Effective October 4, 2026
The short version
We collect what the site needs to work and nothing extra. We do not sell your information, and we never see your card details. If you send us a suspected scam, the screenshots go into private storage that only a reviewer can open. You can ask us to delete everything, and we will.
Depending on what you use, that is:
To run your account and remember where you got to. To review a suspected scam and send you the answer. To take payment and give you what you paid for. To reply when you contact us. To keep the site working and secure.
We do not build advertising profiles, and we do not sell or rent your information to anybody.
Only the companies that run parts of the service for us, and only what each needs:
| Who | What for | What they get |
|---|---|---|
| OpenAI (when Athena is enabled) | Generating Athena's AI replies | Chat messages, relevant course excerpts and a hashed account identifier for signed-in users; no account email or child profile is added by the app |
| Supabase | Database, sign-in, and file storage | Account details, learning progress, and Scam Shield submissions |
| Stripe | Payment processing | Card details, which go directly to Stripe and never reach our servers |
| Resend | Sending email | Your email address and the contents of messages we send you |
| Railway / Hostinger | Running the website | Technical request logs |
We will also hand information over if the law requires it — for example a court order, or a report about a child at risk.
The screenshots people send us are often the most sensitive things on this site. They contain names, balances, account numbers and family details, usually at a frightening moment.
So they go into private storage, not a public one. Nobody can reach them with a link. A reviewer opens them through a signed address that expires within the hour, and only to answer your question.
You get a private status link for your report. Treat it like a password: anyone with the link can see the status. It shows the verdict and what to do — never your contact details or your uploads.
We keep reports so we can spot patterns across the area and warn people about what is circulating. Ask us and we will delete yours.
Much of this platform is built for children, and this is the section we most want parents to read.
Children do not get their own accounts. An account belongs to an adult. A parent may add a child profile inside it, which holds the child’s first name, a grade band, a colour, and any note the parent writes. We ask for a first name only, and a nickname works just as well.
We do not ask a child for an email address, a phone number, a photograph, or their location. We do not show them advertising. We do not sell anything to them.
Where a child works through lessons, we record progress — which ones were completed and how the quizzes went — against that profile, so the parent can see how it is going.
A parent can, at any time: see everything held against their child’s profile, correct it, delete the profile and its progress, or ask us to delete it for them. Email customercare@dfw-ai.com and we will do it.
If you believe a child has given us information without a parent’s knowledge, tell us and we will remove it.
Texas law gives residents the right to know what we hold about them, to get a copy, to have it corrected, to have it deleted, and to tell us not to sell it — which is straightforward for us, because we do not.
Email customercare@dfw-ai.com and say what you want. We do not charge for it and we will not make it difficult. We may need to check you are who you say you are before handing over a copy, which is protection for you rather than an obstacle.
Account and progress data for as long as you have an account, and then until you ask us to remove it. Payment records for as long as tax rules require. Scam Shield reports until you ask us to delete them. Server logs for a short period.
Delete your account and we delete the personal information behind it, apart from anything we are legally required to keep.
The database enforces access rules row by row, so one signed-in account cannot read another’s. Scam Shield uploads sit in private storage reachable only through short-lived signed addresses. Card details never touch our servers. Traffic is encrypted.
No system is perfect. If something happens that affects you, we will tell you rather than hope you do not notice.
We use what the site needs to function: a cookie that keeps you signed in, and one that remembers whether you chose English or Spanish. There is no advertising or cross-site tracking here, which is why you are not being asked to dismiss a banner.
We retain your account identifier and up to ten recent question submission timestamps to enforce Athena’s free-account limit of ten questions in any 72-hour period. These records contain no question text. Expired timestamps are removed on your next accepted free question, and the record is deleted when your account is deleted.
When Athena is enabled, the messages you send, recent messages from the same conversation, and relevant course excerpts are sent to OpenAI to generate a reply. For signed-in users we also send a hashed account identifier for abuse prevention. We do not add your name, email, child profiles or payment details to these requests. Please keep personal information out of your messages.
The site does not save a chat transcript to its database or browser storage. The conversation stays in the open page's memory and clears when you navigate, reload, change accounts or choose New chat. We disable OpenAI response storage; OpenAI may still retain data under its API data controls, including for abuse monitoring. Athena's answers are AI-generated and may be incorrect. Children should use it with their parent or guardian.
If we change this policy materially we will update the date at the top and email account holders. DFW AI Education is a small business in Dallas–Fort Worth, Texas; if something here is unclear, ask and a person will answer.
A real person answers. Email customercare@dfw-ai.com or call (817) 668-5263.