Privacy Policy

1. Overview

This Privacy Policy describes how The Levitt Lab ("we," "us," or "our") collects, uses, and shares information when you use our web application and related services (the "Service"). By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Account and authentication information

When you sign in with Google, we receive information made available through that sign-in process, such as your name, email address, and profile information.

Educational and program information

We collect and store information related to your participation in The Levitt Lab, which may include attendance records, course progress, notes, house assignments, advisor information, and related educational data entered or generated through the Service.

Usage and device information

We automatically collect certain technical information when you use the Service, such as pages viewed, features used, browser type, device type, approximate location derived from IP address, timestamps, and diagnostic or error information.

3. How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service.
• Authenticate users and manage access to authorized features.
• Support educational tracking, attendance, and student progress workflows.
• Monitor performance, troubleshoot issues, and protect against misuse.
• Understand how the Service is used so we can improve the experience.
• Comply with legal obligations and enforce our Terms of Service.

4. Analytics and PostHog

We use PostHog, a third-party analytics platform, to understand how the Service is used: which screens people open, which controls they use, and whether an action succeeds. That includes page views, navigation, and product events for attendance, the roster, progress, notes, and Vittcoin, along with device and browser details.

Those product events include the text people type, such as search terms, notes, and names. Vittcoin events record the exact amount of each transaction and the resulting balances, along with the names, houses, and grades of the students involved. Session replay records the page as it appears, including on-screen text and text typed into forms. Replay does not record browser console output, and password fields stay masked.

Separate operational logs may still include an email address when a sign-in is rejected, so we can correct an access-list problem. When the Service hits an unexpected error, we also send that error and its stack trace to PostHog, with the page path. PostHog processes analytics, those logs, and those error reports on our behalf for product improvement and operations. PostHog may use cookies, local storage, or similar technologies to recognize browsers or devices across visits. For more information about how PostHog handles data, see PostHog's Privacy Policy.

5. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, and support analytics. You may be able to control cookies through your browser settings, but disabling certain cookies may affect Service functionality.

6. How We Share Information

We may share information:

• With service providers that help us operate the Service, such as hosting, analytics, and authentication providers.
• With authorized Levitt Lab guides, staff, and administrators for educational and operational purposes.
• When required by law, regulation, legal process, or governmental request.
• To protect the rights, safety, and security of users, The Levitt Lab, or others.

We do not sell your personal information.

7. Data Retention

We retain information for as long as needed to provide the Service, support educational records, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of information and how it is used.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children and Students

The Service is used in an educational context and may involve information about students. Access is limited to authorized participants, and student information should be handled consistent with applicable school, program, and legal requirements.

10. Your Choices and Rights

Depending on your location and role, you may have rights to access, correct, delete, or restrict certain uses of your personal information. To make a request, contact your Levitt Lab guide or the site administrator.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy or our data practices, contact your Levitt Lab guide or the site administrator.