Trust & security center
We hold children’s learning data to the highest bar.
Jalanea Tutor works with families and neurodivergent learners, so security and privacy aren’t features — they’re the foundation. Here is exactly how we protect your data, honor your rights, and keep the platform safe.
Last reviewed: March 2025 · Questions? security@jalanea.dev
Security & encryption
Every byte of your family’s data is encrypted in transit with TLS 1.3 and at restwith AES-256. Encryption keys are managed by our cloud provider’s key-management service, rotated regularly, and never stored alongside the data they protect.
TLS 1.3 on every connection, HSTS enforced, and modern cipher suites only. No mixed content, no downgrade.
AES-256 on databases, backups, and file storage. Backups are encrypted and access-logged the same as live data.
How we limit access
Data lifecycle & retention
We keep data only as long as it’s useful to your family or required by law, then delete it on a defined schedule. You can export or delete most data yourself, anytime.
Deletion requests are honored within 30 days and confirmed when complete. Backups are purged on their own rolling cycle so deleted data doesn’t linger indefinitely.
Children’s data & records
Because we serve children, a supervising adult always controls the account. Children never sign up on their own — a parent, guardian, or tutor creates the profile and shares a starter code.
FERPA — education-record handling
When we handle data on behalf of a school or district, we act as a school officialwith a legitimate educational interest under FERPA. That means the education records stay under the school’s and family’s control: we use them only to deliver the service, never for advertising, and we return or delete them on request.
PII & session-data confidentiality
We practice data minimization — we collect the least we need. Sensitive details like a learner’s diagnosis, mood check-ins, and sensory preferences are treated as confidential:
Personally identifiable information is access-controlled by role, masked in internal tools and analytics wherever a full value isn’t needed, and never used to target advertising. Mood and sensory data is used solely to adapt a learner’s own lessons.
Incident response
We plan for the worst so we can act fast. If a security incident affects your data, here’s our committed process — and our promise to tell you clearly and quickly.
Monitoring and alerting flag anomalies. On-call staff assess severity and open an incident within the hour.
Isolate affected systems, revoke credentials, and preserve logs to determine scope and root cause.
If your data is affected, we notify impacted families and any required authorities within 72 hours of confirmation — in plain language, with what happened and what to do.
Fix the root cause, publish a post-incident review, and harden against recurrence.
Accessibility statement
Accessibility isn’t an add-on for a product built for neurodivergent learners — it’s the whole point. Jalanea Tutor is designed and tested to conform with WCAG 2.1 Level AA and to meet the expectations of the ADA and Section 508.
These controls live on every page via the accessibility button, and our full conformance approach is documented in our standards. Found a barrier? Tell us and we’ll prioritize a fix.
Read our accessibility standardsEthics & community safety
ABA ethics & professional boundaries
Our tutoring is ABA-informed, and our tutors are held to professional ethical standards, including the BACB’s ethics code where applicable. We actively monitor for professional-boundary concerns — off-platform contact, dual relationships, or anything that could compromise a learner’s wellbeing — and act on them.
Communication stays on-platform and is reviewable by the supervising adult.
A compliance monitor flags concerns for human review and escalation.
Community content & moderation
Tutor-published content and community spaces follow a clear content policy: safe, respectful, evidence-informed, and appropriate for children. Content is reviewed before it reaches learners, and anyone can report a concern.
Your data, your controls.
View, export, or delete your family’s data — and manage cookie preferences — anytime.