protected]