Privacy Policy
Effective August 30, 2026
The short version
We collect what the site needs to work and nothing extra. We do not sell your information, and we never see your card details. If you send us a suspected scam, the screenshots go into private storage that only a reviewer can open. You can ask us to delete everything, and we will.
1. What we collect
Depending on what you use, that is:
- An account. Your email address, a display name if you give one, the reading size you prefer, and what you told us you wanted to learn.
- Learning progress. Lessons completed, quiz and exam scores, badges, and a streak count.
- Child profiles. If you add a child: their first name, the grade band you picked, a colour, and any note you write. See section 5.
- Scam Shield submissions. The message you paste, any screenshots you upload, how it reached you, your name, email and phone if you give them, and whether you told us money had already gone.
- Bookings, orders and enquiries. Name, email, phone, and whatever you write in the message.
- Payment records. That you paid, what for, and Stripe’s reference for it. Never your card number — that goes straight from your browser to Stripe.
- Email addresses you give us for a free download.
- Ordinary server logs from running a website.
2. Why we collect it
To run your account and remember where you got to. To review a suspected scam and send you the answer. To take payment and give you what you paid for. To reply when you contact us. To keep the site working and secure.
We do not build advertising profiles, and we do not sell or rent your information to anybody.
3. Who else sees it
Only the companies that run parts of the service for us, and only what each needs:
| Who | What for | What they get |
|---|---|---|
| Supabase | Database, sign-in, and file storage | Account details, learning progress, and Scam Shield submissions |
| Stripe | Payment processing | Card details, which go directly to Stripe and never reach our servers |
| Resend | Sending email | Your email address and the contents of messages we send you |
| Railway / Hostinger | Running the website | Technical request logs |
We will also hand information over if the law requires it — for example a court order, or a report about a child at risk.
4. Scam Shield, specifically
The screenshots people send us are often the most sensitive things on this site. They contain names, balances, account numbers and family details, usually at a frightening moment.
So they go into private storage, not a public one. Nobody can reach them with a link. A reviewer opens them through a signed address that expires within the hour, and only to answer your question.
You get a private status link for your report. Treat it like a password: anyone with the link can see the status. It shows the verdict and what to do — never your contact details or your uploads.
We keep reports so we can spot patterns across the area and warn people about what is circulating. Ask us and we will delete yours.
5. Children
Much of this platform is built for children, and this is the section we most want parents to read.
Children do not get their own accounts. An account belongs to an adult. A parent may add a child profile inside it, which holds the child’s first name, a grade band, a colour, and any note the parent writes. We ask for a first name only, and a nickname works just as well.
We do not ask a child for an email address, a phone number, a photograph, or their location. We do not show them advertising. We do not sell anything to them.
Where a child works through lessons, we record progress — which ones were completed and how the quizzes went — against that profile, so the parent can see how it is going.
A parent can, at any time: see everything held against their child’s profile, correct it, delete the profile and its progress, or ask us to delete it for them. Email customercare@dfw-ai.com and we will do it.
If you believe a child has given us information without a parent’s knowledge, tell us and we will remove it.
6. Your rights
Texas law gives residents the right to know what we hold about them, to get a copy, to have it corrected, to have it deleted, and to tell us not to sell it — which is straightforward for us, because we do not.
Email customercare@dfw-ai.com and say what you want. We do not charge for it and we will not make it difficult. We may need to check you are who you say you are before handing over a copy, which is protection for you rather than an obstacle.
7. How long we keep things
Account and progress data for as long as you have an account, and then until you ask us to remove it. Payment records for as long as tax rules require. Scam Shield reports until you ask us to delete them. Server logs for a short period.
Delete your account and we delete the personal information behind it, apart from anything we are legally required to keep.
8. Keeping it safe
The database enforces access rules row by row, so one signed-in account cannot read another’s. Scam Shield uploads sit in private storage reachable only through short-lived signed addresses. Card details never touch our servers. Traffic is encrypted.
No system is perfect. If something happens that affects you, we will tell you rather than hope you do not notice.
9. Cookies
We use what the site needs to function: a cookie that keeps you signed in, and one that remembers whether you chose English or Spanish. There is no advertising or cross-site tracking here, which is why you are not being asked to dismiss a banner.
10. Changes
If we change this policy materially we will update the date at the top and email account holders. DFW AI Education is a small business in Dallas–Fort Worth, Texas; if something here is unclear, ask and a person will answer.
Questions about this?
A real person answers. Email customercare@dfw-ai.com or call (817) 668-5263.