Privacy Policy

Hopeful Child Foundation, LLC, an Arizona limited liability company (“we”), runs hopefulchild.com. This page says what we collect, why, who helps us, how long we keep it, and what you can ask us to do. We wrote it in plain words on purpose.

Children come first

The desk is made for children to read with a grown-up nearby. We do not knowingly collect personal information from a child. There is no child account and no child sign-in. Design Your Future asks for a U.S. state only, so the letter names the right legislature. We write the letter and link to that legislature’s official page. We do not file it or mail it. The letter is signed “A young person in [state].”

You must be 18 or older to create an account. Accounts are for parents, guardians and educators.

If you think a child typed something personal into the site (a name in an idea, for example), write us. We do not save that text, and we will delete anything we find that came from a child.

What we collect, and why

Adult subscribers

Stripe collects the payer’s email, name, card, and billing details on its own checkout page. We keep a small record so your plan works: the Stripe customer and subscription IDs, the plan, its status, and the renewal date. We can see the receipt email in Stripe when you ask us a billing question. The email you type on our Subscribe page is passed straight to Stripe’s checkout page and is not sent to our server.

Contact form

A grown-up’s name, email, organization (optional), and message. We use it only to reply. It is delivered to our inbox by our email provider (Resend).

Restore access and sign-in links

When an adult asks to restore a plan or sign in to a school, we take the email typed, look it up in Stripe or in our school records, and email a one-time link. The link works for 15 minutes.

Schools

For a school license we keep the school name, the admin’s email, the number of seats, billing type, status, renewal date, and when the admin accepted our terms. For each seat we keep the teacher’s email, when it was added, and the last sign-in time. Billing details, tax ID, and invoices are handled by Stripe. A tax-exempt certificate an admin uploads is emailed to our inbox for review and is not kept on our servers. All of this comes from adults. We never collect a student’s name, email, or school record.

Agent API keys

If a paid adult or teacher creates an API key, we store only a scrambled (hashed) version of the key, with the plan, the subscription and seat it belongs to, and when it was made.

Educator brief

Text you paste or upload goes to our server and to xAI to write the briefing or outline. We do not save that text.

Usage counts

We count events such as “educator brief made” or “class pack downloaded” in Cloudflare Analytics Engine. Each count holds only the event name and a few fixed labels (for example the plan, the reading age, or whether it worked). No cookie ID, no IP address, no browser details, and nothing you type.

Explain and Design Your Future

The words you type, the reading age, the language, and the state go to our server and to our AI provider (xAI) so a story or letter can be written. Before the text is sent, we remove identifying details such as names, emails, phone numbers, street addresses, and school names. We do not save that text on our servers. Please leave names and personal details out.

Family settings

Reading age, the state you follow, language, topics, and saved or read stories stay in this browser’s local storage. We do not get a copy. Clearing site data removes them.

Basic web logs

Like any website, our host (Cloudflare) handles your IP address, browser type, and the pages you request so the site can load and be protected from abuse. To stop abuse we also keep short counters tied to an IP address or an email (for example, how many sign-in links were asked for). They delete themselves within an hour. We do not use any of this to build a profile of you.

Cookies and browser storage

Everything below is needed for the site to work. We use no advertising or analytics cookies.

hc_license

Set only after an adult pays or a teacher signs in to a school seat. A signed, secure cookie holding the plan, Stripe customer and subscription IDs, the renewal date, and for a teacher the seat ID. It lasts until about 60 days after the paid period ends.

hc_free

Counts the three free custom explains. It holds a number and nothing else. It lasts one year.

hc_edu

Counts free educator briefs for today. It holds a date and a number and nothing else. It lasts two days.

hc_school_admin

Set only when a school admin opens a sign-in link. A signed, secure cookie that keeps the admin signed in to manage seats. It lasts 12 hours.

Session storage

After a school checkout, a one-time mark so the welcome page records the purchase once. It clears when the tab closes.

small-print-family

Local storage, not a cookie. Your family settings, kept on this device only.

Stripe

Stripe’s checkout and billing pages set their own cookies on Stripe’s sites for payments and fraud prevention.

We set no optional cookies, and we do not sell or share personal information, so a Global Privacy Control signal has nothing extra to turn off. We load no third-party scripts, and our fonts are served from our own site. We count how often tools are used, in total only, as described under Usage counts. No cookie ID, no pixel, no IP address, and nothing you paste. Text you paste into the educator brief is sent to xAI to make your result. Hopeful Child does not store it. More detail lives on our cookies page.

Who helps us

These companies process information for us to run the desk. Each has its own privacy policy.

• Stripe: payments, receipts, and the billing page. Stripe privacy
• xAI: writes Explain stories and educator briefs, and rewrites and polishes Design Your Future letters. It receives only the text needed for that request. xAI privacy
• Cloudflare: hosting, security, storage of subscription, school, seat, and API key records, and the usage counts. Cloudflare privacy
• Brevo (main) and Resend (backup): send sign-in links, school invites, and billing notices to the adult’s email. Resend also carries contact form messages to our inbox. Brevo privacy Resend privacy

Bill information comes from public sources (GovTrack, OpenStates, and legislature websites). We ask them for public bill data and send nothing about you.

Voice input is turned off. There is no Speak button, and the site does not use your microphone or receive audio. Ideas and questions are typed.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose information only to the providers above, when the law requires it, or to stop fraud or abuse. If our business ever changes hands, this policy would still apply to what we already hold.

How long we keep it

• Subscription status records: deleted automatically about 400 days after the last update. Checkout records: 30 days.
• School, seat, and API key records: deleted automatically about 400 days after the last update.
• Tax-exempt certificates: the emailed copy, kept as long as tax records require.
• Sign-in links: 15 minutes. Abuse counters: one hour or less.
• Usage counts: about three months, kept by Cloudflare.
• Payment records at Stripe: as long as tax and accounting law requires.
• Contact messages: as long as needed to answer and keep records.
• Explain, educator brief, and Design Your Future text: not stored by us.

Security

The site runs on HTTPS. License cookies are signed and cannot be read by page scripts. Keys stay on the server. Card numbers never touch our systems. No system is perfect, and if a breach affects your information, we will tell you as the law requires.

Your choices

You can ask to see, correct, delete, or get a copy of personal information we hold about you. Write hope@hopefulchild.com, ideally from the email on your receipt, so we can confirm it is you. We answer within 30 days and will never charge you more or treat you worse for asking. These choices are open to everyone, wherever you live.

You can cancel a plan anytime from the billing page, and you can clear cookies and site data in your browser settings.

Visitors outside the United States

We are based in the United States. Information you send through the desk is processed in the United States.

Changes

When this policy changes, we update the date below. If a change matters for subscribers, we will email the receipt address before it takes effect.

Contact

Hopeful Child Foundation, LLC, an Arizona limited liability company
Mailing address: 1968 S. Coast Hwy, Suite 2461, Laguna Beach, CA 92651
hope@hopefulchild.com

Last updated October 9, 2026.