Future Builders Academy (“FBA”, “we”, “us”) is operated by Fortify Solutions Inc., Calgary, Alberta, Canada.
We provide a personalised online learning platform for students in Grades 5–12 (approximately aged 9–18) worldwide, accessible at fbalearning.com.
Privacy Officer: privacy@fbalearning.com
Account Data
Parent or guardian email address and password (stored as a secure hash) collected at registration.
Student Profile Data
Student first name, grade level, subject focus, and a 4-digit parent PIN created during setup. The PIN is stored as a secure hash, never in plain text.
Learning Activity Data
Lesson topics requested, practice results, quiz questions together with the answer your child chose and whether it was correct (stored with the date and subject; the correct answers and the explanations are not stored), XP points, level, streak, confidence and mastery scores, badges earned, per-subject skill progress, a log of mistakes made, saved projects, session timestamps, and content safety events (blocked searches).
Content Request Data
When a lesson, coaching message, or progress report is generated, your child’s grade level and the topic or question involved are sent to our learning engine (Section 4). We do not send your child’s name, age, or contact details. If your child types their own answer or question, that text is sent as written and may include anything they choose to write.
Technical Data
Standard web server logs (IP address, browser type, pages accessed) used solely for security and reliability. Not linked to user profiles.
We do not collect: Photographs, videos, voice recordings, social media profiles, device contacts, precise location data, or any data not listed above.
- To create and manage your account
- To generate personalised lessons for your child’s grade level
- To track and display learning progress in the Parent Dashboard
- To operate the child safety system and log safety events
- To send account-related emails (password reset, account confirmation)
- To maintain the security and reliability of the platform
We do not use your account data or your child’s learning data for advertising, marketing profiling, or sale to third parties. Ever. Our public pages use standard website measurement tools, described in Section 4 — they never operate inside the learning portal or on any student account.
We share data only with the following service providers, strictly as required to operate the platform:
- Supabase Inc. — Authentication and database hosting. Data stored in Canada. Privacy Policy
- Netlify Inc. — Website hosting. Privacy Policy
- Anthropic PBC — Powers the learning engine that generates lesson content, coaching messages, and progress reports. We do not send your child’s name, age, or contact details to this AI processor. Only their grade level and learning progress are used. If your child types their own answer or question, that text is sent as written and may include anything they choose to write. Privacy Policy
- Stripe, Inc. — Payment processing. Handles payment card details and billing information for subscriptions. We never store your card number on our servers. Privacy Policy
- Resend, Inc. — Transactional email delivery (account confirmations, trial reminders). Processes the parent’s name and email address only. Privacy Policy
Website measurement (public pages only). Our public pages — our homepage, this policy page, and our Terms of Use — use two measurement tools:
- Google Analytics 4 (Google LLC) — used to measure traffic and usage of our public website: how many people visit, which public pages they view, the approximate region they are in, and how they found us. Privacy Policy
- Meta Pixel (Meta Platforms, Inc.) — used on our public marketing pages to understand how visitors arrive at our site and to measure the effectiveness of our advertising. Manage your ad preferences
These measurement tools may use cookies or similar browser technologies and receive standard technical information from your browser, such as your IP address, device and browser type, and the page being viewed. Both operate only on our public pages. Neither is present inside the FBA learning portal, on authenticated student pages, on any page accessed by student accounts, or on any page behind a login. We do not configure Google Analytics 4 to receive student data, learning activity, or FBA account information, and we do not intentionally send that information to Google or Meta through these public-page measurement tools.
Beyond the providers listed above, we do not sell, rent, or share personal data with any other party. No data brokers.
Protecting children’s privacy is our highest priority. This platform is designed for students aged 9–18 under direct parental supervision.
Parental Consent
A parent or legal guardian must create the account and provide consent before any child data is collected. By creating an account, the parent confirms they are the parent or legal guardian of the child.
Minimum Age
We do not knowingly collect data from children under age 9. If we discover a child under 9 has an account, we will delete all associated data immediately.
Parental Rights
Parents may at any time review all data about their child (via the Parent Dashboard), correct inaccurate information, or request complete deletion by emailing privacy@fbalearning.com.
Regardless of where you are located, you have the right to:
- Access — Request a copy of all data we hold about you and your child
- Correction — Request correction of inaccurate data
- Deletion — Request permanent deletion of your account and all data
- Portability — Request your data in a machine-readable format
- Objection — Object to any processing you did not consent to
- Withdrawal — Withdraw consent at any time by deleting your account
To exercise any of these rights, email privacy@fbalearning.com. We respond within 30 days. Data permanently deleted within 30 days of request.
Where Data Is Stored
Account and learning data is stored on secure servers in Canada via Supabase. Learning progress is also cached locally in your browser. We do not transfer personal data outside Canada except where required by applicable law.
EU and UK Users
Canada is recognised by the European Commission as providing adequate data protection. Additional protections are provided under Standard Contractual Clauses where applicable.
Security Measures
- All data in transit encrypted using TLS 1.2 or higher
- Passwords stored as secure one-way hashes — never in plain text
- Access to production data restricted to authorised personnel only
Data Retention
Account data is retained while your account is active. Upon deletion, all server-side personal data is permanently removed within 30 days. Locally cached browser data persists until you clear your browser storage. Quiz question detail is kept on the same basis as other learning data, and is covered by your deletion and data portability rights in Section 6.
We are committed to complying with privacy laws in every jurisdiction where we operate:
For jurisdiction-specific questions: privacy@fbalearning.com
9.1 Permitted Use
This platform may be used only for legitimate educational purposes by the registered parent or guardian and their child. Do not share access credentials outside your household.
9.2 Prohibited Use
- Using the platform for any commercial purpose
- Attempting to bypass the child safety system
- Sharing credentials outside your household
- Reverse engineering or copying any part of the platform
9.3 Intellectual Property
The Future Builders Academy Learning OS is the proprietary intellectual property of Future Builders Academy, operated by Fortify Solutions Inc.. All rights reserved.
9.4 Limitation of Liability
To the maximum extent permitted by law, Future Builders Academy and Fortify Solutions Inc. disclaim all liability for indirect, incidental, or consequential damages arising from use of this platform. We do not guarantee specific learning outcomes. Nothing in this clause limits liability for death or personal injury caused by our negligence or for fraudulent misrepresentation.
9.5 Governing Law
This agreement is governed by the laws of the Province of Alberta, Canada. Any dispute will be resolved in the courts of Alberta, Canada.
10.1 Two-Layer Safety System
- Layer 1: Instant keyword screening — blocks clearly harmful requests with zero delay
- Layer 2: Intent classification — understands context and blocks inappropriate requests that keyword filters miss
10.2 Strike System
After three blocked requests in a single session, the portal is paused and requires a 4-digit parent PIN to unlock. All blocked requests are logged and visible to parents in the Parent Dashboard.
10.3 What This Platform Does Not Contain
- No advertising of any kind
- No links to external social media
- No peer-to-peer communication between students
- No in-app purchases targeting children
10.4 UK Children’s Code Compliance
Privacy settings are set to high by default, data collection is minimised, and no profiling of children is performed.
10.5 Reporting Safety Concerns
If you believe your child has encountered inappropriate content, contact us immediately at safety@fbalearning.com. All child safety reports are treated as urgent.
We may update this policy from time to time. Material changes will be communicated to registered users by email at least 14 days before taking effect. The version number and effective date at the top of this page will always reflect the current version.
Previous versions available on request from privacy@fbalearning.com.
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information.
Your California Rights
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
- Right to Opt-Out of Sale: We do not sell personal information. We do not sell, rent, or trade the personal data of any user — adult or child — to third parties for commercial purposes. No opt-out is required.
- Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights.
To exercise California rights, email privacy@fbalearning.com with the subject line "CCPA Request." We respond within 45 days. We may need to verify your identity before processing a request.
Future Builders Academy maintains security safeguards designed to protect personal data against unauthorized access, disclosure, or loss. In the event of a data breach that creates a real risk of significant harm to individuals, we will:
- Report to the Office of the Privacy Commissioner of Canada as required under PIPEDA's mandatory breach reporting rules, as soon as feasible after determining the breach has occurred.
- Notify affected individuals directly as soon as feasible, with a description of what happened, the type of data involved, the steps we have taken, and the steps affected users can take to protect themselves.
- For EU/UK users: Notify the relevant supervisory authority within 72 hours of becoming aware of a breach, as required under GDPR Article 33 and UK GDPR.
- For users subject to COPPA: Notify affected parents or guardians promptly in the event of any unauthorized disclosure of children's personal information.
- Maintain a breach log consistent with our obligations under all applicable privacy legislation.
To report a suspected security incident: privacy@fbalearning.com. Security issues are treated as urgent and acknowledged within 24 hours.
By creating an account, the parent or legal guardian confirms they have read, understood, and accepted this Privacy Policy and Terms of Use on behalf of themselves and the child using this platform.