rigamaroo

Privacy Policy

Your family records deserve careful handling.

This policy explains how Rigamaroo collects, uses, shares, and protects information for our homeschool planning app, child profiles, record storage, uploads, and marketing site.

Last updated: July 1, 2026

At a glance

  • Rigamaroo is built for parents and guardians managing homeschool planning and records.
  • You choose what child, school, attendance, lesson, and document information to store.
  • Uploaded documents may include sensitive records, including immunization or exemption records.
  • We do not sell family or child personal information or use child data for targeted advertising.

Information we collect

  • Account information, such as your name, email address, sign-in provider, and authentication identifiers.
  • Family and homeschool information you enter, such as family display name, child profiles (name, date of birth, grade, avatar), school years, subjects, lessons, attendance, reading logs, practice activity, expenses, special events, and compliance record metadata.
  • Uploaded files you choose to attach to homeschool records. Rigamaroo supports eight record categories: Notices of Intent, Immunization Records, Attendance Records, Test Scores and Assessments, Umbrella/Cover School Documents, Curriculum Plans, Legal and Exemption Filings, and Other. Files in any of these categories may contain sensitive personal information about you or your child.
  • Support and communication information when you contact us, respond to emails, or join a waitlist.
  • Technical and usage information, such as device and browser data, log data, analytics events, and your U.S. state selection used to surface applicable homeschool compliance information.
  • Payment information may be processed by our payment provider if you purchase a subscription. We do not store full payment card numbers on our own systems.

How we use information

  • Provide, sync, secure, troubleshoot, and improve the Rigamaroo app and marketing site.
  • Create and manage accounts, family workspaces, subscriptions, records, uploads, downloads, and support requests.
  • Send service messages, account notices, security notices, product updates, and optional marketing communications.
  • Understand feature usage, diagnose errors, prevent abuse, enforce our terms, and comply with legal obligations.
  • Develop new planning, recordkeeping, and learning features using aggregated or de-identified information when practical.

Health and vaccination record uploads

  • Rigamaroo lets families store homeschool records. Some families choose to upload immunization records, vaccination records, exemption forms, or other documents that include health information about a child. These uploads are stored in the Immunization Records or Legal and Exemption Filings categories and are accessible only to you and the co-parents or caregivers you have invited to your family workspace.
  • Rigamaroo is not a health care provider, health plan, health care clearinghouse, school, or emergency medical record system. Do not use Rigamaroo for urgent medical needs, diagnosis, treatment, or as the only copy of a critical record.
  • Only upload health-related documents you are comfortable storing in Rigamaroo. Consider removing Social Security numbers, full medical histories, or other information not needed for your homeschool recordkeeping purpose before uploading.
  • We use uploaded files only to provide record storage, download, deletion, security, support, and related account features. We do not analyze the contents of uploaded health documents, use them for advertising, or sell them.
  • Because Rigamaroo does not sell consumer health data, we do not ask you to sign an authorization for the sale of health data.
  • Rigamaroo helps you organize records and can show you upcoming filing deadlines, but does not automatically submit documents to your state, school district, or any other authority. You remain responsible for timely filing with the appropriate parties.
  • If a security incident involves health information and applicable law requires notice, we will notify affected users and regulators as required.

Children and parent controls (COPPA)

  • Rigamaroo accounts are for parents and guardians only. Family members with account access hold one of three roles — owner, parent, or caregiver — all of which are adult roles. Children do not create their own accounts.
  • Child profiles, lesson assignments, practice activities, and record uploads relating to a child are created and managed entirely by the parent or guardian who controls the family workspace.
  • We do not knowingly collect personal information directly from children under 13. If we learn we have done so without verified parental consent, we will delete it promptly.
  • Parents and guardians can review, correct, download, or delete child information and uploaded files through the app at any time, subject to account security, backup, and legal retention limits.
  • We do not sell or share children's personal information for behavioral advertising, and we do not condition a child-related feature on collecting more information than is reasonably needed for that feature.
  • To request review, correction, or deletion of your child's information, or to withdraw consent, contact us at the address in the Contact us section below.

How we share information

  • Service providers that help us run Rigamaroo, such as cloud hosting, file storage, authentication, analytics, email, payment processing, security, and customer support providers. They are expected to protect information and use it only for services they provide to us.
  • Family members you authorize: when you invite a co-parent or caregiver to your family workspace, they will have access to your family's data within the app. You control who you invite and what role they hold.
  • Legal, safety, and compliance recipients when we believe disclosure is required by law, subpoena, or court order, or when needed to protect rights and safety, or to investigate fraud, security issues, or abuse.
  • Successors in a merger, acquisition, financing, reorganization, or sale of assets, subject to this policy or a separate notice before your information is used differently.
  • With your consent or direction.

Security and retention

  • We use administrative, technical, and organizational safeguards to protect personal information, including encrypted file transfer and storage, per-family isolated storage prefixes, and access controls that limit employee access to personal data.
  • No online service can guarantee perfect security. Keep your password and sign-in credentials secure, and contact us promptly if you believe your account has been compromised.
  • We keep personal information for as long as needed to provide Rigamaroo, maintain your account, comply with legal obligations, resolve disputes, prevent abuse, and support backups and security logs.
  • When you delete records or files, we will remove them from active product surfaces immediately and from backups within 90 days, except where longer retention is required by law or needed to resolve an active dispute or security issue.

Your choices and rights

  • You can update account, family, child, school, and record details directly in the app.
  • You can delete individual uploaded files and records at any time without deleting your account.
  • You can opt out of non-essential marketing emails using unsubscribe links or by contacting us.
  • You may request access to, correction of, deletion of, or a portable copy of your personal information by contacting us. We may need to verify your identity and account authority before acting on a request.

California privacy rights (CCPA/CPRA)

  • If you are a California resident, you have the right to know what personal information we have collected about you in the past 12 months, the purposes for which we collected it, and the categories of third parties with whom it was shared.
  • You have the right to request deletion of your personal information, subject to certain legal exceptions.
  • You have the right to correct inaccurate personal information we hold about you.
  • We do not sell or share personal information for cross-context behavioral advertising. If this changes, we will update this policy and provide a prominent opt-out mechanism before any such sharing begins.
  • Certain information we collect — including health-related documents uploaded about your child — may qualify as sensitive personal information under California law. We use sensitive personal information only to provide the Service you requested and not for inferential or secondary purposes.
  • We do not discriminate against users who exercise their California privacy rights.
  • To submit a California privacy request, email us at the address in the Contact us section with the subject line "California Privacy Request." You may also designate an authorized agent to submit requests on your behalf.

International users (GDPR)

  • If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal information on the following legal bases: contract performance (to provide the Service), legitimate interests (security, fraud prevention, product improvement), legal obligation, and consent where required for specific optional features.
  • Immunization records and other health-related documents you upload may constitute special category data under the GDPR. We process this data solely on the basis of your explicit consent given before upload, and strictly to store and display the document to you within the Service.
  • Your information may be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses approved by the European Commission as the transfer mechanism.
  • You have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You may also lodge a complaint with your local data protection supervisory authority.
  • For GDPR inquiries, contact us at the address in the Contact us section.

Analytics, cookies, and similar technologies

  • We may use cookies, local storage, analytics tools, and similar technologies to keep you signed in, remember settings, measure traffic, understand product usage, and improve performance.
  • Browser settings may let you block or delete some cookies, but parts of Rigamaroo may not work correctly without required storage or cookies.

Changes to this policy

  • We may update this policy as Rigamaroo changes. If changes are material, we will provide notice through the site, app, email, or another reasonable method before the changes take effect.
  • The updated policy will be effective when posted unless it states otherwise.

Contact us

For privacy questions, requests, or concerns, email privacy@rigamaroohq.com.