Future Builders Academy (“FBA”, “we”, “us”) is operated by Fortify Solutions Inc., Calgary, Alberta, Canada.
We provide a personalised online learning platform for students in Grades 5–12 (approximately aged 9–18) worldwide, accessible at fbalearning.com.
Privacy Officer: privacy@fbalearning.com
Account Data
Parent or guardian email address and password (stored as a secure hash) collected at registration.
Student Profile Data
Student first name, grade level, subject focus, and a 4-digit parent PIN created during setup. The PIN is stored as a secure hash, never in plain text.
Learning Activity Data
Lesson topics requested, practice results, quiz questions together with the answer your child chose and whether it was correct (stored with the date and subject; the correct answers and the explanations are not stored), XP points, level, streak, confidence and mastery scores, badges earned, per-subject skill progress, a log of mistakes made, saved projects, session timestamps, and content safety events (blocked searches).
Content Request Data
When a lesson, coaching message, or progress report is generated, your child’s grade level, the approximate age range for that grade (for example, 10–11 for Grade 5), and the topic or question involved are sent to our learning engine (Section 4). We do not collect your child’s age or date of birth, and we do not send your child’s name or contact details. If your child types their own answer or question, that text is sent as written and may include anything they choose to write.
Technical Data
Standard web server logs (IP address, browser type, pages accessed) used solely for security and reliability. Not linked to user profiles.
We do not collect: Photographs, videos, voice recordings, social media profiles, device contacts, precise location data, or any data not listed above.
- To create and manage your account
- To generate personalised lessons for your child’s grade level
- To track and display learning progress in the Parent Dashboard
- To operate the child safety system and log safety events
- To send account-related emails (password reset, account confirmation)
- To maintain the security and reliability of the platform
We do not use your account data or your child’s learning data to target advertising, build marketing profiles, or sell to third parties. Ever. FBA does not record, in its own systems, which of our ads led to a sign-up, free trial or payment. Google Analytics and the Meta Pixel are used only on our homepage, our page for parents and our sign-up and checkout screens, only from a separate measurement site of ours, and you can turn either off at any time; where the law requires consent first, only after you turn them on (Section 4). They are never used on our Terms of Use, this policy or the learning portal, and nothing from child profiles or learning is ever sent to them.
We share data only with the following service providers, strictly as required to operate the platform:
- Supabase Inc. — Authentication and database hosting. Data stored in Canada. Privacy Policy
- Netlify Inc. — Website hosting. Privacy Policy
- Anthropic PBC — Powers the learning engine that generates lesson content, coaching messages, and progress reports. We do not send your child’s name or contact details to this AI processor. We send their grade level, an age range based on that grade, the subject and their learning progress. If your child types their own answer or question, that text is sent as written and may include anything they choose to write. Privacy Policy
- Stripe, Inc. — Payment processing. Handles payment card details and billing information for subscriptions. We never store your card number on our servers. Privacy Policy
- Resend, Inc. — Transactional email delivery (account confirmations, trial reminders). Processes the parent’s name and email address only. Privacy Policy
- Google LLC (Google Fonts) — Delivers the fonts used on all our pages, including the learning portal. Your browser requests them from Google, which receives standard technical information such as your IP address. No account or learning data is sent. Privacy Policy
- jsDelivr — Delivers a software library used by the learning portal. Your browser requests it from jsDelivr, which receives standard technical information such as your IP address. No account or learning data is sent. Privacy Policy
Website measurement (our homepage, our page for parents and our sign-up screens only). On our homepage (fbalearning.com), our page for parents (fbalearning.com/parents) and our sign-up and checkout screens we use two tools, each of which you can turn off separately: website analytics, using Google Analytics 4 (Google LLC); and advertising measurement, using the Meta Pixel (Meta Platforms, Inc.), which tells Meta that someone who saw one of our ads visited one of these pages or took one of the sign-up steps below. We tell you about them on those pages, and you can turn either off at any time with Privacy choices. Where the law requires your consent first (the European Economic Area, the United Kingdom, Switzerland and Quebec, or when we cannot tell where you are), neither tool loads, sets a cookie or receives anything from your browser until you turn it on in Privacy choices; our measurement site works out which applies from the approximate location of your IP address and does not keep it. If your browser sends Global Privacy Control, both stay off. Neither tool is used on our homepage or our page for parents in a browser that is already signed in to FBA, because they are there only to measure how new families find us; this limits where we measure and does not check anyone’s age. Confirming that you are the parent or legal guardian and agreeing to our Terms of Use and this policy at sign-up do not turn either tool on or off.
When a choice is on, its tool runs only on a separate measurement site of ours, measure.fbalearning.com, inside a hidden, empty frame on these pages. That site holds no account and no learning data, and the frame cannot read our pages, what you type, your sign-in or anything stored for the learning portal; our pages pass it only the fixed steps listed here, and anything else is refused. A tool that is on receives standard technical information such as your IP address and browser type, and only these steps:
- On our homepage and our page for parents: that the page was visited, with any campaign labels from our ad link (for Google Analytics, as part of a page address we build from the page and those labels; nothing else from the address you arrived at, and not the page you came from); for the Meta Pixel, any ad-click identifier from that link, kept in Meta’s own cookie; and that you clicked the free-trial button. Nothing else about how you use these pages is recorded.
- On our sign-up and checkout screens: that the sign-up screen was viewed; that sign-up was started or completed; the type of a sign-up error (for example, an email address already in use), never its message or anything you typed; that checkout was opened, with the plan and billing period you chose (Google Analytics only); and that our payment provider confirmed your free trial. In place of the address of these screens they receive a fixed page address. They do not receive your name, email address, password or PIN, anything about your child, any payment details or any payment.
- When it stops: after you return from checkout, a screen for parents waits briefly while our payment provider confirms your free trial; that confirmation is sent once, the frame is then removed, and only then do child profiles appear. If the confirmation takes too long, you continue without it and nothing is sent. Nothing is ever sent from child profiles, learning or later payments.
Google and Meta may connect these steps with your earlier visits and with an ad you saw, in their own reports to us; FBA does not connect them to your account. We turn off Google signals and ad personalisation in Google Analytics, and automatic event collection in the Meta Pixel, and we send neither tool any account, learner, grade, question, answer, learning or billing information. Their cookies (Google Analytics: _ga and _ga_YXKYCLGBPQ; Meta Pixel: _fbp and, after an ad click, _fbc) are set for fbalearning.com so that a visit and a later sign-up on our site can be connected; FBA does not read or use them. Google Analytics cookies can last up to two years and Meta Pixel cookies up to 90 days, and some browsers shorten this. You can change your choices at any time with Privacy choices at the bottom of our homepage and our page for parents, or next to the measurement notice under the sign-up form; turning a tool off stops it, removes the frame and removes that tool’s cookies from your browser, including in your other open tabs of our site. Your choices are remembered in your browser so that we do not ask on every visit. Neither tool is used on our Terms of Use, this policy or the learning portal after sign-up.
Campaign labels from our ads. Links in our ads carry campaign labels (for example, which ad you clicked). FBA does not link these labels to you, your family or your account: our homepage, our page for parents and our sign-up page do not store them or send them to FBA with your sign-up or checkout, and we do not record which ad led to a sign-up, free trial, payment or cancellation. The labels remain part of the address of the page you arrive at. Like any web address, that address can reach our hosting provider’s logs (Technical Data, Section 2). On our homepage and our page for parents, if you turn on website analytics or advertising measurement, Google Analytics receives those campaign labels and the Meta Pixel receives any ad-click identifier, as described above; this is separate from FBA’s own records, and FBA does not connect it to your account. Labels that earlier versions of our homepage kept in your browser are removed the next time you visit our homepage, our page for parents or our sign-up page.
Our internal reporting. FBA staff review how our ads perform in our own internal management portal, Verve HQ, which only signed-in FBA operators can use. It reads our advertising results from Meta as totals for each ad and day, such as spend, impressions, clicks and landing-page views. It receives no information about you, your family or your child from FBA, and it is not an advertising service.
Beyond the providers listed above, we do not sell, rent, or share personal data with any other party. No data brokers.
Protecting children’s privacy is our highest priority. This platform is designed for students aged 9–18 under direct parental supervision.
Parental Consent
A parent or legal guardian must create the account and provide consent before any child data is collected. By creating an account, the parent confirms they are the parent or legal guardian of the child.
Minimum Age
We do not knowingly collect data from children under age 9. If we discover a child under 9 has an account, we will delete all associated data immediately.
Parental Rights
Parents may at any time review all data about their child (via the Parent Dashboard), correct inaccurate information, or request complete deletion by emailing privacy@fbalearning.com.
Regardless of where you are located, you have the right to:
- Access — Request a copy of all data we hold about you and your child
- Correction — Request correction of inaccurate data
- Deletion — Request permanent deletion of your account and all data
- Portability — Request your data in a machine-readable format
- Objection — Object to any processing you did not consent to
- Withdrawal — Withdraw consent at any time by deleting your account
To exercise any of these rights, email privacy@fbalearning.com. We respond within 30 days. When we confirm a deletion request, we delete the information from our active systems; copies can remain for a period in backups and logs, as described in Section 7.
Where Data Is Stored and Processed
Account and learning data is stored in our database in Canada (Supabase, Canada Central region). Learning progress is also cached locally in your browser. Our website runs its server functions on Netlify in the United States, so information you send us, including account, learning and billing information, is processed there when you use FBA. Some of the service providers listed in Section 4 also process personal information outside Canada, Netlify, whose servers run our server functions in the United States (US East); Anthropic, a United States company that runs our AI lesson engine; Stripe, for payments; Resend, for email; Google (fonts) and jsDelivr, which deliver files to your browser from servers in many countries; and, only if you turn them on on our page for parents or our sign-up screens, Google (Google Analytics) and Meta (Meta Pixel), which process information in the United States and other countries under their own policies. Where Anthropic, Stripe and Resend process information, and where our providers keep backups and logs, is governed by their own policies; we have not confirmed a specific country for each. Information processed outside Canada may be accessible to courts, law enforcement and national security authorities in those countries. You can ask our privacy contact at privacy@fbalearning.com for our written policies and practices about service providers outside Canada, and with any questions about how they collect, use, disclose or store personal information for us.
EU and UK Users
Your information is stored in Canada and processed in Canada and the United States, as described above.
Security Measures
- All data in transit encrypted using TLS 1.2 or higher
- Passwords stored as secure one-way hashes — never in plain text
- Access to production data restricted to authorised personnel only
Data Retention
Account data is retained while your account is active. When your account is deleted at your request, we delete its personal data from our active systems. Campaign labels are not stored in your browser. Your privacy choices for our page for parents and our sign-up screens are remembered in your browser until you change them or clear its data. Locally cached browser data persists until you clear your browser storage. Quiz question detail is kept on the same basis as other learning data, and is covered by your deletion and data portability rights in Section 6.
Backups and billing records. Our database provider keeps backup copies of our database on its own schedule (it currently describes daily backups kept for up to seven days on our plan), so information deleted from our active systems can remain in backup copies for a period after deletion. Our hosting, payment and email providers also keep their own logs and records under their own policies. We do not promise that every copy is erased by a particular date. Records our payment provider Stripe keeps about payments, such as invoices, are kept by Stripe under its own policy and the law. We keep billing and security records only as needed to run your subscription, prevent fraud and meet legal obligations.
We are committed to complying with privacy laws in every jurisdiction where we operate:
For jurisdiction-specific questions: privacy@fbalearning.com
9.1 Permitted Use
This platform may be used only for legitimate educational purposes by the registered parent or guardian and their child. Do not share access credentials outside your household.
9.2 Prohibited Use
- Using the platform for any commercial purpose
- Attempting to bypass the child safety system
- Sharing credentials outside your household
- Reverse engineering or copying any part of the platform
9.3 Intellectual Property
The Future Builders Academy Learning OS is the proprietary intellectual property of Future Builders Academy, operated by Fortify Solutions Inc. All rights reserved.
9.4 Limitation of Liability
To the maximum extent permitted by law, Future Builders Academy and Fortify Solutions Inc. disclaim all liability for indirect, incidental, or consequential damages arising from use of this platform. We do not guarantee specific learning outcomes. Nothing in this clause limits liability for death or personal injury caused by our negligence or for fraudulent misrepresentation.
9.5 Governing Law
This agreement is governed by the laws of the Province of Alberta, Canada. Any dispute will be resolved in the courts of Alberta, Canada.
10.1 Two-Layer Safety System
- Layer 1: Instant keyword screening — blocks clearly harmful requests with zero delay
- Layer 2: Intent classification — understands context and blocks inappropriate requests that keyword filters miss
10.2 Strike System
After three blocked requests in a single session, the portal is paused and requires a 4-digit parent PIN to unlock. All blocked requests are logged and visible to parents in the Parent Dashboard.
10.3 What This Platform Does Not Contain
- No advertising of any kind
- No links to external social media
- No peer-to-peer communication between students
- No in-app purchases targeting children
10.4 UK Children’s Code Compliance
Privacy settings are set to high by default, data collection is minimised, and no profiling of children is performed.
10.5 Reporting Safety Concerns
If you believe your child has encountered inappropriate content, contact us immediately at safety@fbalearning.com. All child safety reports are treated as urgent.
We may update this policy from time to time. Material changes will be communicated to registered users by email at least 14 days before taking effect. The version number and effective date at the top of this page will always reflect the current version.
Previous versions available on request from privacy@fbalearning.com.
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information.
Your California Rights
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
- Right to Opt-Out of Sale: We do not sell personal information. We do not sell, rent, or trade the personal data of any user — adult or child — to third parties for commercial purposes. No opt-out is required.
- Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights.
To exercise California rights, email privacy@fbalearning.com with the subject line "CCPA Request." We respond within 45 days. We may need to verify your identity before processing a request.
Future Builders Academy maintains security safeguards designed to protect personal data against unauthorized access, disclosure, or loss. In the event of a data breach that creates a real risk of significant harm to individuals, we will:
- Report to the Office of the Privacy Commissioner of Canada as required under PIPEDA's mandatory breach reporting rules, as soon as feasible after determining the breach has occurred.
- Notify affected individuals directly as soon as feasible, with a description of what happened, the type of data involved, the steps we have taken, and the steps affected users can take to protect themselves.
- For EU/UK users: Notify the relevant supervisory authority within 72 hours of becoming aware of a breach, as required under GDPR Article 33 and UK GDPR.
- For users subject to COPPA: Notify affected parents or guardians promptly in the event of any unauthorized disclosure of children's personal information.
- Maintain a breach log consistent with our obligations under all applicable privacy legislation.
To report a suspected security incident: privacy@fbalearning.com. Security issues are treated as urgent and acknowledged within 24 hours.
By creating an account, the parent or legal guardian confirms they have read, understood, and accepted this Privacy Policy and Terms of Use on behalf of themselves and the child using this platform.