Privacy Policy Tadpole Technologies Inc.

Privacy Policy

How LessonLogic collects, uses, and protects your personal information — in plain language, with no small-print surprises.

Effective date
April 1, 2026
Last updated
April 1, 2026
Governing law
Ontario, Canada
The short version — what every teacher needs to know

LessonLogic is built by a teacher for teachers. We collect the minimum information needed to run your account and keep your schedule in the cloud. We will never sell, rent, or share your personal data with advertisers or data brokers — ever. Your schedule, your students' names, and your classroom information are yours. We use them only to operate the app for you. Payments are handled entirely by Stripe — we never see your card number. Account security is handled by AWS Cognito — we never store your password. That's the whole story.

Section 01

Who We Are

LessonLogic is operated by Tadpole Technologies Inc., a corporation incorporated in Ontario, Canada. When this policy says "LessonLogic," "we," "us," or "our," it refers to Tadpole Technologies Inc.

LessonLogic is a web-based scheduling platform designed for K–12 classroom teachers. It helps teachers manage rotation schedules, unit plans, assessments, supply teacher plans, and other day-to-day scheduling tasks.

You can reach us about privacy matters at [email protected].

Section 02

What We Collect

We collect only what is necessary to provide the service. Here is a complete list of the categories of information we collect and why:

CategoryWhat it includesWhy we collect it
Account information Your first name, last name, email address, and optional school name To create and identify your account, and to send account-related emails (verification, password reset)
Schedule data Your rotation schedule, term dates, subjects, units, lessons, assessments, extracurriculars, duties, and holidays To store and sync your schedule so you can access it from any device
Student data (optional) Student names and progress notes you choose to enter — entirely optional and at your discretion To support the student progress tracking features within LessonLogic; this data is only used to display it back to you
Subscription status Your plan type (trial, Pro Monthly, Pro Annual), subscription status, and billing cycle dates To determine which features you have access to; we receive this from Stripe via webhook — we do not store your card details
Usage information Basic technical data such as browser type, device type, and pages visited within the app To diagnose errors, improve performance, and understand how the product is used — only if analytics are enabled
Communications Emails or support messages you send us To respond to your questions and improve the product
What we do not collect
We do not collect your payment card number, CVV, or expiry date — Stripe handles all payment data. We do not collect your password — AWS Cognito handles authentication. We do not collect precise location data, device identifiers, or biometric information.
Section 03

How We Use Your Data

We use the information we collect exclusively to provide and improve the LessonLogic service. Specifically:

  • To operate the app: Your schedule data is stored in our cloud database so you can access, edit, and sync it across devices.
  • To manage your account: Your name and email are used to identify your account, send email verification, and process password resets.
  • To manage your subscription: We use your subscription status (received from Stripe) to determine which features are available to you.
  • To send service communications: We may send you emails about your account (e.g., trial expiry reminders, payment receipts, important service notices). We will not send unsolicited marketing emails without your explicit opt-in.
  • To improve the product: Aggregated, anonymised usage data may be used to identify bugs, prioritise new features, and understand how LessonLogic is used. This data cannot be traced back to individual users.
  • To comply with legal obligations: We may use or retain data as required by Canadian law, including in response to valid legal process.

We do not use your personal data for advertising, profiling, automated decision-making, or any purpose not described in this policy.

Section 04

We Will Never Sell Your Data

🛡️
Our commitment — unconditional and permanent

Tadpole Technologies Inc. will never sell, rent, lease, trade, or otherwise transfer your personal data to any third party for commercial purposes. This includes your name, email address, school information, schedule data, student names, or any other information you provide to LessonLogic. This commitment applies regardless of any change in business circumstances, including a sale of the company or a change in ownership.

LessonLogic has no advertising business model. We do not accept advertising. We do not have relationships with data brokers or marketing platforms. Our only source of revenue is subscription fees paid directly by teachers who find the product valuable.

This is not simply a legal requirement — it is a founding principle of the product. LessonLogic was built by a teacher who believes that teachers' data, and particularly any information related to students, must be treated with the highest degree of trust and care.

What "never sell" means in practice
If Tadpole Technologies Inc. is ever acquired by another company, this privacy policy — and specifically this commitment not to sell data — will be a condition of that acquisition. Any acquirer would be bound by the same obligations to your data as we are today. If we cannot ensure that protection, we will delete all user data before any transfer takes place.
Section 05

Third-Party Services

LessonLogic uses a small, carefully selected set of third-party services to deliver the product. Each is a recognised enterprise-grade provider with strong privacy and security practices. We share only the minimum data necessary for each service to function.

💳
Stripe
Payment processing
All subscription payments are processed by Stripe, Inc. LessonLogic never receives, stores, or processes your payment card details. Stripe handles all card data under PCI DSS compliance. LessonLogic receives only your subscription status, billing cycle dates, and a Stripe customer ID. Your full card number, CVV, and expiry date are only ever stored by Stripe.
Stripe Privacy Policy ↗
🔐
Amazon Web Services (AWS) — Cognito & Infrastructure
Authentication, data storage, and cloud infrastructure
Your account authentication is handled by AWS Cognito. LessonLogic never stores your password. Cognito handles the sign-up, sign-in, email verification, and password reset flows. Your schedule data is stored in AWS databases located in the ca-central-1 region (Canada). AWS is compliant with ISO 27001, SOC 2, and numerous other security standards.
AWS Privacy Policy ↗
🌐
Cloudflare
Content delivery, DNS, and DDoS protection
LessonLogic's web application is served via Cloudflare's global content delivery network. Cloudflare may process metadata such as your IP address and browser type for security and performance purposes. Cloudflare does not have access to your LessonLogic account data or schedule content.
Cloudflare Privacy Policy ↗

We do not use advertising networks, social media tracking pixels, behaviour analytics platforms, or any third-party service that processes your data for purposes other than delivering LessonLogic to you.

Section 06

Payments & Stripe

LessonLogic uses Stripe as its exclusive payment processor. When you subscribe to LessonLogic Pro, you are redirected to a Stripe-hosted payment page to enter your card details. At no point does your card number, CVV, or expiry date pass through LessonLogic's servers.

What LessonLogic receives from Stripe
After a successful payment, Stripe notifies LessonLogic via a secure webhook. LessonLogic stores only: your Stripe customer ID (a random identifier), your subscription plan (Pro Monthly or Pro Annual), your subscription status (active, cancelled, trial), and your next billing date. That is all.

Your payment card details are stored exclusively by Stripe under PCI DSS (Payment Card Industry Data Security Standard) Level 1 compliance — the highest level of payment security certification.

If you cancel your subscription, your schedule data and account remain intact. Your access continues until the end of your paid billing period. Stripe will stop charging you, and LessonLogic will update your subscription status accordingly.

LessonLogic never charges you without your explicit action. There are no hidden renewal fees beyond what is shown at the time of subscription. You can cancel at any time from the Membership page in the app.

Section 07

Authentication & AWS Security

Account security for LessonLogic is managed by AWS Cognito, Amazon Web Services' enterprise identity platform. This means:

  • LessonLogic never stores your password. When you create an account or sign in, your password is sent directly to AWS Cognito, which securely hashes and stores it. LessonLogic receives only an authentication token confirming you are who you say you are.
  • Your password is never transmitted to LessonLogic's servers. The authentication flow goes directly from your browser to AWS Cognito.
  • Cognito uses industry-standard password hashing (bcrypt / PBKDF2) and enforces minimum password strength requirements.
  • Multi-factor authentication (MFA) may be enabled as an additional security option in future updates.
  • If you sign in with Google, your Google credentials are handled entirely by Google and AWS Cognito. LessonLogic receives only your name and email address from the Google sign-in response.

AWS infrastructure used by LessonLogic is hosted in the ca-central-1 (Canada) region, which means your data is physically stored in Canada, supporting compliance with Canadian privacy law (PIPEDA).

What to do if you believe your account has been compromised
Contact us immediately at [email protected]. You can also reset your password at any time from the sign-in page. Because authentication is managed by AWS Cognito, a password reset takes effect immediately and invalidates all existing sessions.
Section 08

Student Data

LessonLogic allows teachers to optionally enter student names and progress notes within the app. This is entirely at the teacher's discretion. If you choose to enter student information:

  • Student data is stored only in your account and is only accessible to you when logged in.
  • Student data is never shared with any third party, is never used for any purpose other than displaying it back to you within the app, and is never included in any analytics or reporting.
  • We recommend not entering full legal names, student ID numbers, or sensitive personal information. First names or initials are sufficient for the scheduling features LessonLogic provides.
  • You can delete any student data at any time from within the app. Account deletion removes all student data permanently.

LessonLogic is designed to be used by individual classroom teachers to manage their own schedules. It is not a student information system (SIS) and should not be used as a primary record-keeping system for student data. If your school board or institution has specific requirements about where student data may be stored, please confirm with your administration before entering student information.

PIPEDA & FERPA note
LessonLogic's data is stored in Canada (AWS ca-central-1) to support PIPEDA compliance for Canadian teachers. For US teachers subject to FERPA: LessonLogic is used by the teacher as a personal productivity tool, not as a school-contracted service. Individual teachers using personal productivity tools are generally not subject to the same FERPA institutional requirements as school-contracted platforms. However, we recommend consulting your district's IT policy if you are uncertain.
Section 09

Data Storage & Residency

Your LessonLogic data is stored in Amazon Web Services (AWS) infrastructure in the ca-central-1 region, which is physically located in Canada (Montreal and Calgary). This means:

  • Your personal data and schedule content remain within Canada.
  • Canadian data storage supports compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario's privacy laws.

Stripe payment data is stored by Stripe on Stripe's own infrastructure, which may include servers outside Canada. Stripe is a US company and maintains its own international data transfer agreements. For details, see Stripe's Privacy Policy.

AWS Cognito authentication tokens may be processed through AWS's global infrastructure. Authentication metadata such as login timestamps may be stored in AWS regions outside Canada. However, your personal account data and schedule content remain in ca-central-1.

We use SSL/TLS encryption for all data transmitted between your browser and LessonLogic's servers. Data is encrypted at rest in AWS databases.

Section 10

Data Retention

We retain your data for as long as your account is active. Specifically:

  • Active accounts: Your data is retained indefinitely while your account exists, including during periods when your subscription has lapsed. Your schedule is always there when you return.
  • Account deletion: When you delete your account (available from the Account Settings page), your personal data and schedule content are deleted from our databases within 30 days. Your Stripe subscription is cancelled immediately. Your AWS Cognito account is deactivated immediately.
  • Backup copies: Encrypted database backups are retained for up to 90 days for disaster recovery purposes. After account deletion, your data will be absent from live systems within 30 days, and from backups within 90 days.
  • Communications: Support emails and other correspondence may be retained for up to 2 years for quality and legal purposes.
  • Anonymised data: Aggregated, anonymised usage statistics that cannot be traced to an individual may be retained indefinitely for product improvement purposes.
Section 11

Your Rights

As a user of LessonLogic and as a resident of Canada (or another jurisdiction with applicable privacy law), you have the following rights regarding your personal data:

Right to access

You may request a copy of all personal data we hold about you at any time by emailing [email protected]. We will respond within 30 days.

Right to correction

You may update your name, email, and school at any time from the Account Settings page in the app.

Right to deletion

You may delete your account and all associated data from the Account Settings page ("Delete my account"). This permanently deletes your account from LessonLogic's systems, cancels your Stripe subscription, and removes your data from our databases within 30 days. This action cannot be undone.

Right to portability

You may export a copy of your schedule data at any time using the "Export all data" feature in Account Settings. The export includes all your schedule data in JSON format, which you can store locally or use with other tools.

Right to withdraw consent

Where our processing of your data is based on consent, you may withdraw that consent at any time by deleting your account or by contacting us at [email protected].

Right to complain

If you believe we have violated your privacy rights, you may file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or with the Information and Privacy Commissioner of Ontario at www.ipc.on.ca.

To exercise any of these rights, email [email protected]. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.

Section 12

Cookies & Tracking

LessonLogic uses minimal cookies and tracking technologies:

  • Session authentication: AWS Cognito uses cookies or local storage to maintain your login session. These are strictly necessary for the app to function and do not track you across other websites.
  • Preference storage: LessonLogic stores your schedule data and app preferences in your browser's local storage as an offline cache. This data belongs to you and never leaves your device unless you are logged in, in which case it is synced to our cloud database.
  • No advertising cookies: LessonLogic does not use advertising networks, tracking pixels, or any cookies that monitor your behaviour across other websites.
  • No third-party analytics by default: If aggregate analytics are added in future, they will use privacy-preserving methods (such as Plausible Analytics, which does not use cookies or personal identifiers) and will be disclosed in this policy before activation.

You can clear your browser's local storage and cookies at any time in your browser settings. If you are logged in, your data will be re-synced from our cloud database on your next login.

Section 13

Children's Privacy

LessonLogic is a tool for classroom teachers and is not directed at children. Users must be at least 18 years of age (or the age of majority in their jurisdiction) to create an LessonLogic account.

LessonLogic is not a student-facing tool. Students do not log in to LessonLogic and do not create LessonLogic accounts. The student data that teachers may optionally enter (names, notes) is subject to the protections described in Section 8 of this policy.

If you believe a child under the age of 13 has created an LessonLogic account without parental consent, please contact us at [email protected] and we will promptly delete the account and all associated data.

Section 14

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, new features, or changes in applicable law. When we make material changes, we will:

  • Update the "Last updated" date at the top of this policy.
  • Send an email notification to the email address associated with your account.
  • Display a notice within the LessonLogic app for a period of at least 14 days after the change.

If we make material changes that reduce your privacy protections, we will ask for your affirmative consent before those changes take effect. Your continued use of LessonLogic after notification of non-material changes constitutes your acceptance of the updated policy.

We will never make retroactive changes that weaken the protections for data already collected without your explicit consent.

Section 15

Contact Us

If you have any questions about this Privacy Policy, want to exercise your rights, or have a concern about how we handle your data, please contact us:

Privacy contact
Tadpole Technologies Inc.
Email: [email protected]
Ontario, Canada

We will respond to all privacy inquiries within 30 calendar days. For urgent matters, please include "URGENT" in the subject line.

For general support (not privacy-related), please contact [email protected].

This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein. Any dispute arising from this policy shall be subject to the exclusive jurisd