Privacy Policy

BHED ("Black History Every Day") is an educational platform dedicated to preserving and sharing Black history, culture, and legacy. We are committed to responsible data stewardship, especially for our diverse community that includes students, educators, and families.

For privacy questions or data requests, contact us at: privacy@bhed.app

We store the minimum data required to run the platform:

Account Data (registered users only)

• Email address — used for login, reminders, and deletion requests
• Display name — optional; defaults to an auto-generated anonymous alias if left blank
• Privacy preference settings (all default to off)
• Account creation date

Learning Activity Data

• Quiz attempt results: score, date, and number of attempts
• Learning track progress: current day, streak count, last completion date
• Day-by-day completion records for streak tracking

Optional / Conditional Data

• Reminder time and timezone — only stored if you opt in to daily reminders
• Public display name — only stored if you choose to set one
• Community visibility preferences — all off by default

Guest Data (no account required)

• If a guest provides their email after completing a quiz, we store: email address, quiz score, date, and total questions
• This is used solely to notify you about BHED and will not be sold or shared

Every piece of data we store has a specific, limited purpose:

• Email — to authenticate your account, send reminders you requested, and fulfill deletion requests
• Quiz results — to show you your performance history and power the Leaderboard if you opt in
• Track progress — to resume your learning journey and maintain your streak
• Reminder time/timezone — to send your daily email at the time you chose
• Privacy settings — to enforce your choices across all community features
• Guest email — to follow up with interested non-registered users (you can opt out at any time)

If you opt in to daily track reminders:

• We store your preferred reminder time (e.g., 9:00 AM) and IANA timezone (e.g., America/Chicago)
• This data is used exclusively to send your requested daily emails
• It is never shared with third parties
• You can disable reminders at any time from your Account or Privacy settings
• You can permanently delete all reminder data from the Privacy & Data page

Reminders are purely optional. Disabling them has no effect on your learning experience or access to content.

BHED uses Firebase Analytics (Google) to understand aggregate platform usage — such as which features are popular and how users navigate the app. This helps us improve content and design.

• Page views and navigation events are tracked anonymously
• We track custom events (e.g., quiz completed, streak maintained) without personally identifying information
• Firebase Analytics may use device identifiers — see Google's Privacy Policy for details
• Analytics data is never linked to your individual email or user account in any way we surface or share

We do not use third-party advertising networks or tracking pixels.

When leaderboard participation is enabled:

• Your streak count appears on the community rankings page
• Your public display name (or anonymous alias) is shown — never your email
• Turning off leaderboard participation removes you from rankings immediately
• You can change your display name at any time from Privacy settings

If you have not set a display name, BHED auto-generates an anonymous alias from your user ID. This alias is consistent but not traceable back to your real identity.

When you choose to share BHED content on social media:

• Only the specific content you reviewed before sharing is included
• No account identifiers, emails, or tracking codes are added automatically
• You will see a one-time privacy notice before your first share explaining this
• Sharing is entirely voluntary — it never happens without your explicit action

BHED is not responsible for the privacy practices of social platforms you choose to share to (Instagram, Twitter/X, WhatsApp, etc.).

BHED administrators have access to aggregate platform data to maintain the service. Administrative access is governed by internal security policies:

• Admin exports of user progress data use anonymized IDs (HMAC-SHA256), not raw emails
• Including real email addresses in admin exports requires elevated permission and audit logging
• All sensitive admin actions are logged to a secure, append-only audit trail
• Rate limiting is applied to all data export operations
• Access to audit logs is restricted to super-admin level only

Individual user data is never shared with third parties for commercial purposes.

You have the right to access, correct, and delete your personal data. BHED provides built-in tools to exercise these rights:

• Download your data — available at any time from Privacy & Data settings
• Delete reminder data — removes stored time, timezone, and opt-in status instantly
• Opt out of all community features — toggle off any setting at any time
• Request full account deletion — submit a deletion request from your Account settings

Deletion requests are processed within 30 days. After deletion, a 7-day grace period allows cancellation before data is permanently purged.

• BHED does not knowingly collect personal information from children under 13 without verifiable parental consent
• All community/social features (leaderboard, sharing, public display name) are opt-in and off by default
• Schools using BHED in classroom settings should ensure compliance with FERPA and applicable state laws
• If you believe a child under 13 has created an account, contact us at privacy@bhed.app and we will delete the account promptly
• We recommend parental guidance for users under 13

For educational institution use, we are happy to discuss data processing agreements. Contact us at schools@bhed.app

We implement reasonable security practices to protect your data:

• Authentication is handled by a secure, industry-standard platform
• Sensitive admin operations use HMAC-keyed anonymization
• Audit logging tracks all privileged actions
• Rate limiting is applied to sensitive endpoints
• We do not store passwords — authentication is token-based

No system is perfectly secure. If you discover a security vulnerability, please disclose it responsibly to security@bhed.app

When we make significant changes to this Privacy Policy, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users via email for material changes
• Maintain the spirit of data minimization in all updates

Continued use of BHED after a policy update constitutes acceptance. If you disagree with changes, you may delete your account.

• General privacy questions: privacy@bhed.app
• School / institution inquiries: schools@bhed.app
• Security disclosures: security@bhed.app
• Account deletion: use the in-app deletion flow or email privacy@bhed.app