Privacy Policy
Last updated: October 31, 2026
BrightPath ("we", "us") helps schools share what happens in class with parents. It is made up of the BrightPath app (Android, iOS and web), a small lesson-recording pendant worn by teachers, and the servers behind them. This policy explains what information we handle, why, and the choices you have.
BrightPath is used through schools. The school decides which teachers, classes and students are set up in BrightPath and enters the student records. For that information we act on the school's behalf, so you can also contact your school about it.
Information we collect
| What | Details | Where it comes from |
|---|---|---|
| Account details | Name, email address, username, sex, role (parent, teacher or school admin) and school. Passwords are stored only as a one-way hash. | You, when you sign up, or your school |
| Student records | Child's name, sex, birth date, student code, section, subjects and adviser. | The school |
| Parent–child link | The one-time code and birth date used to connect a parent to a child, and when it was used. | You and the school |
| Classroom recordings | Audio of the lesson recorded by the teacher's pendant, and the text transcript made from it. | The teacher's pendant |
| School content | Lesson summaries, assignments, quizzes, exams and events. | Teachers and the AI summary feature |
| App activity | Lessons you have opened, activities you mark done, saved items, notifications and your notification settings. | Your use of the app |
| Device and security data | Sign-in sessions (date and device type), push notification token, and IP address when you use the service. | Your device |
Children do not have BrightPath accounts. We do not use cookies for advertising or tracking. The app keeps your sign-in and display settings on your device.
Classroom recordings
- The pendant records the teacher's lesson and uploads it over Wi-Fi to our server.
- The audio is sent to a transcription service and the audio file is deleted right after it is transcribed.
- The transcript is kept with the lesson so its summary can be made and updated. Only teachers and school staff can see transcripts. Parents see only the summary.
- Schools are responsible for telling students, parents and staff that lessons are recorded, and for any consent their policies require.
How we use information
- To run BrightPath: create lesson summaries, show activities and calendars, and connect parents to their child's class.
- To send notifications and emails you need, such as new lessons, due dates and password reset codes.
- To keep accounts safe: verify sign-ins, limit repeated attempts, and investigate misuse.
- To fix problems and improve the service.
We do not sell personal information, show ads, or use it to build advertising profiles.
Who we share it with
Inside BrightPath, people see only what their role allows. Parents see their own linked children, teachers see their own classes, and school admins see their own school.
We use these service providers to run BrightPath. Each one receives only what it needs for its task:
- Render and our database provider host the server and its data.
- AssemblyAI transcribes lesson audio.
- Google (Gemini API) writes lesson summaries from transcripts.
- Brevo sends account emails, such as password reset codes.
- Expo, Google Firebase and Apple deliver push notifications.
- Cloudflare hosts this website and the web app.
Some of these providers process data outside the Philippines. We may also disclose information when the law requires it.
How long we keep it
- Lesson audio: deleted as soon as it is transcribed.
- Password reset codes: valid for 15 minutes.
- Sign-in sessions: end after 90 days, or sooner when you sign out.
- Accounts and school records: kept while the school uses BrightPath. Records are archived rather than erased so school history stays intact.
- Closed accounts: when you stop using BrightPath or your school removes you, your account is disabled and archived. It can no longer sign in, its sessions end, and it stops receiving notifications.
How we protect it
- All connections use HTTPS, and passwords are stored only as hashes.
- Access is limited by role and school. Parents can only reach a child with a one-time code from the school.
- Sessions can be signed out per device and are ended everywhere when an account is disabled or its password is reset.
- Sign-in, password reset and child connection are rate limited to stop guessing.
- Each recording pendant uses its own key, which works only on that device.
Your rights
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) you have the right to be informed, to access your information, to have it corrected, to object, to have it erased or blocked, to data portability, and to be compensated for damage. To use these rights, email us. For student records, you can also contact your school. You may file a complaint with the National Privacy Commission.
Changes
We will post any change to this policy on this page and update the date above. For important changes we will also tell you in the app.
Contact us
BrightPath Solutions
hello@brightpath-solutions.online