Last Updated: April 2, 2026 — See what changed
NextSchool is operated from Ontario, Canada. We are committed to protecting your privacy and ensuring transparency about how we collect, use, and manage your personal information.
Contact: privacy@nextschool.ca
NextSchool operates in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal privacy law that governs how private sector organizations handle personal information.
When you use NextSchool, we collect the following information:
Important: We collect information about children as provided by their parent or guardian. Children do not directly create accounts or use the platform.
When school administrators claim and manage their profiles, we collect:
We use your data for these specific purposes:
Parent Data:
School Data:
Aggregated/Anonymized Data:
Critical Privacy Commitment: Parent family profiles are NEVER shared with schools unless you explicitly initiate contact (such as sending an inquiry).
We take children's privacy seriously. Here's how we protect it:
Here's how we handle your data:
What We Don't Share:
What We May Share:
The following companies process personal data on our behalf. Each operates under a data processing agreement with NextSchool and is prohibited from using your data for any purpose beyond what we instruct.
AI Inference — OpenRouter (United States)
Purpose: Generating personalized school recommendations through our AI consultant.
Data transmitted: Pseudonymized conversation content including educational preferences (child's grade, learning style, school priorities). We replace names with placeholders and reduce location to city/region level before transmission — your child's name, specific medical diagnoses, and precise address are not sent to OpenRouter.
Retention by OpenRouter: Prompts are used for inference only and are not retained for training without explicit consent. See OpenRouter's Privacy Policy.
| Service | Country | Purpose | Data Shared |
|---|---|---|---|
| Stripe | United States | Payment processing | Email address, subscription status |
| Resend | United States | Transactional email delivery | Name, email address |
| Sentry | United States | Error monitoring and performance | Anonymized error events — emails and IP addresses are stripped before transmission |
| Vercel | United States | Platform hosting and edge network | IP address (in transit only); page view metrics with your consent |
| Google Analytics / Ads | United States | Analytics and conversion measurement | Anonymized events (with your consent); hashed email only on purchase and only with your explicit ad consent |
| Supabase | United States | Database and authentication | All data stored by NextSchool (encrypted at rest, AES-256) |
We retain personal information only as long as necessary for the stated purpose. The table below summarizes our retention schedule.
| Data Category | Retention | Notes |
|---|---|---|
| Account & family profile | Until account deletion | Permanently deleted on request |
| Conversation history | Until account deletion | Permanently deleted on request; per-conversation delete available |
| System logs (API, errors) | 30–90 days | Automatically deleted; PII scrubbed before storage |
| Search logs | Anonymized at 30 days, deleted at 90 days | User identity removed after 30 days; query data deleted at 90 days |
| Consent records | Until account deletion | Retained for compliance purposes; included in your data export |
Account Deletion: When you delete your account, all personal data is permanently removed from our systems. Data held by third-party sub-processors (Stripe, Sentry, etc.) is subject to their own retention policies.
We use cookies to:
You can control cookies through your browser settings. Disabling some cookies may affect platform functionality.
Under PIPEDA, you have the right to:
To exercise any of these rights, contact us at privacy@nextschool.ca with your request.
NextSchool complies with Canada's Anti-Spam Legislation (CASL):
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws.
When we make material changes, we will notify you by updating the "Last Updated" date and, for significant changes, by email or through a notice in the platform. For changes that affect how we process children's information or introduce new third-party data sharing, we will require you to re-acknowledge the updated policy before continuing to use NextSchool.
If you have questions about this Privacy Policy or how we handle your data, please reach out:
Privacy Officer:
We will respond to access, correction, and deletion requests within 30 days. You may also file a complaint with the Office of the Privacy Commissioner of Canada.
General Questions:
Visit our Contact PageA record of material changes to this policy. Minor wording clarifications are not listed.
April 2, 2026
February 20, 2026
Initial privacy policy published.