Skip to content
IEP Champion
Legal

Privacy Policy

Publisher: Angel Reyes Consulting LLC. Effective: 2026-04-26 · Last updated: 2026-04-26

1. Our core promise

IEP Champion ("we," "our," or "us") is designed with a local-only architecture. Your data — and your child's data — stays on your device. It is never transmitted to our servers, because we don't operate any.

2. What we do not collect

  • No server storage — we do not operate servers that store your data.
  • No cloud sync — your data is never uploaded to a cloud service.
  • No account required — no email, phone number, or sign-up.
  • No tracking — no location, browsing, or usage analytics.
  • No advertising IDs — IDFA and AAID are never collected.
  • No content analysis — we do not analyze the content you create.

3. Information stored locally on your device

The following information is stored exclusively on your device in an encrypted SQLite database (SQLCipher) using a device-bound key held in the iOS Keychain or Android Keystore:

3.1 Student information

  • Student name, date of birth, grade level
  • School and district information
  • Disability categories and diagnoses
  • IEP goals, objectives, accommodations
  • Service records and progress data

3.2 Documents and notes

  • Meeting notes and communication logs
  • Voice recordings and transcriptions
  • Uploaded documents and photos
  • Calendar events and reminders

3.3 AI-generated content

  • SMART goal suggestions
  • Compliance check results
  • Legal term explanations
  • All AI processing occurs entirely on your device

4. Data sharing and disclosure

Because we never receive your data, we cannot share it. We sell nothing, share with advertisers nothing, provide to data brokers nothing, and our employees have no access — there is nothing for them to access.

Where you choose to share — for example, exporting a PDF or sharing via your device share sheet — that action is initiated by you, on your device.

5. Children's privacy (COPPA, FERPA)

IEP Champion is intended for use by parents and adult guardians on behalf of a student. Because the app collects no information server-side, there is no server-side processing of children's data subject to COPPA or comparable state statutes. Information about a child remains on the parent's device under the parent's control. School-related records covered by FERPA remain with the school system that originated them; the app does not transmit those records.

6. Your rights

Because all data lives on your device, your rights are exercised on your device:

  • Access — review any record inside the app at any time.
  • Export — export records as PDF or CSV for your own use.
  • Delete — delete any record, or uninstall the app to remove all data.

Residents of California, Colorado, Connecticut, Utah, Virginia, and other U.S. states with comprehensive privacy statutes — and residents of jurisdictions covered by GDPR or UK GDPR — have the rights described above. Because we do not collect or process personal data on our own servers, requests of the form "delete data we hold about you" are inapplicable: we hold none.

7. Changes to this policy

We may update this Privacy Policy as the app evolves. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be announced via the app's release notes.

8. Contact

Questions about this policy can be sent to angel@subthesis.com. The publisher of record is Angel Reyes Consulting LLC. The product brand is Subthesis.