Privacy | ByBedtime

ByBedtime exists to reduce the amount of worrying you do about school. Collecting or leaking your family's data would defeat the entire point. So we collect as little as possible, sell none of it, and let you erase all of it.

Who we are

ByBedtime is an independent service built for parents. We are not affiliated with, endorsed by, or partnered with any school district, school, or learning platform (including Instructure / Canvas). We work only through the parent access your district already gives you.

What we collect and why

Your account email and notification preferences. We use them to run your account and send your briefs.
A read-only access key you create in your own parent account. You can revoke it any time from your side.
Normalized assignment information (course names, assignment titles, due dates, submission status, point values) for the students your school's system already lets you observe. We use it to build your dashboard and alerts.

What we never collect

Your school portal password. Never, no exceptions. Your child's messages or submission content. Their browsing, contacts, location, or anything on their devices. We see assignment status, and that is all.

Our commitments

These are binding practices, not marketing lines:

No ads. No sales. No profiles.

We never advertise to you, never sell or rent any data, and never build profiles for purposes unrelated to education. There is no business model here that depends on your data leaving us.

Data minimization.

We keep the current picture plus the minimum history needed to tell you what changed (change events kept 180 days). Raw responses from your school's system are not retained.

Alert privacy.

Our logs of sent alerts store masked recipients and content fingerprints, never the actual text of a brief. Your kid's assignment names don't sit in a log file somewhere.

Deletion means deletion.

Close your account and your access key and family records leave our active systems immediately. Encrypted backups expire automatically within 35 days. You can download a JSON copy of your data at any time before deletion.

Breach notice within 72 hours.

If a breach ever affects your data, we tell you within 72 hours of confirming it. We explain what happened and what we're doing about it in plain words.

Analytics

We use cookieless page analytics on our public pages only. Inside your account, the only thing we count is product activity, such as "a brief was sent." We count it as numbers, never as student content.

Children

ByBedtime is used by parents and guardians. A student's information enters the service only from your own authorized school access, at your direction. We never collect it from a child directly. If we ever add a student view, we will review our obligations under children's privacy law first, and update this policy before it ships.

Who helps us run the service

ByBedtime relies on a small number of outside providers to operate: one to deliver your email brief, one to process payments, one to provide DNS and secure connectivity, one for key management, and encrypted backup storage. Each receives only what it needs to do its specific job and nothing more. Your school access key is encrypted before it is stored, and no provider is given a copy of it to keep. ByBedtime runs on dedicated hardware we control, located in the United States. We do not use SMS, and we never see your card number.

Questions

Email privacy@bybedtime.com. A real person reads it.