1. Who we are
TSM Academy is an educational app for children, used together with their parents. It is published by TSM Business Solutions SRL (RNC 1-33-76871-2), Calle C. Tomasa No. 02, Sector Bayahibe, San Rafael del Yuma, La Altagracia, Dominican Republic (“we”, “us”), which is responsible for the personal data described in this policy.
Contact for anything about your data: contact@tsmbusiness.com · +1 849 576 9999.
This policy covers the TSM Academy app on Android, iOS and Windows and the servers it uses. TSM Academy is not an accredited school and does not issue school documents.
2. Who uses the app
- The parent (the family administrator) creates the account, buys the subscription and creates the children's profiles. The account holder must be an adult. Children cannot create an account.
- Other adults of the family can be invited by the parent.
- The child uses the profile the parent created, on a family device, optionally protected by a PIN.
3. The data we process
About the parent and the other adults
- the e-mail address and name of the account, or the e-mail address and name received when you sign in with Google or Apple, and the language of the app;
- the family's time zone;
- the subscription: the product, the expiry date and the proof of purchase from Google Play or the App Store, kept to verify the subscription. We never receive card details;
- the referral code used, if any, and the family PIN, stored only in protected form (a hash);
- the devices connected to the family (a technical identifier and a session), so the account can be used on them.
About the child (entered by the parent)
- the first name or nickname chosen by the parent and the date of birth, used to adapt the content to the child's age and, if the parent turns it on, to show a birthday message;
- the country (never the city), the app language and native language, the school class and type of school and, if the family is moving, the destination country and school;
- passions and priorities, picked from fixed lists, and the choice of mascot (girl or boy), if the parent makes it;
- an optional profile PIN, stored only in protected form;
- learning activity: lessons, exercises, tests and results, study time, goals, projects and books read;
- messages in the family chat, and the virtual coin “Capi” with the transfers between family members;
- in games, only a nickname and the country appear in the leaderboard;
- conversations with the AI teacher, when that feature is available (section 5).
What we do not collect
- The voice never leaves the device. Speech-to-text and reading aloud are done by the phone, tablet or computer itself; only the recognised text reaches us.
- No advertising, no advertising identifiers, no third-party analytics or tracking.
- No precise location, no contacts, no city and no free-text notes about the child.
4. Why we process the data
- To provide the service the parent subscribed to: the account, the family, the children's profiles, lessons, exercises, games and progress.
- To answer the child's questions with the AI teacher (section 5).
- To manage the subscription and meet our legal obligations.
- To send the parent the child's progress report by e-mail.
- For security and to prevent abuse, for example reviewing AI answers that someone reported, and technical server logs.
We do not sell personal data and do not use it for advertising.
5. The AI teacher
The AI teacher is an optional feature that answers children's free questions using artificial intelligence. It is switched on only when the conditions below are in place. Saved lessons and exercises never use AI in real time.
- Provider: Groq, Inc. (United States). Its contract does not allow it to use our requests or the answers to train its models. Groq may keep requests for up to 30 days only to investigate abuse, unless its “Zero Data Retention” setting is on; we turn that setting on before the AI teacher is switched on.
- What the provider receives: the child's age, the app language, the country, class and type of school, the passions and priorities from the fixed lists, a short summary of the conversation, a short summary of progress (subjects, topics and recent scores) and the question. Never the child's name, date of birth, city, e-mail address, PIN or any identifier. E-mail addresses and phone numbers typed in a question are removed before it is sent.
- Every question and every answer passes an automatic educational filter before the child sees the answer.
- If a child attaches a photo or a document to a homework question, it is used only to answer that question and is not stored by us.
- Any AI answer can be reported from the app. The report contains only the answer and is reviewed by our team.
- Each child has a limited monthly allowance for the AI teacher; when it is used up, the child continues with the saved lessons and exercises.
- The AI teacher can make mistakes. It does not replace a teacher or a parent.
6. Who processes the data for us
- Supabase, Inc. — sign-in (the account's e-mail address and password, or sign-in with Google or Apple).
- Neon — the database, on servers in the United States.
- Google Cloud (Google LLC) — our application servers, in the United States and Belgium.
- Groq, Inc. — the AI teacher (section 5), in the United States.
- Our e-mail service provider — sending the progress report.
- Google Play and the Apple App Store — payment of the subscription, under their own terms.
These providers process the data only to provide their service to us. Your data may therefore be processed outside your country, including in the United States.
7. How long we keep the data
- For as long as the account exists. The parent can delete a child's profile or the whole account at any time (see Delete your account).
- After the subscription expires, the account and the profiles remain and the parent receives each child's progress report by e-mail. The educational data (lessons, tests, conversations with the AI teacher, projects, study time) is deleted 3 months after expiry, unless the subscription is renewed.
- When the account is deleted, the family's data is deleted from our database immediately and the sign-in account within 30 days.
- Technical server logs are kept for up to 30 days.
8. Your rights
The parent can ask, for themselves and for their children, to access the data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent. In the app:
- correct a child's data in Child settings;
- download the progress report (PDF or CSV);
- delete a child's profile in Child settings → Danger zone;
- delete the account in Settings → Delete account.
For any other request, write to contact@tsmbusiness.com. We answer within 30 days. You also have the right to complain to the data protection authority of your country.
9. Children and parental consent
- TSM Academy is made for children, but only an adult — a parent or legal guardian — can create the account, create the children's profiles and buy the subscription.
- By creating a child's profile, the parent agrees, on the child's behalf, to the processing described in this policy. The parent decides what is entered in the profile and can change or delete it at any time.
- Children use the app under their parents' supervision. The parent area is protected by the parent's PIN, and each child's profile can have its own PIN.
- The app has no advertising, and a child cannot buy anything: the subscription is bought by the parent.
- We do not knowingly collect data from a child without a parent. If you believe a child created an account on their own, write to us and we will delete it.
10. Security
All communication with our servers is encrypted (HTTPS). PINs are stored only in protected form and the proof of purchase is encrypted. Access to data is checked on the server for every request, and the AI provider receives only the minimum described in section 5.
11. Changes to this policy
When we change this policy we update the date at the top of the page and, for important changes, tell parents in the app before they apply.
12. This website
tsmbusiness.com uses no cookies, no analytics and no forms. It is hosted on Firebase Hosting (Google), which processes technical data such as your IP address only to deliver the pages and keep them secure.