Privacy Policy

Harvard Cinderella Learning System
Developer: SKP Tech Lab
Apps: GROW English Practice | HEC Nectar Learning Platform | HEC Virtual Classroom
Last updated: July 21, 2026

Harvard Cinderella, developed by SKP Tech Lab, operates three educational mobile applications:

• GROW English Practice — AI-powered spaced repetition practice for English language learners
• HEC Nectar Learning Platform — Real-time interactive learning with video classes and materials
• HEC Virtual Classroom — Virtual classroom for online teaching and learning

along with related web platforms at harvardcinderella.cloud, nectar.harvardcinderella.cloud, and grow.harvardcinderella.cloud. This Privacy Policy explains what information we collect through these applications ("Apps"), how we use it, and the choices available to you.

1. Who Uses the Apps

GROW English Practice is used directly by students — including children under 13 — to complete English language practice exercises with AI-powered feedback. HEC Nectar Learning Platform is used by teachers to create and manage interactive lessons, assign materials, and track student progress, and by students to participate in live classes and practice. HEC Virtual Classroom is used by teachers to conduct virtual classes with real-time video conferencing, and by students to join and participate in online learning sessions. Developer: SKP Tech Lab. All apps may be used by students under 13, so we limit data collection to what is required for the educational experience and do not serve behavioral or personalized advertising to any user.

2. Information We Collect

2.1 Account Information

Name and email address (created by the parent/guardian, or provisioned by Harvard Cinderella staff)
Login credentials (password, stored as a salted hash) or, for students, a unique Student ID used for QR-code sign-in
Google account email, name, and profile picture, if you choose to sign in with Google

2.2 Student Learning Data

Attendance records and class schedules
Practice session results: questions answered, scores, spaced-repetition progress, streaks, and reward points
Written responses submitted during practice exercises
Voice recordings submitted for pronunciation and speaking-practice exercises
Teacher feedback, lesson materials, and progress reports

2.3 Payment Information (Parent App only)

Payment history, invoices, and billing status. Payment card details are handled by our payment processor and are not stored on our servers.

2.4 Automatically Collected Information

Device type, operating system, and app version
Basic usage and diagnostic logs, used to keep the Apps running reliably
Push notification tokens, if notifications are enabled

3. How We Use Your Information

To authenticate you and keep your account secure
To schedule spaced-repetition practice and track learning progress
To generate AI-assisted feedback on speaking, writing, and pronunciation exercises
To let parents view attendance, progress, and billing for their children
To send notifications about classes, practice reminders, and account activity
To provide customer support and improve the Apps

4. Sharing With Third-Party Service Providers

We use the following third-party processors solely to operate the Apps' features. We do not sell personal information, and we do not use it for advertising.

Google Gemini API — text and voice-recording submissions from practice exercises (e.g. pronunciation, conversation, and writing practice) are sent to Google's Gemini API to generate transcription, scoring, and conversational feedback. Google's handling of this data is governed by Google's API terms; recordings are used only to produce the feedback shown to the student and are not used by us to build advertising profiles.
Google Sign-In — if you choose to sign in with your Google account.
Email delivery provider — to send verification and password-reset emails.
Payment processor — to process tuition payments (Parent App only).

We may also disclose information if required by law, or with your explicit consent.

5. Data Storage and Security

Data is stored on servers we operate, protected by HTTPS/TLS in transit
Passwords are stored as salted cryptographic hashes, never in plain text
Access to student and payment records is restricted to authorized school staff

6. Children's Privacy & Families Policy

GROW English Practice, HEC Nectar Learning Platform, and HEC Virtual Classroom are designed to be used by students under the direction of their school and, where applicable, their parent/guardian. Developer: SKP Tech Lab. We do not knowingly collect more information from children than is necessary to provide the educational experiences described above, we do not show behavioral or personalized advertising to any user, and we do not require additional permissions beyond what each feature needs (e.g. microphone access only when a speaking exercise or video class is active).

Parents/guardians or school administrators may contact us at any time to review, correct, or request deletion of a student's data from GROW English Practice, HEC Nectar Learning Platform, or HEC Virtual Classroom.

7. Employee Privacy — HEC Tasks

HEC Tasks is an employee-only app designed for Harvard Cinderella staff to manage tasks, track attendance via QR code check-in, access HR information, and report facility issues. This section covers employee data handling:

7.1 Data Collected from Employees

Employee ID, name, email, and role/department
Attendance logs (check-in/check-out times via QR code)
Photos from QR code check-in verification (selfies taken during attendance verification)
Task assignments, task status updates, and task completion records
HR information: contracts, permits, salary receipts, reimbursements (if accessible via app)
Issue reports and facility maintenance requests (including photos/evidence)
Device type, OS version, and basic app diagnostics

7.2 How Employee Data Is Used

Task management and workflow tracking
Attendance and timekeeping records
Performance monitoring and project tracking
Facility maintenance and issue resolution
HR administration and payroll management
App reliability and security improvements

7.3 Data Retention for Employees

Active employment: Data retained during employment
Post-termination: Employee data (attendance, HR records) retained for 1 year for payroll audit and legal compliance
Soft deletion: Deleted employee records are marked as inactive but retained for audit trails

7.4 Employee Data Access & Deletion

Employees may request access to, correction of, or deletion of their account and associated data. Account deletion via HEC Tasks removes:

Employee profile and contact information
Task history and assignments
Attendance logs and QR check-in records
HR records and permit requests
Uploaded photos and evidence files

To request account deletion, visit harvardcinderella.cloud/account-deletion.html and follow the steps for employee accounts. Employees should contact HR at admin@harvardcinderella.com if account deletion may affect pending payroll or contracts.

7. Your Rights

You (or, for a student account, their parent/guardian or school) may:

Request access to the personal data we hold
Request correction of inaccurate data
Request deletion of an account and its associated data — Users of GROW English Practice, HEC Nectar Learning Platform, and HEC Virtual Classroom can request account deletion by visiting harvardcinderella.cloud/account-deletion.html
Withdraw consent for Google Sign-In at any time

To make other requests or if you need help, contact us using the details in Section 9.

8. Data Retention

We retain account and learning data for as long as the account is active, and for a limited period afterward as needed for record-keeping or legal requirements, after which it is deleted or anonymized.

9. Contact Us

For privacy-related questions or requests:

Email: admin@harvardcinderella.com
Website: harvardcinderella.cloud

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.