Effective July 29, 2026 · Last updated July 2026
Lassoed is a homeschool planning and record-keeping app for parents and guardians, made by Daybloom Studio LLC, a Texas limited liability company (“Lassoed,” “we,” “us”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. Lassoed is built for adults: parents enter information about their own children, and children do not use Lassoed. The Service is offered only in the United States, and your information is processed in the United States.
This policy covers the Lassoed mobile app and website (the “Service”). Using the Service means this policy applies to you. Our Terms of Service also apply.
Free-text fields (like lesson notes and reflections) hold whatever you choose to write. Some parents include health or learning-difference details; we treat all child-related records as sensitive information — see “Sensitive information” below.
We do not collect precise location, contacts, browsing history, or advertising IDs, and we do not track you across other companies’ apps or websites. Analytics does not record your screen or the content of your notes.
Records about your children — and anything health-related you choose to include in notes or reflections — are sensitive. By creating an account and entering this information, you direct us to process it, and consent to our processing it, for the purposes described in this policy. We hold it to a higher bar: it is used only to provide the Service, never for advertising, never sold, never used to train AI models, and isolated to your account.
You can withdraw this consent at any time — remove the relevant records in the app, or email legal@daybloom.co to have them erased or your account deleted. We will stop processing withdrawn information promptly, within 15 days.
We use personal information only to:
We do not use your personal information for advertising, and we do not sell it.
Lassoed’s voice transcription, quick-entry assistant, weekly insights, and task icons are powered by third-party AI providers that process data on our behalf. When you use these features, the relevant content is sent to one or more of the AI providers listed in “Who we share information with”: your students’ first names and grade levels, lesson titles, dates and statuses, learning objectives and subject names, your notes and descriptions, previous insights, and the messages you type or speak. Birthdays are never included.
If you ask the assistant for book or curriculum ideas, a search query based on your message may be sent to a web-search partner to find suggestions.
Our AI providers act under data-processing terms that prohibit them from using your content to train their models. They may retain content briefly — generally up to 30 days — for security and abuse monitoring, then delete it, except where content is flagged for safety review or retention is required by law. We do not use your personal information to train large language models or any other AI models, and we do not permit our providers to do so.
We log AI usage metadata (such as timing, token counts, and internal record IDs) to our analytics provider to monitor cost and reliability. The content of your prompts, notes, and insights is not sent to analytics.
AI-generated content can be wrong. Review it before relying on it, and report anything that seems off to legal@daybloom.co.
Here is the full lifecycle of a voice note: you record on your device; the audio is sent over an encrypted connection to our servers in short chunks; our servers process it in memory only — audio is never written to our storage or database — and pass it to our transcription provider (OpenAI) solely to convert it to text. As soon as the transcript comes back, the audio is gone from our systems. Under OpenAI’s API terms, audio submitted for transcription is not used to train its models and is not retained after processing.
The transcript appears in your input for you to review, and is stored only if you keep it — for example, by saving the tasks it proposes. We do not create voiceprints and do not use recordings to identify anyone. A temporary copy of a recording may remain in the app’s private cache on your device until the operating system clears it.
We share personal information only with service providers that process it on our behalf, under agreements that limit them to processing on our instructions with protections at least as protective as this policy:
| Provider | What they do for Lassoed | Data involved |
|---|---|---|
| Supabase | Hosting, authentication, database, and file storage | Account and family data |
| Anthropic | AI processing (assistant and insights) | Content described in “AI features” |
| AI processing and web search for assistant suggestions (paid API tier) | Content described in “AI features”; search queries derived from your messages | |
| OpenAI | Voice transcription | Voice audio and transcripts (transient) |
| PostHog | Product analytics | Email, account IDs and settings (including the state you entered and your timezone), device and usage data |
| Vercel | Website hosting | Standard web server logs |
None of these providers may use your information for their own purposes, including advertising or AI training. Signing in with Apple or Google is governed by those providers’ own terms; we receive your name and email address from the provider you choose. Beyond service providers, we disclose personal information only: if required by law or valid legal process (we will tell you unless we are legally barred from doing so); to protect the safety, rights, or property of you, us, or others; as part of a merger, acquisition, or sale of assets (we will notify you before your information becomes subject to a different privacy policy); or at your direction.
We have never sold personal information, and we will not sell it — including sensitive personal information and information about children. We do not share personal information for targeted or cross-context behavioral advertising.
Lassoed is designed for parents and guardians and is not directed to children under 13. We do not knowingly collect personal information directly from children. Information about your children — such as first name, birthday, grade level, and learning records — is provided to us by you, the parent or guardian, and is used only to provide the Service to you.
You can review and edit your children’s information at any time in the app, and have it permanently erased by emailing us or by deleting your account. We do not sell children’s information, do not use it for advertising, do not use it to train AI models, and do not permit our service providers to use it for their own purposes. If we learn that a child under 13 has directly submitted personal information to us, we will delete it promptly — contact us at legal@daybloom.co.
| Data | How long |
|---|---|
| Account and profile | While your account is active; deleted within 30 days after your account is deleted |
| Student profiles and learning records | While your account is active. Records you remove in the app (including removed students) are hidden but kept until your account is deleted or you ask us to erase them |
| Daily reflections | While your account is active |
| AI-generated insights | Kept while your account is active (regenerating a week replaces that week’s insight, and recent insights personalize the assistant); deleted with your account |
| Voice recordings | Not stored — deleted from our systems immediately after transcription |
| Assistant conversations | On your device only; cleared automatically after about 14 days |
| Analytics data | While your account is active; we have our analytics provider delete your profile as part of account deletion |
| Server logs | Short-lived operational metadata only |
| Backups | Encrypted backups are purged on a rolling cycle, normally within 30 days of deletion |
We do not keep personal information indefinitely or longer than needed for the purposes described here. If we are legally required to keep specific information longer (for example, under a legal hold), we keep only what the law requires and delete it when the requirement ends. Because homeschool laws may require you to keep records for years, export what you need before deleting it — deletion is permanent.
No matter which state you live in, you can:
To exercise any right, use the app or email legal@daybloom.co from your account email address (that is also how we verify it is you — we will never ask you for more information than we already have). We will respond within 45 days; if we need more time, we may take one 45-day extension and will tell you why. Requests are free up to twice a year. We will never discriminate against you for exercising your rights.
Appeals: if we decline a request, you can appeal by replying to our decision (or emailing us with “Appeal” in the subject) within 60 days. We will decide your appeal within 60 days and explain why. If you are still unsatisfied, you can submit a complaint to your state Attorney General — most accept consumer complaints online (for example, Connecticut residents can file at ct.gov/ag).
Because we do not sell personal information or use it for targeted advertising, universal opt-out signals such as Global Privacy Control have nothing to switch off — but your deletion and access rights apply regardless. We do not respond to browser Do Not Track signals, and we do not permit third parties to collect information about your activity over time and across other sites or apps through the Service.
Your data is encrypted in transit. Each family’s data is isolated to its own account, enforced with database row-level security and per-request ownership checks in our backend. Access to production systems is restricted, and record content is stripped from our production logs. No system is perfectly secure, but if a breach affects your personal information, we will notify you and the relevant regulators as required by law, without undue delay.
When we change this policy, we will update the date at the top. For material changes, we will notify you at least 15 days before they take effect — by email or in-app notice — so you can review them and, if you disagree, export your data and delete your account before they apply. Changes are prospective only.
Questions, requests, or complaints about privacy: legal@daybloom.co. We would rather hear about a concern early, so please reach out.